Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.mft
File:                     eIJbK8kIpA_vYrJkgtYamFdfy9M.mft (raw, json)
Hash identifier:          XKeBG5ncroiY4+ob4b76mnhHvawTysTy3MDr+Xnbmkg=
Subject key identifier:   98:28:5B:D1:1B:E7:FC:FA:98:2A:97:C9:73:40:D9:B1:37:1C:D8:51
Authority key identifier: 78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3
Certificate issuer:       /CN=F368B07FAF/serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
Certificate serial:       0D1F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.mft
Manifest number:          0D11
Signing time:             Sat 19 Sep 2026 05:27:12 +0000
Manifest this update:     Sat 19 Sep 2026 05:27:11 +0000
Manifest next update:     Mon 21 Sep 2026 05:27:11 +0000
Files and hashes:         1: eIJbK8kIpA_vYrJkgtYamFdfy9M.crl (hash: mBloTHX68Mt5RxNlihVTqVrc1i3ZXe4H2QXA+VuXMNA=)
                          2: 88C4BC14044611F0AD660049762E951A.roa (hash: gxQ4TZcIwXW8UpNV4nfbcezjuDijdoi8k2ctMvb0xJY=)
                          3: 1A2092F6044611F095BFB244762E951A.roa (hash: 0SLkUBB5NPSR/wjDecq70mS7cvLncEMmvdIdrHVhmHQ=)
                          4: DB96D28E044511F0B15D9244762E951A.roa (hash: i+EO9un0S5Mao/hCZ7gU7BvNM5zD9ye2X0RQkXQ9bls=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3359 (0xd1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368B07FAF, serialNumber=78825B2BC908A40FEF62B26482D61A98575FCBD3
        Validity
            Not Before: Sep 19 05:27:11 2026 GMT
            Not After : Sep 21 05:27:11 2026 GMT
        Subject: CN=6aae1d30-6401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:45:38:28:e2:0c:f9:55:83:7c:33:c2:e9:
                    c0:8b:df:e3:20:c2:1b:ba:cd:a1:56:1e:80:2d:13:
                    a5:c2:72:56:9c:60:87:dd:8f:33:94:81:6a:cf:b7:
                    84:8b:04:eb:6e:90:f5:ed:8c:3c:13:dd:5c:b6:e8:
                    4a:5c:46:0a:0d:51:63:9b:9c:4a:de:29:da:7c:e0:
                    42:fb:66:8d:a0:cc:c1:e9:06:7f:31:de:09:a4:c3:
                    ac:1a:66:23:45:af:bb:d7:c5:d6:52:45:40:cf:0f:
                    ef:9c:6f:4b:1d:81:27:68:72:19:61:3a:2a:03:95:
                    cd:99:60:a3:de:ee:07:0a:c3:16:a8:c7:53:15:6b:
                    4c:6c:e0:de:cb:ac:03:9f:3c:46:04:cc:6a:b0:ed:
                    c5:a9:0d:52:da:a0:b3:2e:5d:47:bd:37:13:be:67:
                    01:65:f0:db:bc:c6:7a:a1:db:8b:f5:65:32:e8:09:
                    8f:53:8a:12:2f:4e:10:46:d8:87:ee:a0:95:58:9e:
                    a4:53:1b:3b:3f:5c:fa:15:19:de:e0:b4:44:3c:21:
                    6d:bf:7b:9d:89:b5:46:f5:d7:33:88:d5:89:2b:e5:
                    ba:ac:e8:91:c0:1e:bf:64:8b:a0:3d:83:7e:b0:9b:
                    1b:bc:a5:2c:e0:a9:7d:5a:01:1c:dd:9b:94:b3:42:
                    24:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:28:5B:D1:1B:E7:FC:FA:98:2A:97:C9:73:40:D9:B1:37:1C:D8:51
            X509v3 Authority Key Identifier:
                keyid:78:82:5B:2B:C9:08:A4:0F:EF:62:B2:64:82:D6:1A:98:57:5F:CB:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eIJbK8kIpA_vYrJkgtYamFdfy9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B07F/9A1299DEB9C411E78B59C061F8AEA228/eIJbK8kIpA_vYrJkgtYamFdfy9M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:0e:41:09:b3:75:4c:0a:f6:65:1a:23:5b:35:4b:f2:08:10:
         69:d4:e5:d4:19:67:f6:b0:1c:90:bc:7e:9d:28:61:3e:47:8e:
         87:6a:69:b5:c6:7d:79:fe:80:76:65:d7:18:7d:64:f8:c2:c4:
         60:d1:15:af:83:8d:bf:d1:3a:d6:3f:f2:fc:c3:cc:22:c4:78:
         99:82:d8:73:ad:64:05:be:23:d9:1d:b6:18:ee:8b:88:7c:23:
         ae:d9:0b:31:aa:99:e8:c4:33:b7:ca:67:de:18:9a:c2:e6:f1:
         7d:11:3b:23:b1:18:24:38:32:ed:ef:e2:13:6e:a1:6f:33:dd:
         5b:ba:9c:b8:98:18:4a:d0:87:9b:1d:10:cb:a4:6b:5f:73:e0:
         8f:cf:7f:58:24:c0:7b:e7:b4:56:58:01:c7:16:ff:69:39:b2:
         10:43:96:0a:47:56:d4:45:1f:d7:23:65:b9:aa:c4:d2:ee:15:
         31:61:67:e2:c6:64:fb:d6:81:5a:38:f6:ea:6c:c4:dd:c4:7d:
         ce:48:ed:2d:34:bd:2c:72:99:d6:1d:d7:91:92:f8:69:20:41:
         ab:4a:59:8c:d9:67:81:f2:59:73:5c:af:cc:a7:75:3e:8e:9d:
         0f:13:ec:94:66:ae:e6:c2:86:26:e0:23:66:f4:cf:29:e6:18:
         6a:38:3e:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----