Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
File:                     hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft (raw, json)
Hash identifier:          qyyjIWeGz4J6/YHTqqeHPGbCb/qg7/h79JLXJJh2aos=
Subject key identifier:   4E:01:9F:5B:63:C6:5E:74:C6:18:68:99:61:D3:03:19:61:34:51:2F
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       0837
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
Manifest number:          07ED
Signing time:             Mon 21 Sep 2026 14:09:05 +0000
Manifest this update:     Mon 21 Sep 2026 14:09:05 +0000
Manifest next update:     Wed 23 Sep 2026 14:09:05 +0000
Files and hashes:         1: hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl (hash: xfxqDOQ7JNTko2/SPGLOyViaRoFMAxtbqQq7ArKbJyE=)
                          2: 3B0BC528A8E011F08381ECAFDAE4EC9C.roa (hash: p8rygDaqMlfKM5+mFXH3h51l6FuqzUHfYdCJkipQXZk=)
                          3: 5D4E3E2CB42911F1A7228ADFCE1D38B0.roa (hash: Sg21FeRg0sCbvKh+6dJ2xNE1rFfw9mLKthCDLQtSl8w=)
                          4: 582E5A0E1FB311F1988F6B9FDAE4EC9C.roa (hash: 0HSfpxd6RJw1dDAmVY8F6DqPcLyoD2dBDFLG8DPE+ZM=)
                          5: BF074D607AB911F19544E1E5CE1D38B0.roa (hash: qFoBsejg9FN/FDV2O6h7qkRNG5vip+EUMILXAArsA6s=)
                          6: 7C11FB3A8FD711F194865F12CF1D38B0.roa (hash: xF16zWSmkM/c3V8YjQqugs+5p0JlSIff3givFahh+9Y=)
                          7: 973F091E1FB311F18E80869FDAE4EC9C.roa (hash: CzHZTufJFyhjGHkpFVZuM6wyww8c6DnqEF6oCbO8Cz0=)
                          8: 004B1DF2B36811F0A98458F0DAE4EC9C.roa (hash: zkIpkIt6ml3z7EI6+y3S5IJ7YdnJfqyc+dJmlhiixtc=)
                          9: 31E310CCB5C411F1AC8E7ED9CE1D38B0.roa (hash: iWVWVjP77LsNaKIjHC8sf05lelaswMjolhlVLp8YwMA=)
                          10: E0978148B5C411F1A36DE3DDCE1D38B0.roa (hash: z5bG46DBUE3vNLEVMpI+LUmEIzU52A9/RHq13j9q2E0=)
                          11: 6DA8BDECBEF711F0BC88C8C8DAE4EC9C.roa (hash: mr6RFujr9br3UnulbLDbQG/tKZZBLEAMX2oMaBzTflg=)
                          12: DF36CBCABEF711F08A36B0CADAE4EC9C.roa (hash: AOAhdb8NfSG9X3GlC/Vi6d309IftduVQ5MLyZDqd8CA=)
                          13: 36A614CEB42A11F180BEC6E5CE1D38B0.roa (hash: aj9KPPBD12Iwz9ZD1UE6JBIBWDkqvN+k6I+NvFlEqAI=)
                          14: A59DE662B5C511F1B97B67E2CE1D38B0.roa (hash: D2enViRD9nEBljcCW0p8G2Wrk/CPIlQ8omhKxmpbPAE=)
                          15: FD95FA44B5C511F1BD3C9EE4CE1D38B0.roa (hash: JbbjFtzo3g6b4VR4ureyvlDyIMVyw9Db1qIxz067tJ4=)
                          16: 27636ED4B5C511F194E419E0CE1D38B0.roa (hash: ewBZP+o3gFUaiXSh3dLy0P/FBmeqa9KK37P6TR8GuE8=)
