Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
File:                     r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft (raw, json)
Hash identifier:          Piq3Pk3MAgCC6nFKQ9U1EcBOJoCuR+TAz010XTUBDiA=
Subject key identifier:   9D:3F:B6:D7:66:51:1C:ED:0E:1B:2F:CA:1C:40:BE:08:FA:7D:C7:5C
Authority key identifier: AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49
Certificate issuer:       /CN=F36F8BC2AF/serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49
Certificate serial:       0340
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
Manifest number:          033B
Signing time:             Mon 21 Sep 2026 04:16:30 +0000
Manifest this update:     Mon 21 Sep 2026 04:16:30 +0000
Manifest next update:     Wed 23 Sep 2026 04:16:30 +0000
Files and hashes:         1: r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl (hash: GFavceqgY59ZaJR4eN//LePL+pmCH2kl0hctO9vR/hk=)
                          2: 3AB9C0D0ED6D11F09ACA117DDAE4EC9C.roa (hash: qWbACSj4Y3MG+OhyVSYDEFibc3PnkmJTw+r0W8ExIVM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:16:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832 (0x340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F8BC2AF, serialNumber=AFC0C16B805A4BB3AE73EDC24C538380FC0E9A49
        Validity
            Not Before: Sep 21 04:16:30 2026 GMT
            Not After : Sep 23 04:16:30 2026 GMT
        Subject: CN=6ab0af9e-87e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c9:a5:c0:25:1c:1d:c7:07:b7:66:9f:79:05:
                    76:3e:36:b1:95:23:9f:21:ca:9b:70:7b:da:42:ab:
                    ae:3b:9b:2b:e2:9c:46:d0:82:61:46:62:63:a7:e8:
                    c6:a2:a9:af:40:b9:3b:53:c1:72:63:45:4c:99:b4:
                    80:cd:12:0c:61:7d:bb:97:4f:73:b7:66:84:51:46:
                    a6:8c:2f:72:66:13:e6:25:80:b4:ab:43:5d:32:ba:
                    61:f4:da:e4:25:9c:9a:8d:19:72:47:8c:55:cf:41:
                    e0:86:03:a8:3a:7d:76:7d:0f:21:62:f5:65:d5:6c:
                    6a:fc:2d:e7:10:13:37:89:77:9a:5e:13:5f:d7:87:
                    f0:bc:39:56:a6:c8:fb:39:04:13:f2:3c:f5:b7:48:
                    c5:52:0d:7d:1c:e6:59:17:1e:df:cf:0c:89:dd:cb:
                    fa:04:8e:30:b0:9d:e3:ff:b4:6d:f2:6b:2a:95:b4:
                    79:21:c0:85:30:c6:e4:77:5c:f8:76:4d:be:35:78:
                    98:a6:f9:18:39:ae:0b:d0:02:71:fd:4e:d0:5f:36:
                    cb:64:ab:a0:aa:cb:de:b7:c3:2c:b6:9c:15:38:bb:
                    aa:c7:46:0b:73:96:6c:28:4c:a7:8d:61:ff:99:fc:
                    aa:31:34:1e:ad:ed:ce:30:27:5a:7f:04:a9:c4:94:
                    45:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:3F:B6:D7:66:51:1C:ED:0E:1B:2F:CA:1C:40:BE:08:FA:7D:C7:5C
            X509v3 Authority Key Identifier:
                keyid:AF:C0:C1:6B:80:5A:4B:B3:AE:73:ED:C2:4C:53:83:80:FC:0E:9A:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/r8DBa4BaS7Ouc-3CTFODgPwOmkk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F8BC2/12B3179239E811EFAFB75F95762E951A/r8DBa4BaS7Ouc-3CTFODgPwOmkk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:b1:02:d7:cc:43:53:a7:77:67:bc:63:51:4c:b9:68:d3:87:
         97:0f:91:96:dc:93:70:bd:44:2e:ec:56:5d:b0:af:8a:54:c9:
         72:05:69:80:76:d5:82:3b:7b:ad:2d:12:fd:2b:fc:fb:3f:db:
         0c:84:e4:f6:cd:4d:c3:91:8e:db:5a:c5:00:a0:7c:de:df:8c:
         32:4f:c8:55:bb:d5:44:69:cb:da:76:41:e4:40:42:1b:00:d5:
         bd:a6:ca:8d:c1:cb:df:af:cc:67:18:88:c3:e6:65:ce:e8:77:
         33:86:e7:4c:e4:71:6b:74:b9:7d:c6:33:9f:a3:1e:1d:08:d6:
         92:e8:a8:db:24:25:ab:ff:1b:7c:9d:da:c3:c8:bc:06:0b:c3:
         bf:1a:46:ab:ec:fe:c4:d3:40:e4:12:e1:24:6a:31:86:8f:fe:
         b1:3a:e8:b2:84:4f:59:4a:a1:28:87:f7:4b:db:d5:42:76:37:
         c3:a8:1c:d3:df:2f:d5:f6:1b:1d:54:91:cc:d3:61:bd:55:26:
         92:5a:c4:fb:37:88:db:5f:df:7a:ef:ec:2a:f9:14:a6:80:c3:
         a2:8e:58:a7:64:59:15:e1:a0:94:0b:63:88:17:ee:42:49:00:
         01:12:e8:0b:6a:0e:94:8b:60:ec:f5:69:e9:a2:63:4b:4d:93:
         01:2f:f1:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----