Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
File:                     ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft (raw, json)
Hash identifier:          DoNz/Vdm2bgE6du3xLkzrNVsm0gslzwYUhZVTtmWx/U=
Subject key identifier:   75:49:C4:75:42:B4:E6:74:19:52:B8:08:B8:43:C7:C9:38:83:47:6A
Authority key identifier: 22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74
Certificate issuer:       /CN=F36DD266AF/serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574
Certificate serial:       0102
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
Manifest number:          0101
Signing time:             Sun 27 Sep 2026 05:24:08 +0000
Manifest this update:     Sun 27 Sep 2026 05:24:07 +0000
Manifest next update:     Tue 29 Sep 2026 05:24:07 +0000
Files and hashes:         1: ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl (hash: YrZR0DRx/w9tstQWIHXqNElWwO7CfwnOs7Ch3mHkTmA=)
                          2: CDA91C0EF21F11F09D0C95E1DAE4EC9C.roa (hash: i/Wi+caUXTG32H1sLXk5LlvkMGbjcNs/nOtlDeXv2gQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 05:24:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 258 (0x102)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD266AF, serialNumber=22DC5011CE8A1FEC5F87138B0B6285F9F1B8F574
        Validity
            Not Before: Sep 27 05:24:07 2026 GMT
            Not After : Sep 29 05:24:07 2026 GMT
        Subject: CN=6ab8a878-3884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:38:2c:c7:af:54:d4:4e:a8:4a:5c:80:07:97:
                    11:64:49:3a:ed:98:97:de:be:c7:af:c3:62:e6:59:
                    a5:c1:6c:42:db:f3:20:a3:3a:8f:ec:bf:fd:92:83:
                    a0:1c:5c:c9:be:b1:cc:33:1e:ac:3a:ef:29:4a:d1:
                    c5:17:8f:18:26:cd:16:ed:7d:6d:dd:06:ae:9e:ec:
                    9a:50:68:ca:ca:c8:57:e8:4e:1b:79:9d:28:76:f9:
                    a4:3b:86:96:a0:b9:06:05:cf:72:65:60:81:cc:0a:
                    72:b9:c4:b6:77:6c:ba:b7:16:dd:41:36:0b:bd:1e:
                    a7:01:bf:b0:c7:21:17:3a:28:32:23:22:3c:91:34:
                    f2:ba:48:ee:44:81:7a:b2:f2:97:c0:5f:0d:24:63:
                    b4:c0:c9:c2:ff:7e:b9:8f:da:9d:bc:0d:1c:87:c2:
                    04:e9:ec:91:51:27:94:08:67:98:f5:51:f2:18:1e:
                    58:d1:1f:c4:95:b2:4f:b0:ca:dc:24:f5:b0:5d:5f:
                    f5:7a:38:c3:de:da:cd:19:78:24:1e:5d:3a:42:3d:
                    06:0f:9d:55:bf:6c:0d:db:14:68:b0:d1:20:e5:ef:
                    6b:15:06:10:ac:d4:4d:73:38:16:17:0e:5f:07:0f:
                    ca:01:c7:43:34:e0:c7:71:bd:77:57:b8:2e:70:21:
                    d4:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:49:C4:75:42:B4:E6:74:19:52:B8:08:B8:43:C7:C9:38:83:47:6A
            X509v3 Authority Key Identifier:
                keyid:22:DC:50:11:CE:8A:1F:EC:5F:87:13:8B:0B:62:85:F9:F1:B8:F5:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ItxQEc6KH-xfhxOLC2KF-fG49XQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD266/6377A4F4F21F11F0927B6DDEDAE4EC9C/ItxQEc6KH-xfhxOLC2KF-fG49XQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:09:08:e1:5d:f7:b8:b6:22:ef:4d:07:57:36:d7:de:74:c7:
         53:38:e4:84:73:b5:36:7e:ee:17:32:15:44:71:fb:8f:78:e7:
         b1:ee:58:5e:56:59:98:2c:64:62:e4:db:74:69:53:29:63:42:
         05:6a:e6:d2:03:c4:b2:2c:a4:35:14:c8:cf:6b:0d:98:1a:e5:
         7e:be:9f:e3:54:d5:00:77:2a:14:26:f5:d8:23:3d:f9:30:39:
         ff:2d:f9:97:51:1f:1a:29:22:ce:6e:6a:0e:84:c5:c4:ff:aa:
         a6:2a:28:58:ee:6d:5a:0c:c7:23:17:7a:4f:d2:01:11:3a:a6:
         dc:09:c1:f2:f7:7c:f2:8f:77:02:ae:45:1c:4a:53:c2:e4:44:
         72:68:74:72:b1:a9:73:f3:4d:34:87:99:11:b8:4f:de:5d:c3:
         10:ba:17:1f:5d:7d:2f:2b:b6:28:21:2c:8b:30:2a:b3:43:67:
         b0:02:f1:7b:07:72:a0:6c:8c:86:26:60:e7:1c:c7:86:46:ba:
         8f:53:9f:0f:97:e4:65:08:e0:d3:48:f7:cc:b7:98:e1:20:4a:
         91:df:d5:35:2e:ca:c6:71:36:5a:e9:07:10:d1:0f:b0:e3:8e:
         d2:0d:d3:47:c9:9c:ec:4e:d1:6f:bc:8f:47:3c:e3:4d:18:1d:
         05:f4:90:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----