Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
File:                     NzwYJ-JwTD_cFqh4mA-tyINfpII.mft (raw, json)
Hash identifier:          AhFZlJbJjXTTRcsJ5DG6M9KQ7EtJ2wccmaCR1uC0h6g=
Subject key identifier:   37:15:9B:E4:8C:51:45:20:75:88:4A:CB:D9:F8:A1:ED:9D:CF:A4:74
Authority key identifier: 37:3C:18:27:E2:70:4C:3F:DC:16:A8:78:98:0F:AD:C8:83:5F:A4:82
Certificate issuer:       /CN=F36EB6AEAF/serialNumber=373C1827E2704C3FDC16A878980FADC8835FA482
Certificate serial:       096F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
Manifest number:          096D
Signing time:             Sun 04 Oct 2026 01:45:37 +0000
Manifest this update:     Sun 04 Oct 2026 01:45:37 +0000
Manifest next update:     Tue 06 Oct 2026 01:45:37 +0000
Files and hashes:         1: NzwYJ-JwTD_cFqh4mA-tyINfpII.crl (hash: mxNsYrHMYGyOTj1mT55BG+8C+zzirNGxjmeLtNHX/hM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 01:45:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2415 (0x96f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EB6AEAF, serialNumber=373C1827E2704C3FDC16A878980FADC8835FA482
        Validity
            Not Before: Oct  4 01:45:37 2026 GMT
            Not After : Oct  6 01:45:37 2026 GMT
        Subject: CN=6ac1afc1-ec12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:ad:93:7a:d1:c2:1a:54:de:0b:c3:30:7d:
                    29:7a:d2:b8:e0:b0:4a:bf:7a:0e:bf:d6:14:f2:ce:
                    48:44:75:a1:7e:77:c9:20:60:84:32:1b:69:b8:1f:
                    00:99:07:db:95:b1:51:47:64:b0:ad:85:76:7e:f3:
                    e4:eb:6e:83:cf:f0:f8:cc:d6:91:51:14:53:ce:f6:
                    17:df:27:a8:77:a5:d4:d6:97:aa:9e:64:f5:23:66:
                    1c:37:20:2b:7f:06:23:4a:c0:db:f6:b6:15:73:e2:
                    19:10:e4:32:49:b8:8e:c2:c9:bc:7a:26:04:3a:fd:
                    94:3a:32:42:9f:9b:85:ab:fa:1c:ed:03:51:ab:c5:
                    84:3b:83:6a:44:9e:2f:6b:09:ae:72:5e:9c:0e:22:
                    ae:97:5c:22:89:11:1b:dc:e7:85:ea:96:f6:0f:c1:
                    0c:2c:79:ff:7c:9a:34:1c:62:2c:bd:a3:07:db:4d:
                    2c:74:8e:8a:de:c6:f0:aa:29:96:da:3b:71:d9:94:
                    f2:a5:dc:4c:1c:8f:1e:9d:c6:ff:6f:c8:7b:25:91:
                    84:81:27:a5:92:18:6e:bd:6d:d2:aa:8e:05:f5:33:
                    7c:6d:ac:b1:b9:2f:60:7d:8e:5e:8d:93:a2:49:b1:
                    b6:2e:ab:12:3f:ea:8f:63:94:10:14:92:c9:3f:56:
                    21:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:15:9B:E4:8C:51:45:20:75:88:4A:CB:D9:F8:A1:ED:9D:CF:A4:74
            X509v3 Authority Key Identifier:
                keyid:37:3C:18:27:E2:70:4C:3F:DC:16:A8:78:98:0F:AD:C8:83:5F:A4:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NzwYJ-JwTD_cFqh4mA-tyINfpII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EB6AE/381289B283DC11EA96D3CC4EF8AEA228/NzwYJ-JwTD_cFqh4mA-tyINfpII.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:12:0a:eb:1c:e0:3a:0c:76:5a:6b:7b:70:0a:e3:f4:20:12:
         df:33:a0:1b:08:58:58:ce:b8:c7:22:5b:33:e2:2d:d5:c9:f1:
         0d:cc:4a:1d:38:8b:92:e2:e6:31:71:48:f4:ad:9f:b5:af:ac:
         11:a2:7a:1d:ab:ed:7f:13:cc:22:8b:20:2c:51:bf:48:e8:c1:
         77:0e:9e:0b:fb:19:65:83:37:71:df:95:40:9a:17:b8:09:00:
         3f:e1:42:fc:84:64:01:0a:1f:b6:07:3a:f7:6f:69:33:c0:bd:
         24:a6:f9:0f:ce:3a:e2:15:27:31:13:07:66:cf:bf:5b:43:06:
         1a:0b:20:46:fd:d4:0a:67:e8:c9:c3:1b:58:14:38:55:00:52:
         26:d6:01:32:fe:e3:e1:33:6e:3a:ed:b2:1c:a2:07:a9:0e:13:
         b8:c7:af:1c:b3:91:9c:f6:06:13:df:6d:fa:57:63:8b:e1:18:
         8f:2f:fe:f6:f4:d7:81:3c:bd:06:93:50:e1:30:d9:8f:55:fa:
         c0:88:45:12:fa:f5:a1:7b:c4:17:ab:44:7f:d9:e6:26:a7:f3:
         63:a7:f5:81:41:a6:b4:d8:67:0e:d5:03:04:07:e9:ee:ff:83:
         2c:db:fc:8d:d1:7a:bc:f5:fa:6d:26:e7:77:d9:8a:cb:50:be:
         4e:83:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----