Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
File:                     v2DdGbZCZae1tFPwFbi4pgtCmM8.mft (raw, json)
Hash identifier:          CTrmLrxJqp9txMf7b0Ks0s4lyUYXUjpmSofeFudSYb0=
Subject key identifier:   CC:FA:9F:C7:92:FB:D1:65:90:7B:6F:4D:E2:CB:8A:63:D6:EB:A9:81
Authority key identifier: BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF
Certificate issuer:       /CN=F36B86D4AF/serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
Certificate serial:       0387
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
Manifest number:          0382
Signing time:             Mon 21 Sep 2026 04:10:40 +0000
Manifest this update:     Mon 21 Sep 2026 04:10:39 +0000
Manifest next update:     Wed 23 Sep 2026 04:10:39 +0000
Files and hashes:         1: v2DdGbZCZae1tFPwFbi4pgtCmM8.crl (hash: I2azonbP/DpDWQnalpB0xAgSCpV/xgAHyZ7HIUH1gI8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:10:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 903 (0x387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B86D4AF, serialNumber=BF60DD19B64265A7B5B453F015B8B8A60B4298CF
        Validity
            Not Before: Sep 21 04:10:39 2026 GMT
            Not After : Sep 23 04:10:39 2026 GMT
        Subject: CN=6ab0ae40-0165
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b7:61:9f:0c:07:37:b4:41:1b:56:58:44:13:
                    d5:0e:0a:47:b9:13:9c:f9:09:64:22:a8:1b:06:ec:
                    33:2d:ee:88:50:fd:9b:52:20:e6:de:15:fb:f1:78:
                    20:f6:3e:b1:c5:3e:27:1c:08:30:4c:49:b3:39:69:
                    82:ad:67:33:17:ce:50:cf:3c:30:05:68:84:21:58:
                    6f:b8:4a:e2:d0:ab:39:04:ab:9d:69:13:08:4e:af:
                    d0:59:3d:71:d0:0d:85:4e:95:72:04:58:0c:e1:41:
                    51:d8:d9:11:b6:b6:87:32:fd:06:d4:3d:bd:12:4a:
                    e5:5d:cb:d9:0c:4f:eb:c8:9c:43:47:81:da:c4:4d:
                    45:83:4d:23:7a:96:01:6a:49:84:fc:ee:76:bf:e3:
                    fe:a8:1c:68:e9:8c:e0:bf:d3:88:4d:f8:0c:db:af:
                    b2:84:3a:7b:6c:2b:62:f0:d7:5b:f4:3c:3b:b6:d5:
                    5f:3c:d4:38:13:27:16:0d:94:27:a2:16:01:5d:65:
                    76:1d:b5:19:e5:ac:e7:0f:69:0a:eb:26:ac:ea:49:
                    9a:9f:b4:d8:27:39:aa:91:4a:4f:fd:dd:6a:ea:b9:
                    78:0e:73:89:70:30:d5:b1:22:5d:7b:1d:b9:b9:34:
                    27:1c:08:b9:d9:90:35:34:ef:ea:a7:d1:d1:a8:4b:
                    20:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FA:9F:C7:92:FB:D1:65:90:7B:6F:4D:E2:CB:8A:63:D6:EB:A9:81
            X509v3 Authority Key Identifier:
                keyid:BF:60:DD:19:B6:42:65:A7:B5:B4:53:F0:15:B8:B8:A6:0B:42:98:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/v2DdGbZCZae1tFPwFbi4pgtCmM8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B86D4/A176EAD8092511EF86CCEDF5007001B1/v2DdGbZCZae1tFPwFbi4pgtCmM8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:0d:ec:b8:a3:f7:52:0f:b6:e7:fe:9f:f4:a6:e5:33:0e:e0:
         03:23:97:fc:16:37:df:81:b2:bb:29:36:84:a3:46:52:17:25:
         9c:66:5c:dc:94:26:0f:3c:fc:9f:e4:73:de:d1:ac:bc:37:47:
         44:87:18:a8:0b:9e:f7:f6:bd:90:f8:cd:64:0e:4e:f0:3c:65:
         8e:7c:b7:c6:ac:42:a0:7c:42:9a:9e:d7:b0:22:02:64:e2:8d:
         92:6f:f8:e4:15:54:96:9b:70:95:3b:4b:be:a3:4e:10:b0:65:
         23:e9:3e:c3:16:46:04:af:71:b9:8a:23:14:3b:e7:bc:6c:37:
         e4:da:7c:9b:9d:48:ee:35:81:f4:3c:e8:92:38:88:78:24:d8:
         5f:37:49:3b:e9:1a:84:4c:0c:b8:ed:97:b1:52:ec:91:7e:d3:
         1d:38:4e:f1:d9:9d:c6:74:62:9d:20:46:b5:6b:3b:32:79:4d:
         9a:2e:d6:63:55:6d:72:19:86:d1:39:84:df:19:35:a3:10:eb:
         f3:ab:c5:63:2f:ba:54:59:ca:c8:47:91:15:e8:61:5a:e2:1f:
         a7:79:99:3e:64:d7:25:7c:a0:fd:3e:af:5e:9a:1f:e2:6b:b5:
         09:f9:df:37:a6:b1:e8:4f:81:77:b5:2d:f4:05:c9:7d:db:e0:
         67:d3:95:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----