Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
File:                     LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft (raw, json)
Hash identifier:          YrgJoT/8i/Dfm1IZlbDleNNHoGkQXZUZtiEstL2z1j0=
Subject key identifier:   59:95:FD:7D:B4:F9:11:29:DF:B3:13:53:BF:CD:66:AB:2F:7D:60:F4
Authority key identifier: 2C:B7:B4:09:9A:A9:1B:F0:5A:17:6A:45:FA:1E:B7:67:E9:B5:A2:AF
Certificate issuer:       /CN=F36A9F58AF/serialNumber=2CB7B4099AA91BF05A176A45FA1EB767E9B5A2AF
Certificate serial:       D3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LLe0CZqpG_BaF2pF-h63Z-m1oq8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
Manifest number:          D2
Signing time:             Sat 03 Oct 2026 05:29:01 +0000
Manifest this update:     Sat 03 Oct 2026 05:29:00 +0000
Manifest next update:     Mon 05 Oct 2026 05:29:00 +0000
Files and hashes:         1: LLe0CZqpG_BaF2pF-h63Z-m1oq8.crl (hash: oU6fu1YiGe8Mst5hzkg7p7WAJaYbEQdt8ZvHsCOHGlU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LLe0CZqpG_BaF2pF-h63Z-m1oq8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 211 (0xd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9F58AF, serialNumber=2CB7B4099AA91BF05A176A45FA1EB767E9B5A2AF
        Validity
            Not Before: Oct  3 05:29:00 2026 GMT
            Not After : Oct  5 05:29:00 2026 GMT
        Subject: CN=6ac0929d-d842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ed:18:0e:f8:8a:bc:13:09:7b:2f:67:44:de:
                    09:4b:f2:bc:c6:5c:82:82:98:73:55:9f:06:94:61:
                    26:f2:44:8f:26:b9:ea:95:78:77:49:e2:6f:7f:69:
                    2d:54:c6:5f:27:c5:7d:70:1e:10:59:34:ac:f6:a6:
                    53:ee:6f:bb:2d:12:90:67:19:89:26:3e:d0:20:e3:
                    ed:b2:8b:53:74:b3:d8:27:7e:17:97:76:dc:8f:05:
                    c0:f3:9f:c9:46:3b:05:88:e5:76:95:fd:8a:22:39:
                    b2:89:fc:49:03:32:39:37:88:0c:13:54:0d:67:cd:
                    17:a9:cb:d5:4c:27:a2:7a:89:bb:99:28:81:98:69:
                    28:4e:f1:cc:10:f6:44:11:2a:cc:b1:10:1d:10:61:
                    52:af:d4:9d:5f:63:56:a4:b7:cb:5b:12:ef:1c:91:
                    75:a5:c8:21:c8:4a:0b:f8:8b:79:d9:25:7f:3a:c2:
                    6b:07:e7:8b:e4:f9:4f:ec:fb:32:63:19:1b:98:b3:
                    bc:44:7c:8c:86:e4:f2:26:38:73:aa:74:70:7e:27:
                    ba:ed:5d:ca:00:1b:ee:cd:c5:87:f4:42:85:1a:86:
                    1a:00:4e:fe:48:8c:f0:13:8a:ba:8e:13:7e:1e:8c:
                    a6:f6:b3:5b:8b:a5:4e:2e:e2:7b:4a:25:6d:4b:0a:
                    ba:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:95:FD:7D:B4:F9:11:29:DF:B3:13:53:BF:CD:66:AB:2F:7D:60:F4
            X509v3 Authority Key Identifier:
                keyid:2C:B7:B4:09:9A:A9:1B:F0:5A:17:6A:45:FA:1E:B7:67:E9:B5:A2:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LLe0CZqpG_BaF2pF-h63Z-m1oq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9F58/2674144C1D5E11F1BB6B757FDAE4EC9C/LLe0CZqpG_BaF2pF-h63Z-m1oq8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:93:20:f3:34:e0:f2:23:ee:ab:66:6a:38:e4:7b:cb:ac:29:
         f1:29:66:73:40:5c:6a:19:89:9c:af:3a:9a:3f:05:78:ab:32:
         e9:77:90:48:2f:78:e8:92:24:81:f7:ee:a3:b6:f1:01:f6:a4:
         92:42:11:6b:40:02:b9:06:b8:c5:67:e2:17:1c:ae:b3:e4:e3:
         0c:f7:bf:7f:e7:e4:61:9c:ff:7a:41:6b:18:01:47:2b:8a:15:
         f8:3e:b6:e8:be:03:a2:37:d0:24:16:61:2e:2a:5b:d2:3a:69:
         78:f0:ae:cc:bb:a5:52:dc:83:e0:3e:45:e1:07:48:e5:60:87:
         48:f0:b6:76:f1:ed:12:96:ac:60:6c:c4:0b:ec:1f:97:bf:36:
         bb:83:6c:0a:6a:b1:44:09:16:c7:02:59:38:f9:73:90:e6:ce:
         93:51:76:9b:20:fc:40:f3:2c:27:5a:cd:8a:8d:15:56:44:05:
         59:44:64:5c:27:d3:9e:e8:82:4a:a1:91:b2:67:81:25:6c:d2:
         84:46:4a:f0:c8:e2:dd:15:65:99:71:01:68:02:15:fa:27:89:
         fa:fc:14:b5:8a:62:14:21:b0:78:c8:e3:f2:5a:ce:76:5d:61:
         a4:f7:bb:e9:f3:28:03:c9:73:6f:ce:7c:e4:6b:82:63:a5:31:
         3f:84:22:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----