Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
File:                     _VmsIHc1mw1yPSCqmZqOFqhLQZM.mft (raw, json)
Hash identifier:          E0mzL0RRaNjU0QC9skUJrwx3zePNRb2iGsRvq2TMR7E=
Subject key identifier:   0A:EC:27:11:5D:FE:3D:B4:30:A5:FF:D2:52:29:3C:7B:2F:57:46:B0
Authority key identifier: FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93
Certificate issuer:       /CN=F36B49FAAF/serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
Certificate serial:       0F21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
Manifest number:          0F19
Signing time:             Tue 22 Sep 2026 01:02:26 +0000
Manifest this update:     Tue 22 Sep 2026 01:02:25 +0000
Manifest next update:     Thu 24 Sep 2026 01:02:25 +0000
Files and hashes:         1: _VmsIHc1mw1yPSCqmZqOFqhLQZM.crl (hash: VmN1jhd0f58X0JssLBE9W/egb/2kRvLNm+yS94y/+IY=)
                          2: 8986506CD9A811F0859A1F8CDAE4EC9C.roa (hash: JwfObHAK50tWIsXEuklVB8OPIiW45xLTtsZ1Px8dKfo=)
                          3: 57B58AC6D9A811F097E62D8ADAE4EC9C.roa (hash: 3FW5ERWxMNmVOYGzp7EGkp4r94UDhAJZil74hQk+Bbs=)
                          4: 4009105CD9A611F09098297CDAE4EC9C.roa (hash: 1FB2u1NkHPd32cvhaDk1Mr5Y9QwYrKrNoGPZPpvM/bI=)
                          5: 03F106D2D9A711F092519980DAE4EC9C.roa (hash: 2A+bzaBxZS1FQCfP8W3xZV1hAnZdHW1Neqh6rEzQlxo=)
                          6: 35BD0DCCD9A811F0AA584C88DAE4EC9C.roa (hash: f9TCjeq2fcGfLO+SkJPOqxOUdhtc6lIy0wxxx5QROTM=)
                          7: C1C3A48ED9A811F08FEB798CDAE4EC9C.roa (hash: T5p0OPPg3ZWIoDZt6UNj/qsZteopmc0kEMpHqGzt6Xk=)
                          8: ED0E84DED9A711F0AF96B987DAE4EC9C.roa (hash: CNvrTr+jaoNYA9leLXbMkBt22bF9S0j73baTBRDIQzM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3873 (0xf21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B49FAAF, serialNumber=FD59AC2077359B0D723D20AA999A8E16A84B4193
        Validity
            Not Before: Sep 22 01:02:25 2026 GMT
            Not After : Sep 24 01:02:25 2026 GMT
        Subject: CN=6ab1d3a2-3006
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e0:65:3f:2c:55:d9:59:b4:4b:7c:8a:90:8d:
                    ce:fe:3b:bc:82:c4:94:0d:5c:b5:fe:e1:e7:00:1a:
                    b1:68:87:bd:c4:df:1b:e3:d2:ae:a3:ce:9b:2d:7e:
                    b3:c0:a8:52:50:3b:ce:d9:bc:90:26:10:77:30:ba:
                    8f:e7:29:c2:ae:00:a5:72:1e:88:7f:bc:83:f0:01:
                    ec:7d:d6:39:00:72:31:e7:86:e9:9a:b1:11:04:b3:
                    e7:55:26:58:1e:25:8e:83:68:e6:cc:9e:cb:0e:d5:
                    f7:2d:28:34:08:37:35:3d:24:0e:58:e4:76:77:3d:
                    09:99:9f:37:ce:9b:e7:d0:05:e0:57:03:c8:4a:63:
                    6d:9d:8b:c2:e4:47:e8:ee:3a:f8:94:a0:70:4f:b5:
                    f6:d4:5a:08:6c:95:7a:e1:f0:e6:9a:ca:da:3f:01:
                    5e:bb:76:b0:8e:f1:bf:6e:30:9c:cd:86:29:0c:4f:
                    04:3e:b6:f0:e5:23:cf:68:bb:30:a6:09:98:92:1c:
                    9b:35:03:db:fc:1c:bd:9d:6b:aa:bc:fd:23:a2:de:
                    08:c7:7a:62:42:b9:78:80:ce:95:7c:bf:4a:ee:c1:
                    56:78:a1:0a:57:f5:fc:27:77:df:e1:8f:43:92:16:
                    da:8d:65:14:9d:ac:8b:ca:b6:bf:29:52:98:30:17:
                    1c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EC:27:11:5D:FE:3D:B4:30:A5:FF:D2:52:29:3C:7B:2F:57:46:B0
            X509v3 Authority Key Identifier:
                keyid:FD:59:AC:20:77:35:9B:0D:72:3D:20:AA:99:9A:8E:16:A8:4B:41:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_VmsIHc1mw1yPSCqmZqOFqhLQZM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B49FA/A255919C1C1C11E6BA1E5C0CF8AEA228/_VmsIHc1mw1yPSCqmZqOFqhLQZM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:33:cd:9a:97:10:45:50:58:b5:1b:e6:d1:ec:23:99:4a:95:
         f1:21:1b:8c:f7:03:a0:54:f9:db:aa:6b:a6:80:49:46:f4:ac:
         62:07:f2:a1:ba:f9:da:e3:71:75:12:c4:7d:68:8c:09:ea:12:
         22:94:c2:f9:cb:02:e1:e3:c0:12:ea:64:26:7a:a8:05:79:5e:
         d8:d4:a1:48:5a:fb:c0:4c:a0:08:7e:33:e7:91:6c:ff:7c:7e:
         80:6e:33:b0:01:24:a7:d1:c8:19:61:82:5a:ca:a5:8f:aa:d9:
         19:da:48:33:e7:72:d2:72:fc:b8:9c:21:93:dd:36:87:af:e8:
         c7:6a:e7:c8:26:77:4f:17:30:d2:39:7f:61:b4:59:4e:17:dc:
         15:3a:70:20:25:c5:eb:b7:8f:34:71:d4:3f:62:f6:2c:99:e0:
         42:24:f5:43:03:f9:cb:ff:cb:74:61:ea:b9:ea:4b:3e:c8:75:
         fb:46:c3:05:17:b1:24:9c:ba:8b:5b:af:8e:b5:4a:80:01:b1:
         a0:23:94:5d:cc:27:a4:68:9e:06:ab:8c:3c:b7:96:a2:c1:11:
         17:f4:8b:7c:3e:61:8f:53:26:40:3d:8e:14:e1:06:90:85:13:
         5c:a7:ba:22:71:4b:15:04:d9:64:e2:21:05:24:5d:f0:f1:e0:
         db:31:a0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----