                          17: A0124150B36611F092119CE7DAE4EC9C.roa (hash: KPAVGIR+9gV2f09zVyhq7pMlJ/S3+kwqXxT6U4gqUlY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:56:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2103 (0x837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Sep 21 14:09:05 2026 GMT
            Not After : Sep 23 14:09:05 2026 GMT
        Subject: CN=6ab13a81-97af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e6:66:35:f0:8f:2d:b5:1c:cf:73:73:43:2c:
                    3d:e7:8e:51:18:49:75:85:bd:da:c8:cf:2b:b6:af:
                    7f:39:c8:01:c4:5b:e9:a9:8a:a9:fa:1e:d7:01:eb:
                    9c:56:c4:c4:55:6d:82:02:0a:de:95:e0:e2:1a:f1:
                    ba:0b:26:29:a4:ec:8a:7e:f2:18:c1:44:1c:6b:b9:
                    b6:25:f7:d6:4a:4c:61:45:45:e8:63:66:b5:7f:52:
                    d7:2b:e7:d1:77:29:5c:a7:6d:65:d6:fa:ee:37:ec:
                    cc:56:91:a4:78:63:50:a4:f3:dc:3c:42:5f:d5:a4:
                    00:90:31:e9:1a:1f:7e:f7:aa:5f:2b:19:a7:20:f4:
                    b4:3c:4d:5b:8e:3b:a4:64:d9:23:a9:ca:01:67:07:
                    12:de:df:9c:b8:fe:0f:3c:56:81:31:41:18:84:7e:
                    c6:1e:7d:fb:15:2a:80:5b:9e:e9:95:32:f6:d9:7d:
                    06:dc:38:21:9c:27:2b:71:c1:08:f5:86:f0:db:a0:
                    5e:cb:4b:4d:92:54:28:fe:85:53:3c:71:7b:5f:37:
                    b4:16:8d:83:b0:0a:bf:b3:f9:c0:4b:e4:83:70:fd:
                    a1:e0:36:f3:7e:4d:db:47:52:99:6b:16:48:00:22:
                    92:ee:5f:15:f4:b3:5d:c5:45:0d:39:aa:a1:d2:e1:
                    c8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:01:9F:5B:63:C6:5E:74:C6:18:68:99:61:D3:03:19:61:34:51:2F
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:09:64:11:cf:6b:4b:8f:7b:cc:22:5a:83:0a:f8:45:ef:20:
         0b:57:ae:09:7d:1f:02:ea:49:c4:c8:66:71:6c:d9:e9:fa:e8:
         80:a3:4b:18:7d:0e:9a:de:99:49:5f:e9:44:80:34:b6:d0:9b:
         44:2a:38:82:64:3d:35:04:90:ff:11:30:ca:3a:4c:99:2e:f5:
         18:49:10:16:a3:b6:84:92:0a:4b:47:4f:d5:ad:45:5f:24:55:
         ef:44:f6:18:08:41:f4:10:6e:28:39:a7:17:d0:bb:be:e2:35:
         71:8e:42:d8:a1:a1:11:10:8c:2f:d1:f3:8b:40:23:d8:32:8d:
         df:85:5e:cc:36:7e:8b:62:8d:13:6e:8b:32:f3:32:02:c8:92:
         85:c8:f8:0a:16:64:55:76:a6:bc:1e:57:57:bc:39:24:a0:2d:
         8d:24:ec:8a:cf:37:0e:32:3b:4c:8c:c3:8e:6f:15:e3:a3:83:
         1c:14:ac:62:66:32:93:32:3b:60:27:98:b8:38:3c:69:09:bc:
         83:f1:08:d2:8d:7a:f4:5d:1d:80:c0:8b:23:64:03:86:e9:a6:
         f3:c3:87:99:d2:fd:bb:ba:fd:92:7c:75:7c:c1:fc:91:98:5b:
         cd:f7:61:e4:cb:9c:cd:3b:d5:d7:e7:aa:76:0c:fc:28:9d:af:
         5e:f1:33:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----