Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
File:                     zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft (raw, json)
Hash identifier:          wrSB2T5nBQJiHjPCnV+ZiHjxul1lXpr4b1neaHHI9AE=
Subject key identifier:   60:70:31:48:56:BB:F1:8B:88:D2:C4:8E:99:16:7F:6F:94:83:8E:71
Authority key identifier: CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4
Certificate issuer:       /CN=F36C3DC5AF/serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
Certificate serial:       0891
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
Manifest number:          0890
Signing time:             Tue 13 Oct 2026 01:56:41 +0000
Manifest this update:     Tue 13 Oct 2026 01:56:40 +0000
Manifest next update:     Thu 15 Oct 2026 01:56:40 +0000
Files and hashes:         1: zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl (hash: UyHj/PHvK+p1c/G7PDr4KxXkCZ72q/Hu+Hf4l4Jzj90=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 01:56:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2193 (0x891)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3DC5AF, serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
        Validity
            Not Before: Oct 13 01:56:40 2026 GMT
            Not After : Oct 15 01:56:40 2026 GMT
        Subject: CN=6acd8fd9-b168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:30:1c:85:d2:c4:10:f8:f4:58:fb:8d:b7:e8:
                    bc:6d:a3:e7:0c:82:d9:4f:00:e6:b6:be:90:b6:88:
                    c6:cb:ef:7d:0d:2b:9f:2d:b7:3c:be:72:69:5d:a5:
                    db:96:db:11:42:b7:89:fa:40:4d:6e:12:f0:2b:76:
                    c9:ba:24:d4:08:45:ab:05:9c:51:0b:92:38:47:a4:
                    85:f2:cb:ab:47:f3:cf:6e:ce:80:d7:49:e5:54:cb:
                    18:d9:87:77:f8:71:98:0b:7a:66:c4:33:d0:93:71:
                    64:e3:5c:d7:2e:89:f0:8d:8e:87:01:0a:74:c5:2b:
                    9e:7f:55:2a:da:e6:ed:2c:3e:1a:15:02:ad:d3:0c:
                    af:cb:f6:1a:a4:30:f9:4b:15:01:59:a5:c2:b1:94:
                    3e:25:2d:09:3f:49:bc:f4:be:ff:f7:e6:3f:22:46:
                    c4:b1:8b:5b:70:4e:f6:0c:1a:b5:5b:f8:17:f5:ad:
                    15:77:fe:06:95:e9:d5:66:76:2c:5f:d3:c4:7c:ba:
                    2f:e1:6e:42:f2:23:c4:5e:6a:fe:2e:e7:41:87:0e:
                    3e:76:26:88:df:db:26:5f:9e:82:c6:07:ff:96:a6:
                    37:d1:24:d2:15:22:6b:74:21:05:09:30:71:97:c5:
                    96:29:64:94:f8:0f:bd:a1:92:e1:13:15:48:d1:9f:
                    b2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:70:31:48:56:BB:F1:8B:88:D2:C4:8E:99:16:7F:6F:94:83:8E:71
            X509v3 Authority Key Identifier:
                keyid:CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:29:51:3f:a1:32:c4:56:0c:15:de:4c:6e:6e:71:5f:9c:e9:
         f6:8f:3c:e3:3f:be:2a:a0:23:53:c7:80:4c:7f:ed:b3:49:b6:
         68:ca:b0:76:27:7b:d4:de:43:d3:ab:2e:f7:83:df:6e:a8:31:
         18:4a:12:5b:ec:aa:63:b7:55:82:e5:8a:0a:c3:4b:07:14:b3:
         f7:62:c3:22:1b:58:8a:68:98:b7:5a:fb:41:07:89:8c:9a:84:
         90:00:4f:66:4a:67:9e:b7:67:94:c5:4d:b2:87:cb:b0:72:7a:
         20:18:ac:5b:4a:67:e7:25:da:2f:b9:9a:bb:a2:f3:33:42:9e:
         ef:13:1c:e6:4d:30:0b:87:ab:02:07:5b:8d:33:16:91:60:f2:
         48:37:dd:ec:43:18:e5:7a:98:ca:45:90:f4:60:89:59:77:83:
         1f:62:d8:88:1b:02:6e:83:d1:9e:96:63:2b:32:85:f8:02:08:
         56:99:89:5d:c6:95:2e:b0:d7:17:74:51:56:34:13:92:f9:1f:
         5f:15:8b:58:29:f6:d8:9d:b1:cb:95:30:05:b4:d1:a1:93:b2:
         16:ac:f3:24:93:67:66:6f:e1:13:07:51:31:0a:17:67:42:1d:
         02:58:51:73:59:d8:a5:b2:12:a0:7d:13:bf:ea:e8:9b:44:67:
         6b:eb:70:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----