Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
File:                     XK2jLPsAGrpuTJ9SE9kodlsVozc.mft (raw, json)
Hash identifier:          7RJsqJzvKWnFfXnd3BAC3kmCWO6eSsuZ2aRhwN5hmNc=
Subject key identifier:   CD:77:0B:D8:63:29:16:0A:3A:2B:57:D8:AC:32:0B:EF:8C:0D:F5:7A
Authority key identifier: 5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37
Certificate issuer:       /CN=F368588EAF/serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
Certificate serial:       0A69
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
Manifest number:          0A5D
Signing time:             Thu 17 Sep 2026 01:34:30 +0000
Manifest this update:     Thu 17 Sep 2026 01:34:29 +0000
Manifest next update:     Sat 19 Sep 2026 01:34:29 +0000
Files and hashes:         1: XK2jLPsAGrpuTJ9SE9kodlsVozc.crl (hash: Q4FwcWgCtUvFDkrL432ycQmGM07SLzSk+/ZRoVoqfD4=)
                          2: E90920E88E6511EBBF85CD6BF8AEA228.roa (hash: 2lqZqDUQcUKxveTR9cI5M5tuAOp//Ev36g7no9oTmfc=)
                          3: B45912FE8E6511EB8C41896BF8AEA228.roa (hash: qKKMDXSoDlqwiHmOGrIIdcwys6RCpAU+b2nSH+ukCFY=)
                          4: 82AA23C48E6511EB87AB596BF8AEA228.roa (hash: Awf3KcwUqHS+Tb+h21An3tUV9Zndn4ovZSX7QkhwLRI=)
                          5: 314349A68E6611EB8D43336CF8AEA228.roa (hash: Thxt35OuW2OHwRepR9n+aTVJ70XOv0V6vWotqPw7F9g=)
                          6: 524153BE8E6611EBB85F5E6CF8AEA228.roa (hash: 2hd9ZQH6yn17Npd0+aOdMdIMVFAkEErgQuvgi60v08M=)
                          7: 5B5AB2F28E6511EB82C6206BF8AEA228.roa (hash: uqU9yrUWC7VxCjK9hx7zhOvnfnJosiQgLAmWL6ofW8s=)
                          8: 6001068C237F11EFAF71141F7DDC24C2.roa (hash: Fe1hHfr+f3y3JImtSfxXw39BMD+ou4/AEKixzkcLodk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 01:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2665 (0xa69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368588EAF, serialNumber=5CADA32CFB001ABA6E4C9F5213D928765B15A337
        Validity
            Not Before: Sep 17 01:34:29 2026 GMT
            Not After : Sep 19 01:34:29 2026 GMT
        Subject: CN=6aab43a5-90e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:21:cb:ba:2e:9b:84:0a:e4:6b:cf:24:c1:
                    49:e5:ce:56:80:20:72:00:3e:24:00:07:6d:5a:ad:
                    cc:22:e6:30:28:ae:0f:c5:f9:18:8c:0f:88:82:25:
                    8b:f6:52:21:b2:6c:70:47:7d:87:fc:2c:8f:40:08:
                    ca:ae:3e:4a:83:48:4f:45:55:6c:83:f6:cb:36:9c:
                    e6:4e:9b:c4:7f:3a:b5:fa:c3:4e:e0:13:96:9a:ce:
                    ae:ff:0a:3a:d4:1e:4e:7d:2f:e9:b8:0a:14:81:2a:
                    ad:42:b9:ae:e3:60:27:8f:a1:77:e8:75:28:0d:80:
                    ac:75:d0:6d:76:c8:f0:dd:a1:2a:4b:4d:54:1f:0a:
                    ae:ab:65:8f:21:3d:34:4c:af:f2:fc:b6:69:30:53:
                    e2:51:34:c0:07:0b:94:1b:59:83:4d:57:29:83:f5:
                    d4:60:94:52:88:36:1a:1c:4b:e4:5a:65:59:14:39:
                    3b:7a:13:1a:ba:ff:b0:1a:5c:80:bc:8c:59:1c:c8:
                    f8:d7:df:8b:f7:9b:76:82:eb:8c:8c:7b:c6:a2:51:
                    96:c1:57:c8:0a:cb:97:a5:7c:c5:4a:91:4e:1b:ad:
                    e6:25:9e:02:ae:18:5c:5d:bf:b2:e4:1a:0f:49:da:
                    5a:71:3d:46:54:69:fc:7f:8d:ca:3a:82:4c:ce:56:
                    3f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:77:0B:D8:63:29:16:0A:3A:2B:57:D8:AC:32:0B:EF:8C:0D:F5:7A
            X509v3 Authority Key Identifier:
                keyid:5C:AD:A3:2C:FB:00:1A:BA:6E:4C:9F:52:13:D9:28:76:5B:15:A3:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XK2jLPsAGrpuTJ9SE9kodlsVozc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368588E/A3823956CB2F11E9890D1B27F8AEA228/XK2jLPsAGrpuTJ9SE9kodlsVozc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:a8:cc:0d:9b:19:c6:64:3b:07:5c:95:ea:0b:e0:98:8f:4f:
         10:41:7d:03:c8:23:c6:b8:a1:4f:43:c2:1f:e4:88:09:ae:19:
         88:19:b2:3e:f7:a9:48:cd:7d:db:97:ac:09:48:10:c1:e4:0c:
         26:16:d0:53:26:c9:71:76:30:d1:81:07:ad:2c:4e:8d:cd:43:
         4e:13:f0:3b:ed:18:a3:bf:89:3f:ea:e6:1e:80:66:81:0f:cd:
         1b:54:c4:8c:dc:04:9f:96:11:6e:9b:88:53:56:47:a6:85:3f:
         3b:a9:f6:89:04:9b:ca:be:a3:89:7d:d8:ad:d9:d6:8c:75:16:
         a8:94:a9:dc:12:2b:9e:23:cb:7e:7f:63:87:bd:28:bc:f2:1b:
         77:8d:f6:95:e0:0b:97:a6:44:d8:64:f0:2d:d4:8f:34:54:ad:
         09:19:1f:69:6d:1d:24:6d:ef:27:af:e1:b0:72:40:37:70:48:
         00:01:9b:b4:93:4f:2f:a2:03:e7:56:00:ec:e7:7a:18:bb:23:
         0f:83:8b:58:f8:ff:94:03:a0:94:95:4f:83:68:0b:bc:db:5b:
         11:17:04:df:90:18:9c:9f:2e:7c:a8:1a:cd:62:22:b6:b4:5f:
         53:37:c7:a2:bd:95:69:33:eb:3a:63:16:67:03:c1:b2:17:1c:
         47:b7:a1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----