Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
File:                     mpAdFskLYBlnVD3tV83q800LJz4.mft (raw, json)
Hash identifier:          4TqLSDStARhNunWwDZ8d1J+aFJsUTZZTW0c2ioPFsro=
Subject key identifier:   2E:87:05:9C:9C:91:C6:69:8B:84:1F:52:98:3D:B6:16:91:E3:6E:7F
Authority key identifier: 9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E
Certificate issuer:       /CN=F36ED442AR/serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
Certificate serial:       100E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
Manifest number:          100E
Signing time:             Sat 26 Sep 2026 00:57:03 +0000
Manifest this update:     Sat 26 Sep 2026 00:57:02 +0000
Manifest next update:     Mon 28 Sep 2026 00:57:02 +0000
Files and hashes:         1: mpAdFskLYBlnVD3tV83q800LJz4.crl (hash: BPyO958EpY66kacWuJx3OLCx1x5MCuavPWS58NO5zrs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                          rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4110 (0x100e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED442AR, serialNumber=9A901D16C90B601967543DED57CDEAF34D0B273E
        Validity
            Not Before: Sep 26 00:57:02 2026 GMT
            Not After : Sep 28 00:57:02 2026 GMT
        Subject: CN=6ab7185f-5286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0a:8a:82:ea:8a:ee:9a:d0:c7:ed:90:1c:6c:
                    fa:e7:b9:76:a7:0f:43:e0:da:38:46:fc:2a:fb:15:
                    fb:35:bc:13:4b:60:73:89:0e:38:94:51:25:9a:d8:
                    46:4e:04:e0:3d:b7:ad:60:d2:92:b9:3a:02:62:2f:
                    ae:0d:d9:a9:84:c5:72:c8:e6:93:5f:32:c6:2e:69:
                    6d:52:3a:b2:c9:a0:81:b5:52:24:0f:bc:91:c6:eb:
                    41:9c:80:a4:d0:f7:a3:92:ef:0d:38:01:85:03:d2:
                    96:fd:6c:f4:1a:b0:32:09:62:6e:1f:f0:a4:21:b1:
                    7c:62:32:7a:c3:6b:49:b6:0a:26:47:ef:02:b1:8e:
                    99:53:b3:ec:35:d3:eb:fc:a2:b5:cc:d4:d0:e0:61:
                    4e:7c:75:36:75:52:2c:74:5d:3b:0c:aa:ee:2d:17:
                    05:41:47:ae:30:c5:05:b1:fb:e4:a7:76:8e:ec:5b:
                    b3:0c:82:0b:d3:2a:2f:3a:53:1d:a5:d7:95:81:3c:
                    50:94:6c:76:61:b1:fb:4c:59:93:48:d0:17:dd:b4:
                    24:d2:91:5e:d3:fd:e9:e1:80:ef:be:4a:4a:24:82:
                    53:62:7a:64:28:b2:1b:ad:83:e1:db:8f:17:c7:e5:
                    1b:da:21:ee:78:40:d8:fe:b6:79:20:8f:a2:51:27:
                    68:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:87:05:9C:9C:91:C6:69:8B:84:1F:52:98:3D:B6:16:91:E3:6E:7F
            X509v3 Authority Key Identifier:
                keyid:9A:90:1D:16:C9:0B:60:19:67:54:3D:ED:57:CD:EA:F3:4D:0B:27:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/mpAdFskLYBlnVD3tV83q800LJz4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED442/D32C1B5657C811E5BDB1DA3EF8AEA228/mpAdFskLYBlnVD3tV83q800LJz4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:69:e3:41:8b:bd:5f:c6:49:02:4e:c3:ed:3b:27:5d:48:d8:
         ef:30:7f:3e:cf:ca:b9:66:c6:bd:79:a3:c8:35:03:27:60:95:
         6d:61:f5:56:52:8c:3c:51:2f:fe:83:cb:a9:55:9c:d4:e2:5e:
         70:36:c6:72:bd:1b:cd:ba:fd:8e:be:bf:5d:3d:13:55:e8:ef:
         f4:e4:7f:f1:7c:23:27:6d:e8:81:52:79:f8:e0:36:11:f8:47:
         94:dd:0b:54:9d:92:bf:64:65:1e:3f:c6:2e:9a:d0:c1:2b:aa:
         21:c3:a9:a8:54:7b:98:47:34:24:4c:29:92:e7:da:21:9f:05:
         fb:fa:61:84:45:72:be:df:f5:74:56:f7:e2:d4:24:fd:51:48:
         c5:ce:3d:ca:43:9e:01:73:3f:d2:03:70:0e:e0:21:c8:7e:e4:
         a6:55:cb:fd:8f:5c:d4:3b:1b:b5:86:bd:52:0c:55:af:c0:d9:
         82:f4:19:6a:41:65:4e:f5:af:fe:e5:10:61:ac:32:2f:ae:01:
         5a:85:db:51:14:d6:09:5f:91:28:02:7c:e6:17:42:c3:4d:6d:
         e3:90:ab:5f:3b:52:d9:86:84:5e:81:d4:f8:d6:f0:0d:df:eb:
         79:53:b8:38:9c:26:c9:86:50:44:cb:5f:7a:26:96:03:a6:c9:
         e0:1e:90:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----