Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
File:                     x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft (raw, json)
Hash identifier:          OPVD/ORdyoi0MF4YoY4U3YAS9P0lHoz9E8Hv1xYzyV8=
Subject key identifier:   D1:69:12:00:1B:08:1C:28:4D:57:A5:83:8C:6D:D3:63:8F:55:0E:1A
Authority key identifier: C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86
Certificate issuer:       /CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
Certificate serial:       043F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
Manifest number:          043C
Signing time:             Fri 09 Oct 2026 03:49:10 +0000
Manifest this update:     Fri 09 Oct 2026 03:49:09 +0000
Manifest next update:     Sun 11 Oct 2026 03:49:09 +0000
Files and hashes:         1: x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl (hash: Eut/zhbcwgdv6teipkAURnw9xPVOoA/xdN0QDHzjXgk=)
                          2: B2D67FBC81B811EFBF661993762E951A.roa (hash: uoPtPDn/rbTQRBGn7Sv62W9Z11akCbhfrMo3RcO5nHI=)
                          3: 566028A281BB11EFA2B4C6A4762E951A.roa (hash: sff2TxKKkLZbomvR8u92IEB7S8eTuT8nC5FtfM/Fsf4=)
                          4: D54273E281BA11EFA327CDA0762E951A.roa (hash: 5R8cd2x4uz0VmbtOqIFPktz58DCFoYAlE0EfcBaZH7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 03:49:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1087 (0x43f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C629BAF, serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
        Validity
            Not Before: Oct  9 03:49:09 2026 GMT
            Not After : Oct 11 03:49:09 2026 GMT
        Subject: CN=6ac86436-43b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:2a:43:45:84:18:86:c7:25:dc:a8:aa:be:
                    d2:bc:52:1f:99:17:6b:00:7f:58:61:1c:6a:8f:ea:
                    36:45:de:6f:76:b2:64:ba:27:c3:5d:50:1c:a6:3d:
                    07:85:f0:2c:de:83:59:6e:58:fe:34:48:37:dd:00:
                    f8:f8:dd:02:8a:02:81:5c:e1:a7:6a:90:45:20:73:
                    88:85:93:95:9f:fb:ec:2d:94:b4:42:99:a7:d7:ef:
                    c8:a5:73:33:bb:01:4c:77:1c:26:4f:7c:f2:94:62:
                    08:d1:6a:ba:e9:00:e2:33:89:2f:b3:92:ed:ad:6f:
                    1f:98:c7:c8:bc:49:4c:a5:12:c9:b9:30:a1:71:aa:
                    f4:e4:77:6a:c9:f9:4d:ea:b8:98:55:bb:a4:34:5b:
                    a2:ae:fb:4a:df:8f:af:db:03:ec:6b:a3:6b:7a:b3:
                    b2:42:38:26:e0:46:e4:2f:26:83:ba:78:3d:47:93:
                    a3:6e:75:4f:82:df:78:94:c5:5a:9f:fd:73:87:10:
                    a2:5c:e4:88:8d:ad:75:58:5e:c1:0f:11:54:6c:86:
                    7c:cc:8b:57:77:c0:96:1e:0f:0b:87:3e:9f:7a:30:
                    5a:45:25:0c:ec:50:a1:58:93:61:75:67:58:79:42:
                    e4:45:dd:da:f0:75:e5:37:81:4f:28:62:52:2a:54:
                    f9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:69:12:00:1B:08:1C:28:4D:57:A5:83:8C:6D:D3:63:8F:55:0E:1A
            X509v3 Authority Key Identifier:
                keyid:C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:21:6e:77:19:6f:c3:4e:5a:7d:30:36:b6:8b:f0:2f:ad:78:
         db:c3:90:fc:0b:34:a8:f9:d2:62:6d:28:d9:12:29:13:c2:79:
         d3:b3:f1:f0:ec:ea:ec:68:39:74:9b:1b:7a:36:b6:c2:96:7f:
         27:73:39:3a:b9:ec:05:5f:ca:cf:db:d2:de:4a:96:70:74:20:
         84:78:48:e2:43:17:aa:c8:34:83:2f:80:4d:b6:b7:e4:49:b8:
         c9:35:1c:09:b1:23:8e:cd:25:66:51:eb:80:cd:ee:fb:6c:1c:
         5d:2d:b4:27:43:0e:6c:3a:08:f0:91:83:3b:24:36:e1:83:2f:
         c0:82:ec:e8:e0:5a:1c:f8:05:05:d9:b7:8e:6a:66:69:11:ed:
         f7:38:64:28:c6:a7:28:64:80:54:32:66:1a:89:a7:ee:27:3c:
         4d:aa:04:a2:3e:e1:fe:f9:4c:1a:b7:68:ff:3b:2c:b4:bd:44:
         99:0f:b6:a1:e8:1b:5a:02:0b:40:ee:a0:27:e3:59:47:69:6f:
         c1:9e:92:8e:0f:08:40:cf:c6:61:06:cb:4d:c3:73:a2:2c:4f:
         92:4b:29:21:11:de:11:f9:62:6b:ff:ef:49:ef:34:cb:d6:bd:
         8a:5d:d4:78:22:a2:24:13:f9:1f:a6:bb:a6:3c:9c:81:a7:9b:
         95:0f:59:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----