Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
File:                     pZcz3KUuEYvmm3dYljNX3ajFFCg.mft (raw, json)
Hash identifier:          SS5EiM+yoVHY225pg7FlwpnMv7mdMRsBUXjw5kT5Vbo=
Subject key identifier:   24:6E:50:8E:A8:22:83:5A:45:13:D7:D5:98:03:13:08:EF:83:11:B7
Authority key identifier: A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28
Certificate issuer:       /CN=F36AC63AAF/serialNumber=A59733DCA52E118BE69B7758963357DDA8C51428
Certificate serial:       0497
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
Manifest number:          0497
Signing time:             Thu 08 Oct 2026 03:39:06 +0000
Manifest this update:     Thu 08 Oct 2026 03:39:05 +0000
Manifest next update:     Sat 10 Oct 2026 03:39:05 +0000
Files and hashes:         1: pZcz3KUuEYvmm3dYljNX3ajFFCg.crl (hash: 9IZrKxUumvoFecP69MJLUNwKfnQb2bWcogLed934n6g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 03:39:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1175 (0x497)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AC63AAF, serialNumber=A59733DCA52E118BE69B7758963357DDA8C51428
        Validity
            Not Before: Oct  8 03:39:05 2026 GMT
            Not After : Oct 10 03:39:05 2026 GMT
        Subject: CN=6ac7105a-7f9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:80:f1:f6:7b:e3:59:ab:99:5b:ac:93:86:22:
                    b0:82:66:aa:ee:9c:c6:27:ad:8f:7a:e6:64:ec:7c:
                    5f:0e:b3:18:23:5b:84:dc:4e:67:46:37:81:39:c1:
                    1a:85:94:c8:d4:c6:2d:25:96:b0:e2:a0:7f:de:51:
                    72:84:cb:c0:d3:b0:27:21:77:1e:68:33:cb:27:23:
                    e2:47:b6:f9:92:a2:44:72:35:57:65:63:52:9b:24:
                    ca:c2:43:e4:cc:9e:d9:0f:5d:19:46:c4:02:2a:bc:
                    78:44:29:80:3f:91:1f:5c:96:d8:c6:cf:fb:b9:07:
                    55:d5:da:af:81:de:65:b6:26:ef:b2:f7:12:e7:c2:
                    c4:85:76:c5:af:f8:ca:ed:16:23:3e:ea:3e:dd:bd:
                    88:83:06:0f:3e:65:71:1c:e7:7f:1e:4e:41:3d:88:
                    8f:ee:cc:9b:86:52:a8:41:67:3a:3f:06:88:e1:15:
                    b0:44:41:8a:20:c7:48:91:66:99:de:d3:ca:2c:23:
                    7d:1a:88:b0:b3:b4:58:0a:e0:f5:f0:a4:f6:28:10:
                    be:70:8a:22:21:3b:c2:da:16:a3:07:78:8e:72:39:
                    41:f9:fc:5c:ea:d5:ab:7d:3d:bf:9c:8e:18:62:86:
                    2a:7f:af:a7:d3:71:fc:75:15:58:d8:a6:49:7f:68:
                    f4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:6E:50:8E:A8:22:83:5A:45:13:D7:D5:98:03:13:08:EF:83:11:B7
            X509v3 Authority Key Identifier:
                keyid:A5:97:33:DC:A5:2E:11:8B:E6:9B:77:58:96:33:57:DD:A8:C5:14:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pZcz3KUuEYvmm3dYljNX3ajFFCg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AC63A/1C75D54040C311EE91B571434AD9E6FC/pZcz3KUuEYvmm3dYljNX3ajFFCg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f5:2a:8e:b9:10:3c:87:dc:c9:fa:54:c8:85:a1:04:a8:9b:
         48:45:06:b4:cb:79:2a:62:a6:ce:68:4f:e1:e8:af:70:2d:1c:
         7a:21:d4:63:19:3d:33:87:30:ab:92:c1:7d:aa:22:80:76:a3:
         af:7c:d9:57:cd:25:3b:70:13:b3:8f:da:43:dc:cb:2c:03:d6:
         8c:3f:b6:67:4f:02:8d:07:8d:14:15:cc:96:84:d4:cb:c2:90:
         3b:94:22:7f:ce:ff:eb:d3:ca:a5:bd:6e:d1:d3:9e:9b:df:ed:
         53:d7:ec:5d:44:d0:e6:5a:51:d1:94:dd:b2:f2:bd:db:1e:68:
         be:86:63:2f:35:fc:75:f5:d8:59:77:d6:51:89:fe:02:65:53:
         f5:db:b0:2b:54:de:93:b2:d6:fc:e6:15:f4:09:f2:dd:87:1f:
         4a:06:af:97:7b:c7:2b:de:8f:04:93:d5:6e:e7:85:7a:08:6f:
         64:64:8d:40:a8:35:89:f9:2c:d4:51:c9:39:b3:5d:5e:e9:62:
         07:7c:23:90:e3:e3:fc:13:a6:cd:db:9e:77:4e:f2:13:37:bb:
         ca:8d:fe:28:6a:b1:fe:21:52:e3:85:84:5d:a1:ef:95:3a:1c:
         08:82:d4:8c:25:7e:0f:96:a1:71:dc:94:b1:f1:f8:0f:0f:37:
         4f:e0:ed:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----