Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FFC5/BB386782A11011F1B7BF56BECE1D38B0/pulYcAGN6pPun7eKOhyNdirGRWs.mft
File:                     pulYcAGN6pPun7eKOhyNdirGRWs.mft (raw, json)
Hash identifier:          OCVLwuEnwPCNAiFMafOSMNl9gyyeLbUXg0V3Qoc3a/g=
Subject key identifier:   1C:2C:07:62:81:33:AB:67:B4:07:ED:28:DD:AA:A1:98:2B:77:D4:18
Authority key identifier: A6:E9:58:70:01:8D:EA:93:EE:9F:B7:8A:3A:1C:8D:76:2A:C6:45:6B
Certificate issuer:       /CN=F363FFC5AF/serialNumber=A6E95870018DEA93EE9FB78A3A1C8D762AC6456B
Certificate serial:       1C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pulYcAGN6pPun7eKOhyNdirGRWs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FFC5/BB386782A11011F1B7BF56BECE1D38B0/pulYcAGN6pPun7eKOhyNdirGRWs.mft
Manifest number:          1B
Signing time:             Fri 18 Sep 2026 05:51:55 +0000
Manifest this update:     Fri 18 Sep 2026 05:51:54 +0000
Manifest next update:     Sun 20 Sep 2026 05:51:54 +0000
Files and hashes:         1: pulYcAGN6pPun7eKOhyNdirGRWs.crl (hash: 48y4m5rIkxb+u1FINYdoiQ0JPMcxdc8F2sBC4cKUKTw=)
                          2: A767EC64A12E11F19E04B4EFCE1D38B0.roa (hash: vG84yYNf1ItAtuhWQH+e1kkaBAvw7cmalos1WQ62qpI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FFC5/BB386782A11011F1B7BF56BECE1D38B0/pulYcAGN6pPun7eKOhyNdirGRWs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FFC5/BB386782A11011F1B7BF56BECE1D38B0/pulYcAGN6pPun7eKOhyNdirGRWs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pulYcAGN6pPun7eKOhyNdirGRWs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FFC5AF, serialNumber=A6E95870018DEA93EE9FB78A3A1C8D762AC6456B
        Validity
            Not Before: Sep 18 05:51:54 2026 GMT
            Not After : Sep 20 05:51:54 2026 GMT
        Subject: CN=6aacd17b-1d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:29:6f:2c:e0:f1:fc:5d:9a:9e:8c:c8:28:
                    3c:25:c6:d4:36:74:e0:51:59:df:65:3e:f6:38:4d:
                    97:6a:e1:77:40:12:35:8b:df:1b:87:57:f2:62:67:
                    f9:2b:3c:83:7a:54:46:a5:64:1b:c1:88:7c:d8:ab:
                    8d:aa:8e:2c:dd:93:29:88:9f:ce:de:7f:4f:5a:12:
                    26:36:9d:2d:76:ef:5a:56:2a:b5:a6:f5:75:cf:8c:
                    1d:93:96:06:d1:7b:24:c3:da:3d:e8:16:54:ee:33:
                    d7:01:13:c3:6b:46:9f:15:f2:7f:f7:9c:8b:ee:6b:
                    54:5f:91:3f:76:c2:78:8d:b7:8d:c3:5a:fb:30:b9:
                    de:6e:f5:19:50:8f:31:26:cd:b8:3b:86:6a:22:f4:
                    09:ee:9c:71:69:2f:39:60:bd:2c:61:15:d6:20:eb:
                    14:00:e9:d9:31:af:9c:95:a1:96:9b:6e:50:c6:39:
                    3c:9b:f6:9a:fd:52:89:7b:71:0b:66:08:e3:fd:a4:
                    e2:b0:b9:8a:25:3e:25:11:70:d4:3d:ef:44:b9:06:
                    b5:7a:9c:1e:b4:15:e6:46:d5:18:3f:c2:43:4b:ea:
                    5b:88:56:fb:03:c4:1e:c0:17:83:cb:70:d4:ec:21:
                    27:6d:d2:e4:e6:75:66:07:56:b5:6d:5e:d2:e0:1e:
                    84:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2C:07:62:81:33:AB:67:B4:07:ED:28:DD:AA:A1:98:2B:77:D4:18
            X509v3 Authority Key Identifier:
                keyid:A6:E9:58:70:01:8D:EA:93:EE:9F:B7:8A:3A:1C:8D:76:2A:C6:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FFC5/BB386782A11011F1B7BF56BECE1D38B0/pulYcAGN6pPun7eKOhyNdirGRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pulYcAGN6pPun7eKOhyNdirGRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FFC5/BB386782A11011F1B7BF56BECE1D38B0/pulYcAGN6pPun7eKOhyNdirGRWs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:5d:7d:05:67:21:11:19:db:99:cf:89:1e:2c:4d:ea:d2:ec:
         9f:69:20:73:d6:14:28:47:91:cf:ee:57:8f:dc:65:a6:0d:e5:
         b7:67:2d:43:ca:03:1b:36:b7:7c:1a:dc:dc:86:e8:f4:dd:1f:
         42:c7:36:be:9c:54:64:75:9c:a0:9e:6f:73:38:a3:b9:33:69:
         c0:95:40:26:04:7d:9a:5d:00:90:eb:5e:84:2d:7b:8b:9c:58:
         2a:c3:60:59:d0:49:94:5b:fb:e9:43:4b:74:c2:64:3d:ff:45:
         e0:bd:8b:3a:38:a9:62:da:a9:a9:14:5f:eb:00:2b:66:42:df:
         c8:c6:87:b1:09:79:33:36:33:e6:3a:87:e3:ee:3c:bc:61:de:
         da:83:1c:54:fd:61:bf:9f:9a:48:b9:13:67:66:2b:e0:95:21:
         3d:33:69:1e:b7:d2:2e:f9:48:eb:52:eb:93:b0:7d:65:83:47:
         a2:af:e3:d9:0b:97:ec:a1:85:10:e1:d5:1a:34:1f:25:95:dd:
         5f:21:3c:8c:f4:b9:c3:4b:b5:56:a2:2a:4c:48:ce:cd:c5:18:
         1a:db:c8:28:6b:b1:10:39:43:af:84:e8:c5:5b:1c:e2:e4:ad:
         d2:f5:62:5e:c9:fa:53:f9:ac:c5:88:d6:61:47:4e:98:fa:50:
         08:75:23:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----