Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
File:                     4-72W1UWm_HGaNKpYbla8vKIf90.mft (raw, json)
Hash identifier:          wr2YQR8VENRcsXE8BK458/MFkKTyGumTOcnRnVXocV8=
Subject key identifier:   4D:8E:60:C4:F3:7C:5E:49:0D:F3:CB:72:2C:F8:EB:C2:7D:FA:96:EA
Authority key identifier: E3:EE:F6:5B:55:16:9B:F1:C6:68:D2:A9:61:B9:5A:F2:F2:88:7F:DD
Certificate issuer:       /CN=F36FE55FAF/serialNumber=E3EEF65B55169BF1C668D2A961B95AF2F2887FDD
Certificate serial:       9B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
Manifest number:          99
Signing time:             Sun 20 Sep 2026 05:36:00 +0000
Manifest this update:     Sun 20 Sep 2026 05:35:59 +0000
Manifest next update:     Tue 22 Sep 2026 05:35:59 +0000
Files and hashes:         1: 4-72W1UWm_HGaNKpYbla8vKIf90.crl (hash: s+esiCyG2Vw9oNYMGjkDwW6uj0NMBF+FQTRBFseyIIE=)
                          2: C29191CE94AF11F1B96602E9CE1D38B0.roa (hash: 9kyMmzB5+7+PqK6vaI7H4SZ3f2OSAAaDRV0SMik9cDE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 155 (0x9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FE55FAF, serialNumber=E3EEF65B55169BF1C668D2A961B95AF2F2887FDD
        Validity
            Not Before: Sep 20 05:35:59 2026 GMT
            Not After : Sep 22 05:35:59 2026 GMT
        Subject: CN=6aaf70c0-7741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:00:d9:67:41:f0:35:d5:71:2b:f5:ec:98:
                    d1:ce:b0:2a:d8:9e:1a:36:c1:8b:9d:80:14:8b:6b:
                    0a:78:81:92:25:9e:50:e7:00:db:92:47:d7:25:4e:
                    91:db:a5:3f:92:99:74:02:b5:28:38:09:79:78:03:
                    87:01:78:8c:63:f8:be:43:9d:cb:94:3a:7c:f9:fd:
                    91:64:a9:cb:00:8c:08:28:3f:29:4c:ff:0e:3e:d6:
                    9b:65:75:43:f7:bf:46:60:8a:9b:a6:ec:20:3d:05:
                    f5:35:bd:82:d3:99:85:c2:b8:c1:60:14:68:56:66:
                    65:cf:43:b6:6c:b2:b9:34:f3:35:7b:bb:8d:4a:58:
                    c4:13:76:dc:90:12:be:66:98:f2:5e:f4:27:23:da:
                    14:bf:f5:6d:73:42:de:f5:d7:e5:a0:b3:14:eb:a0:
                    7b:1a:47:8f:b8:a5:ee:77:56:fe:3d:e1:16:49:f9:
                    7f:03:c8:ab:52:3e:ab:a0:f4:0f:b3:a1:8d:85:16:
                    16:6e:d2:b6:fd:62:e9:9e:57:c5:96:d1:5f:93:da:
                    94:ae:e3:0d:0b:7b:97:ea:d9:d2:60:b2:4d:86:42:
                    71:54:e8:b6:3b:5a:d5:97:bc:60:41:6c:a1:07:fd:
                    92:1b:6e:aa:8a:b7:df:a8:dd:cd:a7:31:85:ad:27:
                    5e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8E:60:C4:F3:7C:5E:49:0D:F3:CB:72:2C:F8:EB:C2:7D:FA:96:EA
            X509v3 Authority Key Identifier:
                keyid:E3:EE:F6:5B:55:16:9B:F1:C6:68:D2:A9:61:B9:5A:F2:F2:88:7F:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4-72W1UWm_HGaNKpYbla8vKIf90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FE55F/D7FDE0CA3FB011F199FA2A19CF1D38B0/4-72W1UWm_HGaNKpYbla8vKIf90.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:af:eb:09:aa:80:29:c9:c8:9c:56:ef:8d:16:9f:44:35:
         7b:14:89:c9:03:e4:7a:ab:00:02:44:e3:a4:0c:9e:16:50:66:
         ef:1b:4f:57:6e:98:86:ff:65:72:e4:4b:39:cd:21:15:ec:a9:
         92:8e:57:0e:2a:6e:5e:d1:a9:9b:5c:21:f1:4d:62:d3:be:51:
         2d:32:d9:af:34:bd:39:3b:83:36:d9:e9:03:4a:3b:79:4a:83:
         c2:0f:46:4f:fc:12:63:ab:28:be:c9:78:7d:45:bd:e9:a0:41:
         3c:8d:29:93:45:e8:87:05:fd:21:4c:e2:43:fc:1a:00:30:87:
         2c:e5:86:db:9e:8d:34:54:f5:3c:30:5c:48:b4:ea:e4:73:df:
         39:59:0f:b1:81:e5:26:bd:33:4f:fa:b1:ab:64:b7:11:7b:9f:
         19:18:97:79:e9:65:a7:cb:a0:18:07:10:13:ce:d2:81:f7:7c:
         02:f8:9c:01:e8:08:17:68:cd:16:3c:4d:16:19:9f:0b:35:d5:
         5b:35:75:2b:eb:02:5c:32:01:4e:32:29:96:20:ac:9e:4b:8b:
         77:f5:10:e1:f4:ea:18:d5:3f:26:9b:8a:fd:8e:64:cf:bf:7e:
         2c:be:a8:3b:f2:ef:6e:04:b3:18:7a:82:69:0e:33:8a:47:7b:
         85:d6:d5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----