Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
File:                     XulhNES2heRACvJQMvMjaKxzhgo.mft (raw, json)
Hash identifier:          QHsrdWOQYcph66o1Xg7wl365a8nw6fyYSPTJVWz6pl8=
Subject key identifier:   20:30:24:55:0C:05:BB:7D:CD:32:03:FE:27:7A:6A:5F:7A:93:9E:57
Authority key identifier: 5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A
Certificate issuer:       /CN=F36EE763AF/serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
Certificate serial:       FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
Manifest number:          FE
Signing time:             Mon 21 Sep 2026 05:22:24 +0000
Manifest this update:     Mon 21 Sep 2026 05:22:23 +0000
Manifest next update:     Wed 23 Sep 2026 05:22:23 +0000
Files and hashes:         1: XulhNES2heRACvJQMvMjaKxzhgo.crl (hash: E+nrwtA6JCndxEmZOSAWM/qSPn1wJGrMUBu9QVz2sC0=)
                          2: 8CF50C7EF09C11F09220C691DAE4EC9C.roa (hash: RBXfrMLemnAtHw5865OVdIO7wWh6V9X2nw9Mms9JBjU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:22:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE763AF, serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
        Validity
            Not Before: Sep 21 05:22:23 2026 GMT
            Not After : Sep 23 05:22:23 2026 GMT
        Subject: CN=6ab0bf10-4fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9a:0d:1e:3e:3d:11:ef:02:f0:d9:fc:96:a8:
                    3e:ae:0b:75:9a:73:71:80:cd:34:b1:6c:81:00:0a:
                    08:90:10:ed:c5:7d:d4:42:ad:5a:7c:24:c2:eb:6c:
                    43:98:ac:49:b0:34:b4:2b:d8:98:75:67:11:e7:c6:
                    0c:17:19:7c:0a:e3:f8:b9:5a:8a:8e:74:db:08:e5:
                    96:a0:fe:1c:02:ce:17:51:2a:13:a7:f2:17:3a:49:
                    cd:34:f1:e9:48:d3:c1:c2:c0:61:72:ef:65:64:47:
                    6e:fc:c4:08:bb:0a:c7:3c:0b:e8:ea:c6:1f:9a:65:
                    6b:d3:fe:eb:bf:a0:15:bd:4a:82:b6:b1:f7:ff:0d:
                    4c:c4:ef:2e:e5:13:a9:a0:06:77:c5:4a:cb:1e:ce:
                    f3:59:d8:21:7b:c3:a1:65:4d:31:59:f6:bf:2b:33:
                    f6:7a:53:7f:31:0b:ae:da:b1:30:a1:30:42:14:c4:
                    a5:aa:19:c7:51:35:90:5f:81:1c:1f:ef:a9:16:57:
                    b7:41:10:99:22:86:d0:d3:24:59:a3:ae:65:92:ca:
                    12:32:e0:15:36:fc:33:bc:25:da:c1:6d:53:d8:00:
                    c9:1a:cc:a6:2e:4f:06:ab:56:88:22:c7:1f:2a:33:
                    c9:c5:03:19:ff:a6:6d:6d:9d:de:ee:d5:ae:48:02:
                    96:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:30:24:55:0C:05:BB:7D:CD:32:03:FE:27:7A:6A:5F:7A:93:9E:57
            X509v3 Authority Key Identifier:
                keyid:5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:7a:9c:21:cc:56:36:1a:e7:da:0d:c1:69:ab:ba:6b:b6:f5:
         b7:06:7d:59:10:df:81:a1:70:d9:6d:a2:32:3b:c4:09:7d:6b:
         e8:5b:fa:b1:3e:b9:a4:f6:f4:14:99:4f:6a:c5:f0:60:a8:59:
         36:6e:2c:a0:7f:be:72:f2:29:05:9b:36:1a:4e:e2:a8:47:8a:
         23:2d:e9:38:91:64:d5:e1:c3:06:58:28:39:ec:8f:11:79:a5:
         b7:ad:9b:7e:48:47:18:7d:66:7d:bb:10:1b:a8:5e:11:29:da:
         f3:b8:9f:24:96:4d:3b:c0:6f:58:bd:c8:fb:a6:9b:34:9e:42:
         f0:40:1f:6c:0d:df:f5:49:80:5c:27:ec:ff:94:5e:01:d7:d3:
         d3:1c:27:34:2f:5d:ad:1d:84:27:6e:60:65:f0:7f:4c:03:a8:
         09:76:74:3a:e6:b1:92:12:7c:0c:4c:a1:a2:22:9b:42:7f:90:
         10:29:db:18:8b:43:03:55:0e:bb:87:86:12:35:8b:13:e9:4f:
         d0:33:d2:2c:43:33:eb:22:4b:d2:21:b8:b8:e3:81:5f:d0:e0:
         83:3a:ed:79:d1:79:58:87:5a:8c:df:0f:40:cb:f6:ef:b0:e5:
         a4:8d:12:a2:9c:a8:95:3d:fd:5e:f9:ec:a6:df:e5:f4:da:53:
         4c:35:09:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----