Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File:                     IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier:          ShxCEfXnIesFm0oiX37LBfpRXUEV8/KFQWZhL21kqEU=
Subject key identifier:   98:B0:2E:77:6B:21:01:7B:53:37:95:AC:7D:5A:53:96:7F:CC:22:B3
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer:       /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial:       0542
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number:          0540
Signing time:             Thu 05 Nov 2026 03:22:26 +0000
Manifest this update:     Thu 05 Nov 2026 03:22:26 +0000
Manifest next update:     Sat 07 Nov 2026 03:22:26 +0000
Files and hashes:         1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: +LDEJPx9uMuz3khC5FZXFUTR8Y8aMaMRjqznXTPqhsE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1346 (0x542)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
        Validity
            Not Before: Nov  5 03:22:26 2026 GMT
            Not After : Nov  7 03:22:26 2026 GMT
        Subject: CN=6aebf672-3937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:3f:38:39:05:3b:9a:03:54:e6:fc:6a:7b:3b:
                    03:1d:41:cd:7e:7c:7e:59:55:d1:f1:e2:b0:69:ec:
                    fc:56:b4:c7:be:77:2c:36:25:24:26:ad:58:a3:06:
                    f7:54:ae:57:61:bc:85:dc:ef:81:52:32:6f:a1:75:
                    0e:9e:45:0d:09:30:f6:fa:80:82:0c:d4:3b:36:50:
                    e9:14:b8:81:a8:68:9e:90:94:cc:0e:80:85:7d:21:
                    39:69:a0:81:cb:45:fa:ac:3c:41:f6:03:a4:48:b5:
                    8b:ca:47:71:40:4c:42:46:d1:1f:35:8a:d3:e8:89:
                    cd:46:32:65:7e:82:3a:25:b1:79:16:75:7f:4f:85:
                    62:07:4c:49:eb:28:7c:36:c8:49:e7:4b:6b:fb:02:
                    f7:a3:0b:ac:df:7e:63:a2:c7:db:17:8c:c1:56:f4:
                    fa:2c:88:6b:af:31:f0:1f:eb:1f:72:8d:08:69:6d:
                    40:aa:77:af:2d:57:29:4c:78:98:03:a5:64:46:d2:
                    d9:4d:be:dc:be:3f:1c:18:4d:83:2d:c5:78:00:58:
                    81:e4:ef:85:31:44:88:7b:70:20:82:a2:9f:75:ec:
                    1b:01:42:dd:33:c4:ff:c7:11:6f:6f:ce:99:11:6b:
                    b5:f9:8b:92:50:56:53:a6:2d:94:94:f2:37:36:ef:
                    2b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B0:2E:77:6B:21:01:7B:53:37:95:AC:7D:5A:53:96:7F:CC:22:B3
            X509v3 Authority Key Identifier:
                keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:72:81:d6:11:22:32:cd:f8:98:ba:d0:1a:1b:50:f1:31:b4:
         66:2b:da:34:89:59:cf:3d:3b:26:12:31:ea:d0:3b:ff:f0:68:
         ff:cb:13:bc:58:dc:10:c2:56:03:d6:60:c3:46:b2:51:86:bc:
         57:52:b7:8e:3c:68:cf:11:d3:cd:8d:df:80:cd:7c:e0:57:3f:
         e2:36:96:be:86:f4:06:2e:ca:3d:71:fd:2f:e4:30:0a:2c:cd:
         86:7d:f4:e3:71:eb:24:b3:92:26:5b:67:68:2e:1a:ee:b0:26:
         4c:99:ec:33:46:e7:3b:b1:26:fb:3b:ac:ef:30:e7:31:b9:43:
         c3:2f:45:4e:c7:c1:1b:91:6c:68:c1:9d:d0:93:e6:55:7f:db:
         5b:f3:f4:f4:56:56:c2:74:c2:6b:ce:42:64:e1:32:e8:64:4e:
         80:83:0c:17:bd:bf:36:4c:d7:29:b8:52:93:1c:f4:f1:d3:d7:
         d7:3e:47:6a:50:58:4f:07:14:dc:f9:7e:da:56:59:aa:c6:65:
         f6:35:e8:e3:97:5b:ed:1c:20:ec:ff:29:1d:2d:4a:23:3e:d5:
         74:2f:6d:3d:2b:a8:45:09:85:bd:dd:4b:92:f0:a3:34:aa:d1:
         bf:76:3c:d2:39:e0:c2:35:1c:fb:cb:8b:88:91:9b:b2:8b:fd:
         53:44:1a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----