Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
File:                     PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft (raw, json)
Hash identifier:          taC1cz1REYyxaYXtKvNkw7Qt6IWTw14JK9BTLxZfTKA=
Subject key identifier:   4F:F6:30:D9:2D:08:06:BF:0F:ED:AB:F3:04:F7:0C:17:44:D1:EC:00
Authority key identifier: 3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F
Certificate issuer:       /CN=F36AAA81AF/serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
Certificate serial:       032B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
Manifest number:          032B
Signing time:             Tue 06 Oct 2026 04:22:30 +0000
Manifest this update:     Tue 06 Oct 2026 04:22:29 +0000
Manifest next update:     Thu 08 Oct 2026 04:22:29 +0000
Files and hashes:         1: PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl (hash: YI3tkUqS2oE4Or6BnUAcwRWc1rpaFTILRdVQ+crh6DU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 04:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 811 (0x32b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AAA81AF, serialNumber=3C8E0512E276BADE5ADC0C81C65934E0343C601F
        Validity
            Not Before: Oct  6 04:22:29 2026 GMT
            Not After : Oct  8 04:22:29 2026 GMT
        Subject: CN=6ac47786-68dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:21:28:6e:6b:4d:c4:90:64:ad:81:cc:38:
                    4c:b0:ac:18:a1:08:30:e4:81:e6:7e:27:ed:83:74:
                    a1:14:a7:24:47:70:c7:7d:0c:30:f9:e5:b3:34:80:
                    29:2c:ef:bf:24:bc:2f:e4:59:35:f2:02:7a:e1:f7:
                    65:c0:40:d1:ef:d8:c2:1f:87:d2:97:90:cc:94:c6:
                    8f:bb:3d:a8:e5:4e:14:87:40:54:10:15:ec:fb:88:
                    cf:bf:43:0e:6d:29:35:e2:c5:e2:9a:37:f7:f7:45:
                    96:13:f4:4e:12:a3:f5:3b:08:4f:e2:da:41:56:51:
                    6a:60:53:43:d3:eb:29:7e:84:9e:64:2a:f3:54:39:
                    81:86:5d:50:64:53:93:e2:e7:7b:66:0a:11:25:94:
                    59:2a:78:05:e4:d9:74:fa:01:0d:63:49:c8:68:7e:
                    55:54:53:31:fe:93:29:ce:41:03:13:e3:76:71:c6:
                    1d:6e:b6:88:f3:5b:f0:fc:22:09:be:fa:40:a5:b1:
                    4e:a6:69:ce:03:46:f5:cb:25:8b:87:23:fc:cf:71:
                    d9:df:7c:5d:15:87:93:b5:8d:d1:2b:42:84:9c:b6:
                    21:2d:c4:92:1c:f6:f7:7b:8f:e3:29:d3:53:7d:52:
                    53:d5:3e:07:ed:93:11:18:6d:75:74:34:03:63:79:
                    a6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F6:30:D9:2D:08:06:BF:0F:ED:AB:F3:04:F7:0C:17:44:D1:EC:00
            X509v3 Authority Key Identifier:
                keyid:3C:8E:05:12:E2:76:BA:DE:5A:DC:0C:81:C6:59:34:E0:34:3C:60:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AAA81/94D74B4E4F2311EF9CE27067762E951A/PI4FEuJ2ut5a3AyBxlk04DQ8YB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:bc:33:45:63:52:3f:da:18:20:af:fe:61:10:63:ec:04:4c:
         93:3a:12:ee:12:43:58:e1:ac:8d:04:bf:9f:dd:df:94:c0:02:
         8d:38:1b:24:84:93:5f:1f:9b:0a:9b:f6:58:a5:c3:45:82:9f:
         b6:fe:a8:66:f4:cb:28:b9:1e:a1:ed:b7:c2:96:39:7a:4c:20:
         d0:21:dc:18:7d:5c:e6:c3:ce:d0:51:7a:21:ea:cc:7b:78:f1:
         75:f6:5c:6e:0b:b8:88:02:e5:c3:a3:ed:83:91:f7:ff:e3:68:
         57:f2:29:60:03:d5:2e:be:f5:0a:e3:ac:bb:a2:b8:c9:63:74:
         83:55:f9:77:5b:8c:ef:7e:4d:43:e5:41:ef:e9:28:e6:ce:b6:
         4c:af:5b:11:5e:18:69:d1:d4:a5:94:f9:67:77:9a:09:c4:4e:
         7e:54:50:fa:18:ca:b6:3c:4c:18:b6:49:b3:96:30:5b:6f:0e:
         3b:5a:63:79:79:66:6f:ef:fd:b2:5c:70:dc:80:25:d4:a8:a6:
         1f:1c:80:14:57:ff:07:26:96:8c:3f:5c:fa:d7:18:23:86:7d:
         e9:76:01:72:1b:db:64:e8:1e:82:05:25:7f:4c:03:0f:ad:ce:
         3c:29:bd:70:07:f1:b8:4f:56:63:98:bd:c8:50:3a:73:1f:7c:
         16:f2:8d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----