Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
File:                     snY9UExa-ft12a62ByQi-Hoaa_Y.mft (raw, json)
Hash identifier:          yuK8EfNjrAhQpSs/RJ7xmHlrdoM9Jjmym7atsZjc+VI=
Subject key identifier:   19:7A:53:B1:F4:4E:D5:40:6C:72:8C:9E:EB:2E:2A:49:52:18:59:0B
Authority key identifier: B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6
Certificate issuer:       /CN=F36FC75CAF/serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6
Certificate serial:       02CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
Manifest number:          02CC
Signing time:             Sun 04 Oct 2026 04:34:55 +0000
Manifest this update:     Sun 04 Oct 2026 04:34:54 +0000
Manifest next update:     Tue 06 Oct 2026 04:34:54 +0000
Files and hashes:         1: snY9UExa-ft12a62ByQi-Hoaa_Y.crl (hash: Z9P74pOXhSv97JNN0kRoA1vFTlf4dqKhzsVF13tpmVE=)
                          2: 2836E3E2983811EFB48AAD6F762E951A.roa (hash: ilc1+7HG6/OhpNZjczTeMOkT7vcZALpZGaGEFuomW1E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 04:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 717 (0x2cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC75CAF, serialNumber=B2763D504C5AF9FB75D9AEB6072422F87A1A6BF6
        Validity
            Not Before: Oct  4 04:34:54 2026 GMT
            Not After : Oct  6 04:34:54 2026 GMT
        Subject: CN=6ac1d76f-e971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:54:7b:a1:23:c1:64:3c:22:9a:f1:c8:3e:ad:
                    a0:33:a7:e9:3c:dc:30:28:5d:90:b7:39:e6:bf:61:
                    a2:fd:ed:ea:4a:1e:91:61:26:c7:34:f7:f6:9f:41:
                    1a:78:f4:ae:90:88:be:41:e7:df:89:30:a8:39:eb:
                    8e:5d:49:67:e9:03:c8:3a:be:fb:2a:81:ce:45:18:
                    c8:05:3a:cc:5e:a0:a4:9c:cc:a8:c2:93:01:73:36:
                    02:e9:ce:09:ab:cd:1f:99:c1:d7:83:45:62:58:0b:
                    ef:fe:89:1a:59:3b:d7:6f:df:46:88:e3:93:0a:3a:
                    b3:75:82:34:21:c4:38:c4:68:f3:cb:4e:b4:d4:dc:
                    03:d6:b6:6e:2b:b4:db:7d:cc:c7:84:ca:95:d2:98:
                    6f:b4:49:e9:0c:76:ea:8e:27:47:b1:2a:c5:2e:02:
                    31:17:9d:5c:90:53:50:6d:aa:f5:59:25:a7:fc:a3:
                    e6:39:69:fe:94:30:d1:47:0b:0f:45:b1:8d:f5:b7:
                    69:48:c9:ec:e0:d7:88:da:7b:6b:0d:ef:ff:15:4c:
                    4a:b4:a2:73:87:b5:f1:4f:ca:a5:b9:a6:e5:89:de:
                    24:a3:ec:05:f1:d6:88:6f:5f:1e:e0:fa:7c:36:ce:
                    56:fb:29:39:17:f9:9f:81:07:e7:13:c7:dd:0d:03:
                    52:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:7A:53:B1:F4:4E:D5:40:6C:72:8C:9E:EB:2E:2A:49:52:18:59:0B
            X509v3 Authority Key Identifier:
                keyid:B2:76:3D:50:4C:5A:F9:FB:75:D9:AE:B6:07:24:22:F8:7A:1A:6B:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/snY9UExa-ft12a62ByQi-Hoaa_Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC75C/9E14B5BE983611EFB97BD164762E951A/snY9UExa-ft12a62ByQi-Hoaa_Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:a8:22:37:5f:24:6f:20:94:93:6d:9b:70:37:f2:c7:cb:19:
         cf:62:88:6a:61:37:dd:30:6f:b4:91:fa:26:5f:5c:4c:07:9e:
         b6:7b:b0:85:1d:a8:99:34:ed:d5:58:c8:6e:47:e3:8b:4c:96:
         e7:00:a8:f7:88:d5:d2:87:2f:e7:f2:03:8e:30:69:ab:e4:d5:
         74:92:3f:8b:bc:23:24:8a:00:d8:e7:ba:41:1c:2a:b3:4f:43:
         6e:bc:77:b9:7d:ff:6d:5f:6f:3c:ee:f6:81:d1:36:4b:e5:37:
         08:5e:eb:fe:d8:b8:ec:74:06:f6:fd:46:ca:83:60:23:d4:98:
         dd:75:d4:fd:dd:01:99:bc:62:35:66:e5:8e:60:95:da:04:df:
         21:b9:8b:a3:bc:5a:e4:f2:4c:5c:c4:f9:e8:c4:35:dc:f8:1a:
         8d:a8:3f:87:b0:6e:84:c7:8c:9f:9a:51:9a:aa:95:49:df:2e:
         e3:83:19:7b:e7:52:b2:f1:b6:05:7e:fa:53:f6:a4:a9:b1:80:
         c6:ec:96:df:03:61:55:a4:f7:11:6d:4d:db:44:d4:86:5d:37:
         a0:6d:17:c6:7f:c1:c8:d4:61:22:58:03:fd:40:26:de:97:0c:
         04:4a:ce:a5:1f:60:e4:90:03:47:72:2e:3a:74:fe:8a:8d:b7:
         91:b5:ef:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----