Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367DF41/8F36E8F69BB211F1A0C218F2CE1D38B0/HXOHTLRmRTV4tusvYNdTlT9v95o.mft
File:                     HXOHTLRmRTV4tusvYNdTlT9v95o.mft (raw, json)
Hash identifier:          A7Puw1o0+i7rA7p4Jk+h8AEdwuKXJiaagk2UN2RDasI=
Subject key identifier:   85:C7:C4:05:AB:F6:AC:D5:3F:FA:EC:74:62:F2:48:25:80:28:A5:1D
Authority key identifier: 1D:73:87:4C:B4:66:45:35:78:B6:EB:2F:60:D7:53:95:3F:6F:F7:9A
Certificate issuer:       /CN=F367DF41AF/serialNumber=1D73874CB466453578B6EB2F60D753953F6FF79A
Certificate serial:       22
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HXOHTLRmRTV4tusvYNdTlT9v95o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DF41/8F36E8F69BB211F1A0C218F2CE1D38B0/HXOHTLRmRTV4tusvYNdTlT9v95o.mft
Manifest number:          21
Signing time:             Sat 19 Sep 2026 10:05:55 +0000
Manifest this update:     Sat 19 Sep 2026 10:05:54 +0000
Manifest next update:     Mon 21 Sep 2026 10:05:54 +0000
Files and hashes:         1: HXOHTLRmRTV4tusvYNdTlT9v95o.crl (hash: KQlNi8f7djXt+CKNP59otlPKQDGXYDX2vnTBgJq0PH8=)
                          2: D48A72509BB311F1990369F8CE1D38B0.roa (hash: whDW75hyOi9JPwiqkWNc6R7hVBAODPOiug+isAo2OpA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DF41/8F36E8F69BB211F1A0C218F2CE1D38B0/HXOHTLRmRTV4tusvYNdTlT9v95o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DF41/8F36E8F69BB211F1A0C218F2CE1D38B0/HXOHTLRmRTV4tusvYNdTlT9v95o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HXOHTLRmRTV4tusvYNdTlT9v95o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DF41AF, serialNumber=1D73874CB466453578B6EB2F60D753953F6FF79A
        Validity
            Not Before: Sep 19 10:05:54 2026 GMT
            Not After : Sep 21 10:05:54 2026 GMT
        Subject: CN=6aae5e82-8228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:16:31:bf:ed:ca:0e:97:7a:fe:b0:f4:e1:30:
                    5f:36:a9:6c:78:3e:86:ca:77:ff:7e:b1:53:5d:92:
                    5d:98:09:e7:80:12:36:9f:1d:0d:e9:93:5b:c7:1e:
                    b8:fe:ed:d8:68:d1:1e:eb:d9:02:a1:d2:9b:bc:91:
                    9f:2c:f9:a5:4b:82:82:c7:a1:ed:a2:bc:bb:ff:67:
                    df:c6:d8:95:b5:34:68:f7:57:23:5b:15:d8:14:e9:
                    77:ae:98:17:7b:b3:ce:22:8b:c4:c5:09:ba:09:4b:
                    ba:8a:38:e2:a4:db:94:22:98:76:1d:38:85:bd:23:
                    77:5a:ea:92:c2:bc:0c:98:a3:23:4a:ac:83:1a:10:
                    6b:34:e8:59:f4:b9:ea:cd:a5:ce:90:a1:1d:c7:c3:
                    98:a1:5d:89:f3:55:bd:b3:a3:06:2c:4d:f5:f7:02:
                    9d:08:58:2d:2c:55:e3:00:ea:68:38:4e:e0:6b:5f:
                    95:3e:ea:fe:7c:c2:72:09:12:3b:5f:3e:87:40:a9:
                    e3:93:57:71:42:3a:6d:77:94:b6:52:9f:18:4d:1c:
                    fc:d9:6c:9e:36:b8:8a:76:86:fc:d2:44:4e:97:d5:
                    87:7e:cc:1f:29:d5:c4:a7:cb:41:0e:6b:79:6e:70:
                    6b:48:57:86:72:32:58:79:88:e2:f1:1f:73:68:f6:
                    b5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C7:C4:05:AB:F6:AC:D5:3F:FA:EC:74:62:F2:48:25:80:28:A5:1D
            X509v3 Authority Key Identifier:
                keyid:1D:73:87:4C:B4:66:45:35:78:B6:EB:2F:60:D7:53:95:3F:6F:F7:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DF41/8F36E8F69BB211F1A0C218F2CE1D38B0/HXOHTLRmRTV4tusvYNdTlT9v95o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HXOHTLRmRTV4tusvYNdTlT9v95o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DF41/8F36E8F69BB211F1A0C218F2CE1D38B0/HXOHTLRmRTV4tusvYNdTlT9v95o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ad:c1:97:a6:32:d9:d3:e3:f7:b3:28:47:30:0d:42:40:e8:
         a2:b6:81:43:e3:a9:1f:0b:ce:8d:93:2c:ef:5a:d9:8d:6c:dc:
         ff:b4:f7:dd:e4:c4:b9:56:27:ac:42:8e:31:41:95:6a:08:9a:
         05:27:41:ae:2d:46:9d:5c:92:71:7c:73:af:0c:13:0a:ff:b7:
         00:86:7d:0f:a1:01:dd:aa:f0:11:c7:2d:96:25:08:4a:c4:de:
         62:a2:48:62:c2:45:ef:31:34:fa:f8:0e:a4:e9:c6:4f:ca:48:
         7a:c4:96:c9:ab:51:c3:1d:01:af:6c:86:da:75:dc:36:93:19:
         6e:f8:e8:d3:dd:5e:ff:49:53:f6:fc:56:0e:b4:17:68:4a:ae:
         21:80:3f:67:fd:96:7a:44:95:63:6a:86:96:54:b5:24:78:29:
         7f:e2:d0:9c:f8:88:02:02:e7:d9:75:e0:bf:3f:91:ac:2e:32:
         46:dc:62:eb:b0:69:3e:fb:ef:d6:8b:80:44:f8:30:db:ce:1e:
         62:71:bb:b0:c8:47:8d:f4:d7:b5:af:a0:06:0a:70:09:d7:ed:
         ef:44:a1:9c:25:7b:4e:78:3f:40:ec:a0:37:91:e5:b9:ed:da:
         d8:b2:ca:f1:80:e0:7f:5f:dc:69:b1:7a:c1:b3:2c:54:90:12:
         07:f0:cd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----