Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
File:                     imnjE5vX78CApC4WBIM5j6bHW7Y.mft (raw, json)
Hash identifier:          Lxx9YBvk8vYb2tIEQGi59fobmcslMF7Tkbfbth5yaUU=
Subject key identifier:   59:66:1A:F8:7F:18:12:74:9D:35:80:CF:51:46:96:E2:70:F3:27:BA
Authority key identifier: 8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6
Certificate issuer:       /CN=F36CAF37AF/serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
Certificate serial:       101A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
Manifest number:          101A
Signing time:             Sat 10 Oct 2026 00:57:33 +0000
Manifest this update:     Sat 10 Oct 2026 00:57:33 +0000
Manifest next update:     Mon 12 Oct 2026 00:57:33 +0000
Files and hashes:         1: imnjE5vX78CApC4WBIM5j6bHW7Y.crl (hash: loOKZhNbw0+4mvCT+NMlV2ZGeXykwCEDGJIhkC/03FU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4122 (0x101a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAF37AF, serialNumber=8A69E3139BD7EFC080A42E160483398FA6C75BB6
        Validity
            Not Before: Oct 10 00:57:33 2026 GMT
            Not After : Oct 12 00:57:33 2026 GMT
        Subject: CN=6ac98d7d-0dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2f:ee:c5:d4:2f:1a:83:78:4a:bd:59:5a:8f:
                    88:19:20:c5:fd:cc:04:b5:d7:14:4c:70:5c:88:31:
                    e4:d8:0f:fb:bd:85:a4:de:f7:35:e2:3f:fc:d7:07:
                    51:9e:a6:90:94:3a:2b:25:c7:8d:a1:88:0c:e8:17:
                    fd:06:0d:4b:d7:00:67:99:52:43:56:d1:13:54:55:
                    95:9f:4f:19:61:ab:b1:24:50:d1:f6:dd:a8:bc:3a:
                    b6:ea:cc:0f:7f:f2:b8:85:23:7b:d9:06:06:60:19:
                    39:99:fa:53:af:29:fb:91:e5:a4:14:16:34:5b:0d:
                    66:c0:60:4f:6e:10:e8:f8:ca:42:5b:cf:ab:00:98:
                    e5:aa:bd:d7:a8:53:7d:8e:1f:97:5f:9f:f7:b8:32:
                    a3:3c:11:93:8a:66:bd:2a:5e:55:72:27:52:82:ae:
                    9c:07:aa:cc:32:7d:3e:37:ec:5a:7a:b6:5a:f4:db:
                    51:a2:84:ab:69:ac:05:5f:4e:01:d8:d4:34:c2:a3:
                    e3:06:00:69:cc:e9:fb:f1:5f:8f:6d:c7:d1:cc:4c:
                    b8:c7:4e:32:eb:4c:94:32:02:03:ee:3e:ca:82:80:
                    52:f6:0e:25:d6:d2:1c:8a:a9:d7:01:d8:42:ce:06:
                    41:14:7b:2b:99:69:c9:13:0f:51:68:63:ab:f4:0e:
                    aa:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:66:1A:F8:7F:18:12:74:9D:35:80:CF:51:46:96:E2:70:F3:27:BA
            X509v3 Authority Key Identifier:
                keyid:8A:69:E3:13:9B:D7:EF:C0:80:A4:2E:16:04:83:39:8F:A6:C7:5B:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/imnjE5vX78CApC4WBIM5j6bHW7Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAF37/426A0AD6586F11E5A3276231F8AEA228/imnjE5vX78CApC4WBIM5j6bHW7Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:16:16:c2:b6:43:ca:c9:48:3d:1a:e3:bc:de:16:40:9c:07:
         91:5f:5c:4c:a9:ea:22:bb:be:b5:65:24:a7:dc:88:c9:a7:be:
         c0:03:d1:c5:ce:fc:12:73:84:87:d4:fd:f7:3a:fe:d0:bc:25:
         a8:47:86:d9:0e:60:92:59:d8:83:49:b7:d6:68:f8:7d:02:53:
         cd:28:0e:e7:f0:23:47:8c:4f:84:23:7f:32:c7:a4:26:6a:98:
         01:bb:21:8a:73:8a:5d:64:37:5b:f3:6e:17:ea:bc:e1:a9:38:
         8c:95:4d:6a:a6:9e:1b:b5:f8:07:97:6d:40:99:4b:4b:1b:14:
         e9:98:c4:3b:57:94:27:93:70:5e:ad:66:8b:8c:2a:e3:0a:23:
         d0:85:71:57:60:ae:12:1c:c3:e6:5f:62:94:0a:68:55:59:33:
         2e:de:23:4f:f1:a3:ae:ed:b4:cc:da:6f:b9:df:70:34:4f:b3:
         7f:f6:4d:d4:e8:96:87:72:a5:62:9a:7f:8a:da:58:7b:ac:49:
         bc:58:1b:db:ca:46:aa:53:08:5a:c3:64:38:07:dc:b1:dc:19:
         24:10:74:01:0f:55:07:df:45:3c:bc:01:08:58:88:01:0b:e1:
         80:d4:a8:04:10:49:3b:6a:91:83:d7:78:b0:11:95:c6:d5:00:
         38:16:43:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----