Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
File:                     Rh3mXlosn0bNsVRHChQs6rACo-g.mft (raw, json)
Hash identifier:          gDcaVYMISSQJz7CGq4xFGVZLZ0WzeLzu0zCO8YZVEu4=
Subject key identifier:   F8:BA:15:BF:F7:62:09:29:20:D4:38:DE:D4:CA:96:A9:64:FD:18:20
Authority key identifier: 46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8
Certificate issuer:       /CN=F36E0C57AF/serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
Certificate serial:       034F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
Manifest number:          034E
Signing time:             Tue 13 Oct 2026 04:16:46 +0000
Manifest this update:     Tue 13 Oct 2026 04:16:45 +0000
Manifest next update:     Thu 15 Oct 2026 04:16:45 +0000
Files and hashes:         1: Rh3mXlosn0bNsVRHChQs6rACo-g.crl (hash: BxMPnx9etsEqvvcpbkwwG4X2ldKFa56ZyeXa5+DRTf8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 04:16:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 847 (0x34f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0C57AF, serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
        Validity
            Not Before: Oct 13 04:16:45 2026 GMT
            Not After : Oct 15 04:16:45 2026 GMT
        Subject: CN=6acdb0ae-ee7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:74:6b:cc:55:fe:c0:71:2f:37:3c:c5:72:
                    1f:24:b0:c9:70:59:8f:1f:96:03:c7:f7:10:88:30:
                    a3:2f:85:e8:9a:96:0a:6a:fd:75:4e:f8:c3:28:13:
                    10:4b:de:93:17:51:af:b6:5e:a7:32:d3:32:02:7f:
                    fd:a2:01:ed:54:d1:44:03:f0:be:7d:ea:b2:70:0b:
                    bc:8a:62:83:b8:90:8a:89:7c:20:16:48:c0:fd:b7:
                    ef:9e:af:be:d5:b5:a1:19:d4:9e:0a:af:79:59:b7:
                    0d:35:06:fe:0c:70:78:e0:f9:fd:48:95:d7:26:53:
                    38:1e:41:a5:b4:9d:d9:0b:9d:f7:8c:0c:de:aa:83:
                    32:11:58:e0:1c:8e:90:27:36:8f:62:49:50:64:ea:
                    61:a6:b7:ba:ee:05:45:de:ba:33:2c:d6:3f:3f:05:
                    01:60:85:ce:af:d1:72:87:07:a1:58:f1:f6:21:81:
                    ed:b2:a9:e8:bd:22:e6:15:95:0d:e2:d0:02:cf:8d:
                    7e:0f:04:fe:0d:c6:c0:d1:c3:6e:61:26:de:d6:4d:
                    d3:d7:71:29:df:6b:74:85:35:81:c6:4b:4e:06:5c:
                    f5:6a:ef:ee:5a:c5:79:a2:0d:39:68:c2:d4:28:ac:
                    c2:44:bc:60:4a:2e:e4:03:13:8b:e8:f2:07:84:25:
                    20:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:BA:15:BF:F7:62:09:29:20:D4:38:DE:D4:CA:96:A9:64:FD:18:20
            X509v3 Authority Key Identifier:
                keyid:46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:ae:af:f2:f7:c1:b6:64:b1:d2:41:1e:3b:48:90:c0:53:d2:
         31:ed:b6:5e:30:db:56:d2:24:7e:81:b4:55:40:5d:e2:70:bd:
         64:29:83:53:c5:2c:55:41:08:cc:f4:1f:76:bb:12:2e:ce:14:
         17:d2:24:7b:2d:3c:3e:1f:50:5d:cc:ee:d1:0c:83:57:d8:d7:
         43:fe:cb:6a:ee:a9:c4:86:ef:6e:5c:dc:5d:90:d5:b4:8a:a7:
         08:19:63:2c:80:d5:7e:e6:ce:ac:f1:8f:d5:46:03:74:05:5b:
         24:fa:35:44:19:a1:ae:83:99:88:cd:35:2e:e2:49:fb:b9:1e:
         5b:52:be:48:ae:64:7f:3b:2d:7b:67:22:8d:f7:12:c2:3e:7a:
         91:c8:be:e0:53:b3:d4:fd:d4:88:7a:c9:22:f6:40:59:b3:e2:
         12:37:d3:bb:1d:2f:9e:3a:59:4c:f8:59:6c:09:dd:8e:73:bb:
         24:4f:24:3f:4a:7d:b9:a6:f8:e6:ed:86:70:7a:b7:a5:83:99:
         5f:f5:b8:d6:59:dc:c8:b5:45:e4:e9:39:6a:23:20:65:e0:e1:
         12:b2:f4:b5:54:c7:26:2f:94:42:02:0d:65:a6:a5:77:a6:63:
         63:5d:49:27:a8:53:6e:9f:31:27:35:a8:49:06:d8:c9:f0:79:
         75:b6:99:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----