Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
File:                     Ga2syP-jkxMYpsdToKwbKukpXgM.mft (raw, json)
Hash identifier:          uxDDog5LMrvLfqnTF7B045mM4fGtFvWG+ylKhvpXbhc=
Subject key identifier:   77:AA:42:28:D5:4E:4E:5F:D7:1A:DB:30:10:03:C5:BA:37:DC:68:A0
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Certificate issuer:       /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial:       0AE4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
Manifest number:          0AD9
Signing time:             Sat 26 Sep 2026 01:18:26 +0000
Manifest this update:     Sat 26 Sep 2026 01:18:25 +0000
Manifest next update:     Mon 28 Sep 2026 01:18:25 +0000
Files and hashes:         1: Ga2syP-jkxMYpsdToKwbKukpXgM.crl (hash: Ddxl9ehMslTvvW4aHW6SuglwzPli5Xnj2501P4GDUxU=)
                          2: 40F0EA0C864C11EF8B0D4162762E951A.roa (hash: 5nZTReAvtcbgPm+oRDhQ83p7XciRK3gVMtmCqG06N7Q=)
                          3: 19DBEAFC864C11EF91E74660762E951A.roa (hash: ssNbfh+xyxoJkv8ui9GVFM6RQk48tyv7Wmx8dqGtWao=)
                          4: 8F04BF5C864C11EF8F687464762E951A.roa (hash: MFVB+4npBxn/Yh83eigumhh31Iuk3EG7QH/ll1Qzce0=)
                          5: DF0FB1A6864B11EFAA421C60762E951A.roa (hash: wcCwWJ/0MHVkGO7m4+40u82BAL5x3asIQ+jyQE9ovPY=)
                          6: 325E4A4E864B11EF9931C05B762E951A.roa (hash: uilxINn6WdcvcjXq+Nwl5lpnynygHnR6cPspfvXc/m0=)
                          7: EB320A3E864511EF82F333B8762E951A.roa (hash: AOcstZS+3TqPjLs5Onnwkaac6jTexzGQCvTnjKOL0G4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2788 (0xae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6AF, serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
        Validity
            Not Before: Sep 26 01:18:25 2026 GMT
            Not After : Sep 28 01:18:25 2026 GMT
        Subject: CN=6ab71d62-3e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:53:ff:34:b7:07:06:78:d4:e8:9f:af:de:66:
                    35:c3:bf:f3:6a:4f:2a:a7:6e:44:e1:23:08:a3:5d:
                    d1:ad:71:ab:2b:81:84:e3:f3:a2:b5:c7:bd:d3:04:
                    87:81:fa:f5:61:2a:2b:8f:2f:c7:56:03:89:51:7a:
                    e0:bd:06:1f:86:a8:1d:cc:f6:dc:0a:17:e2:3d:c6:
                    b6:b4:12:c2:41:a9:f7:88:28:f2:1c:6a:ba:e9:5d:
                    b4:45:7f:cb:c3:3d:80:6d:0e:8d:07:65:6f:46:ea:
                    c0:b7:3b:2b:6e:d4:2d:40:2c:1e:4d:6c:a9:95:89:
                    e0:ff:0c:8b:42:12:7a:b6:8d:2c:eb:4e:72:84:7f:
                    fe:d1:68:fa:43:03:9c:0b:12:5c:06:10:4f:bd:b9:
                    ac:34:5b:70:25:6b:57:7d:75:52:10:c8:1b:0e:4d:
                    69:75:c1:47:91:e3:91:e6:d1:66:d1:db:d4:29:6e:
                    cf:31:92:a0:58:08:1f:c1:96:11:fe:9c:22:cb:3c:
                    00:9b:83:18:4b:9d:30:e2:f6:2f:90:da:2c:4b:c0:
                    cb:38:33:0d:94:24:80:09:55:73:08:d6:84:23:a6:
                    f4:84:b9:9c:70:1a:0c:91:b6:b5:0d:e3:c3:19:e6:
                    df:22:72:9e:d5:a4:2e:ed:cf:61:f7:5a:48:fa:19:
                    6d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:AA:42:28:D5:4E:4E:5F:D7:1A:DB:30:10:03:C5:BA:37:DC:68:A0
            X509v3 Authority Key Identifier:
                keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:d2:c1:75:4c:a5:06:41:9f:ca:db:db:a5:a5:4c:29:be:
         dc:15:7f:ee:40:68:9c:eb:ab:0f:e8:66:f5:38:db:9b:2e:2e:
         15:9f:1c:71:eb:36:3b:00:ae:32:45:23:d6:2b:33:4b:e9:25:
         33:a6:88:df:98:b9:69:ef:47:39:48:e5:98:2c:ab:2b:1a:29:
         34:8c:cf:13:21:1b:76:dc:9e:74:3c:cb:64:df:d6:c2:80:04:
         47:16:6f:a3:5a:41:c4:f8:b3:e4:d0:fd:35:5f:ae:33:b5:37:
         82:f8:df:a3:97:c6:be:43:12:a4:88:12:73:07:64:98:66:97:
         0f:fd:2a:ba:90:16:70:ea:cc:aa:0f:5e:90:cc:47:06:f9:4e:
         cb:8c:3c:bb:bc:d6:ca:91:38:79:e7:d4:04:09:85:06:1f:6e:
         86:93:01:eb:6b:c3:ea:e4:2a:2b:a5:4d:19:4c:dc:33:ca:93:
         ab:23:07:da:83:d1:77:9c:5d:2a:ca:f5:58:bf:6a:63:26:dd:
         6a:26:c9:b2:5e:58:7d:46:1f:95:df:4d:55:d6:49:c7:1e:ab:
         a8:ce:ec:8c:44:20:8c:fa:9d:db:d4:5e:71:2b:b9:45:cb:d2:
         6c:11:51:3e:da:60:a1:2a:92:90:b8:30:81:ba:c1:4a:50:24:
         6e:19:64:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----