Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft
File:                     Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft (raw, json)
Hash identifier:          NzpQp/dAbKKGaQvCRJ0IHKwOJrTZpSNfy/0hVpnd9oY=
Subject key identifier:   90:EC:28:4E:C5:98:4F:9F:B6:99:BA:C1:F1:3A:C7:39:8B:92:2E:A5
Authority key identifier: 41:BE:93:66:6A:A3:C8:89:C6:A9:ED:25:AF:FF:6B:86:5C:81:E8:0A
Certificate issuer:       /CN=F36FDB6DAF/serialNumber=41BE93666AA3C889C6A9ED25AFFF6B865C81E80A
Certificate serial:       081D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft
Manifest number:          081C
Signing time:             Mon 28 Sep 2026 02:02:20 +0000
Manifest this update:     Mon 28 Sep 2026 02:02:19 +0000
Manifest next update:     Wed 30 Sep 2026 02:02:19 +0000
Files and hashes:         1: Qb6TZmqjyInGqe0lr_9rhlyB6Ao.crl (hash: CVemSn9e6w8/cnQEYxTbAFvGodc6hb+VCHeP0OslAio=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2077 (0x81d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDB6DAF, serialNumber=41BE93666AA3C889C6A9ED25AFFF6B865C81E80A
        Validity
            Not Before: Sep 28 02:02:19 2026 GMT
            Not After : Sep 30 02:02:19 2026 GMT
        Subject: CN=6ab9caab-d2ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ff:3b:59:5c:9c:61:db:8e:40:0d:3d:f2:d4:
                    b3:d2:56:6d:94:83:5a:21:a1:7d:59:95:38:b3:6c:
                    4a:ff:54:bc:a2:c4:c0:24:ee:88:8d:53:cc:49:b9:
                    86:a6:32:a3:cc:4f:0b:13:8b:2d:22:5a:60:a2:96:
                    2f:1d:11:7e:81:38:a1:33:de:e6:02:37:44:d8:d3:
                    27:35:c4:40:68:2d:56:c1:11:e3:57:6c:bc:da:6a:
                    af:df:d0:cb:5d:c7:38:fe:29:59:1e:7d:fd:87:49:
                    5c:8d:b9:7e:ae:62:22:fe:9e:67:5e:eb:f3:40:9c:
                    d8:00:bf:67:bd:d5:ec:23:57:2d:13:5d:19:41:07:
                    54:0e:ae:80:c7:1e:c1:24:c1:c6:9f:c7:74:cb:e2:
                    76:e0:c3:d2:f5:dc:d0:13:ee:04:ba:45:e7:ab:45:
                    38:d2:04:75:f9:01:c7:82:d5:21:1e:c3:35:57:4b:
                    52:58:f0:74:86:c3:e0:dc:ad:1c:1c:63:5e:e2:0b:
                    cf:0a:84:3d:0f:d5:9c:61:76:45:08:8e:5c:98:10:
                    1a:35:17:6e:62:02:a9:58:31:d3:3d:9f:71:07:cc:
                    99:5b:2c:a5:51:8f:2c:ff:44:1b:b8:da:b8:fc:96:
                    4a:77:43:56:b1:c5:08:b7:e7:06:f0:8e:86:72:c1:
                    6e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EC:28:4E:C5:98:4F:9F:B6:99:BA:C1:F1:3A:C7:39:8B:92:2E:A5
            X509v3 Authority Key Identifier:
                keyid:41:BE:93:66:6A:A3:C8:89:C6:A9:ED:25:AF:FF:6B:86:5C:81:E8:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDB6D/237A7BF0816E11EBA47A295BF8AEA228/Qb6TZmqjyInGqe0lr_9rhlyB6Ao.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:bf:90:0f:3f:25:f8:01:c7:55:4f:0c:97:64:66:53:4d:d8:
         c1:37:19:36:d0:64:37:9c:54:de:ef:f6:b4:b7:3a:e6:b7:33:
         82:5b:44:23:f0:0b:b4:a3:6f:7c:9f:05:20:1f:39:8d:8c:0e:
         ad:b7:23:31:98:59:82:0b:8e:80:e0:ed:c2:d1:08:a0:f7:2c:
         97:71:e8:1d:c8:e4:f2:f5:73:96:e0:30:95:2a:40:e1:19:ad:
         08:92:e7:d8:14:13:e6:a7:d2:6a:54:78:16:84:ea:23:cd:83:
         50:d3:64:5b:c9:48:43:44:ad:f9:14:bc:3c:1a:b4:e5:9a:1f:
         7d:22:21:41:0a:80:af:55:7c:ba:1d:47:f6:22:2b:14:79:80:
         f7:bf:0e:60:1b:9e:33:8e:ec:2b:16:35:7f:5d:c5:a8:83:3f:
         cd:66:0e:3f:1e:51:1c:5d:04:63:3f:ec:55:e6:55:d9:bd:c5:
         11:ba:1c:ed:c7:bf:7a:ec:ca:a0:a3:22:fc:82:95:94:6c:dd:
         69:58:e0:cc:55:cf:42:27:26:35:56:29:00:d9:78:5e:ca:25:
         f7:bd:50:07:13:e1:1e:83:a4:ca:f0:04:9b:f1:a2:b0:c9:5b:
         4b:3b:66:ff:cd:e6:04:c9:be:4f:62:ac:1a:63:68:0b:c0:e4:
         48:c6:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----