Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
File:                     biQiwqfj3wfM4NH9AdFG21Z40ds.mft (raw, json)
Hash identifier:          0JlHnDn2BeaEvFgCCi2fS4LH1GU8MXHmX4hbOysmjHM=
Subject key identifier:   E4:40:53:B4:F5:0E:BF:A0:97:77:33:E7:7C:FE:97:18:E4:8C:FD:E3
Authority key identifier: 6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB
Certificate issuer:       /CN=F36C6E36AF/serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
Certificate serial:       36
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
Manifest number:          2D
Signing time:             Tue 22 Sep 2026 05:49:48 +0000
Manifest this update:     Tue 22 Sep 2026 05:49:47 +0000
Manifest next update:     Thu 24 Sep 2026 05:49:47 +0000
Files and hashes:         1: biQiwqfj3wfM4NH9AdFG21Z40ds.crl (hash: 2cQ9oNtes1smJCge+DhUV37n0kflejwZ2AlksKK9dhQ=)
                          2: 2BAE2E76B2D611F1AAFB07C7CE1D38B0.roa (hash: xVwAUnrViwTntUveNDo6qYXWSRccSSgDlFmKIFO0HSM=)
                          3: 6C7FD260B2D611F193C51DC7CE1D38B0.roa (hash: +KcH4KSDhfgOgrPgucsOz0T5Y9dgTuxMI1/ms+27xx4=)
                          4: E2095C86B2D611F182DB22CBCE1D38B0.roa (hash: 0QotgG4JTFYIzqDDSEaZjrPBe1AsQnW20uL0HP117RM=)
                          5: 8EB514929BA411F18359831DCF1D38B0.roa (hash: HIgQE1FkAEHLt9W55ZyAHjmOCHWt9l42BG52dMjKpNM=)
                          6: 2721414EB2D711F19D7933CBCE1D38B0.roa (hash: L1RNC7+I9L1V3kn3iAD4GkwCCWlSqZzac+IyOHlw4BY=)
                          7: 0745CDAEB2D711F187AA27CBCE1D38B0.roa (hash: DV4zcMkbFgzhtFkdO2oTjhaIbbAWHRM/lgDhjMjNUhc=)
                          8: C53660ACB2D311F19EF6E7B6CE1D38B0.roa (hash: 5Dj/UiotHDT3B1x2BeMhtWpFuhLdGfHWKGcnmB6uC1c=)
                          9: 974C140EB2D611F1A4B778C7CE1D38B0.roa (hash: /3CPs8bAIpaxY0a9SbOCMe+TpsRY6Oe9DBQBTqL2Q24=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
                          rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C6E36AF, serialNumber=6E2422C2A7E3DF07CCE0D1FD01D146DB5678D1DB
        Validity
            Not Before: Sep 22 05:49:47 2026 GMT
            Not After : Sep 24 05:49:47 2026 GMT
        Subject: CN=6ab216fc-0363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:42:87:5e:b5:e8:79:83:41:f0:13:56:45:6e:
                    ef:50:62:5b:11:72:b1:a2:fa:39:45:81:e9:59:c6:
                    22:96:b6:ca:0d:66:90:2a:e6:9f:eb:eb:88:56:91:
                    b1:26:0d:0d:1b:b5:46:c3:97:4f:dd:6d:52:04:0c:
                    4f:f4:94:8f:80:07:ef:bd:3f:54:61:52:8b:77:21:
                    79:55:88:4a:2e:0f:a7:7d:ed:52:ab:57:7f:1a:87:
                    0f:85:74:13:8d:04:12:10:c7:b8:25:74:80:5f:c6:
                    8d:4b:70:a3:42:34:83:ab:e9:22:9e:17:15:f1:a0:
                    b1:7d:0c:2e:48:33:a2:c7:e4:20:0f:f0:6c:be:22:
                    88:5d:ea:34:3b:6f:0a:59:9a:c7:8e:49:c1:68:cf:
                    29:53:93:66:0a:b3:6e:87:ac:0e:d7:68:f7:47:99:
                    a3:7a:0b:db:d3:a2:56:05:b5:79:3a:39:4d:e2:c1:
                    6e:a4:ab:11:eb:b3:c7:b3:78:0d:ca:2c:66:72:5b:
                    94:c7:6b:d5:79:38:94:37:08:ee:a0:d8:e5:c6:05:
                    f6:dd:6a:1c:4c:fa:a1:e5:47:07:6d:23:c3:32:20:
                    5a:c8:67:b3:c2:ea:b1:bf:ed:33:47:1b:ed:33:39:
                    45:27:b1:0d:1d:a2:9f:75:d9:02:8d:a4:bc:ba:7f:
                    0e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:40:53:B4:F5:0E:BF:A0:97:77:33:E7:7C:FE:97:18:E4:8C:FD:E3
            X509v3 Authority Key Identifier:
                keyid:6E:24:22:C2:A7:E3:DF:07:CC:E0:D1:FD:01:D1:46:DB:56:78:D1:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/biQiwqfj3wfM4NH9AdFG21Z40ds.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C6E36/649470B09BA211F1BB3A7E0FCF1D38B0/biQiwqfj3wfM4NH9AdFG21Z40ds.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c4:cb:81:7d:40:f9:94:19:31:18:71:06:11:10:1b:f0:53:
         f0:ec:7e:a5:91:eb:d1:cd:d5:80:0f:f1:44:a4:f8:29:ee:a8:
         cc:dd:0f:94:99:cf:33:b2:5b:b5:70:cd:2b:03:a4:9d:a2:49:
         6c:f2:bf:8c:c2:96:d0:58:51:68:ff:21:f9:2c:f9:60:bb:e4:
         d9:74:3e:ef:6a:20:81:ea:c4:8d:1d:6c:60:b5:a6:c3:5c:72:
         56:4d:4d:fc:12:cd:47:5f:fd:45:dc:9a:d7:5d:95:7a:94:9b:
         68:ce:03:1d:be:83:db:9e:45:03:b8:46:55:72:67:77:24:2b:
         40:21:f7:02:dc:a6:13:d8:b4:17:1d:3b:27:23:02:7e:e0:35:
         99:f3:50:d5:4f:ca:bb:86:b5:1e:96:1a:dc:44:f5:b0:6d:8f:
         06:42:07:a5:93:28:d1:b9:29:41:8e:24:c8:7b:e4:b4:e8:2f:
         9c:9a:98:74:cf:58:54:f5:0c:0d:83:2c:aa:3c:4d:64:b9:c6:
         8f:89:cd:f5:34:ac:1c:23:db:86:c6:94:18:dd:1a:2a:95:f0:
         85:d6:a6:15:b6:ee:ce:32:02:ae:7f:7a:29:18:4e:75:4d:39:
         d7:44:0a:e2:a4:f8:61:14:a2:63:d6:a4:cd:26:9b:a8:7f:53:
         dc:16:54:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----