Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft
File:                     Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft (raw, json)
Hash identifier:          Zse3rxxpB/AWADsFUy6LPre9OeZimZWOjSapebmsYhY=
Subject key identifier:   B6:BF:37:ED:74:8E:30:8A:60:17:11:A4:38:C9:41:06:9D:71:14:ED
Authority key identifier: 43:2E:D8:5C:AC:11:7E:60:35:4A:FF:E8:27:E7:42:83:AA:8E:80:3F
Certificate issuer:       /CN=F3697D5CAF/serialNumber=432ED85CAC117E60354AFFE827E74283AA8E803F
Certificate serial:       28
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft
Manifest number:          28
Signing time:             Sat 19 Sep 2026 10:05:04 +0000
Manifest this update:     Sat 19 Sep 2026 10:05:03 +0000
Manifest next update:     Mon 21 Sep 2026 10:05:03 +0000
Files and hashes:         1: Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.crl (hash: 13pWuACwxD3Y/XfjN9ZF9QkcD10TOcV3Fy1y+I5xGfc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697D5CAF, serialNumber=432ED85CAC117E60354AFFE827E74283AA8E803F
        Validity
            Not Before: Sep 19 10:05:03 2026 GMT
            Not After : Sep 21 10:05:03 2026 GMT
        Subject: CN=6aae5e50-de6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:19:af:e4:59:67:a2:4f:7d:d0:b4:9f:e1:7f:
                    fd:fe:9f:fe:21:73:0d:36:6f:85:55:d2:04:f8:5d:
                    54:70:6b:ef:12:83:3f:19:19:ad:e3:6e:a9:e1:60:
                    88:ab:38:58:5a:06:be:db:8f:40:8c:8b:78:a8:23:
                    cc:db:3a:42:65:48:97:6d:c7:04:ad:ae:06:9d:6a:
                    3a:9a:99:0a:25:9c:d0:52:aa:36:34:ae:26:57:a8:
                    41:d6:e0:eb:88:9b:80:b6:6f:6b:69:3d:56:fa:fa:
                    66:24:5b:50:7e:f5:ea:51:b7:3f:c9:23:ee:79:ed:
                    22:18:30:ad:bd:65:25:e5:a3:c3:0c:1d:f8:e3:e8:
                    bb:1c:0a:2b:d1:11:1f:2f:6d:a8:0a:82:f5:aa:d9:
                    d6:30:be:00:89:8b:4f:49:39:3d:8b:4a:32:29:d7:
                    26:be:47:88:3d:46:66:9d:e8:fd:85:57:99:ef:93:
                    6f:91:7d:11:3d:a8:23:41:e0:36:49:ff:01:c1:b6:
                    26:cd:10:5d:53:4d:0f:cd:b7:f8:b4:ff:0c:eb:74:
                    a1:8d:b9:53:ae:39:79:f5:36:ce:4d:6b:50:20:28:
                    56:30:45:8a:07:b3:08:b1:ba:4c:60:6e:5a:10:53:
                    7c:21:d3:33:26:c3:65:31:81:c4:b5:83:29:80:e4:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BF:37:ED:74:8E:30:8A:60:17:11:A4:38:C9:41:06:9D:71:14:ED
            X509v3 Authority Key Identifier:
                keyid:43:2E:D8:5C:AC:11:7E:60:35:4A:FF:E8:27:E7:42:83:AA:8E:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:45:3b:ab:43:4b:c0:f0:d7:0d:83:a3:4f:9b:a4:d9:33:f8:
         93:06:df:5a:35:89:5e:36:d6:f1:3f:3b:78:c2:df:04:ed:1d:
         e7:fc:39:63:4f:6a:aa:97:fb:6e:3d:49:8a:93:1c:24:56:44:
         b7:55:42:2e:fb:c8:d9:8f:60:1a:22:ef:25:a6:47:31:6e:fa:
         35:f0:a8:26:4f:a8:14:6c:0e:2a:38:00:fe:a7:dd:2e:60:b3:
         0b:a2:5b:74:ca:fc:25:45:cd:86:0d:ba:87:83:64:df:2b:1d:
         a2:7c:4b:55:c2:c0:54:e8:36:d9:83:82:8b:8a:28:20:32:e5:
         17:97:58:49:18:16:4f:27:eb:1b:07:73:b0:3e:df:ee:f0:16:
         92:88:bc:22:8d:c0:06:da:f9:7e:93:00:39:3a:cd:92:14:bb:
         4f:2c:10:4d:d6:38:84:54:af:42:51:ad:08:a0:74:6c:8a:6c:
         2b:89:64:7b:db:1e:e3:e5:91:25:8a:aa:5a:29:2a:06:bf:74:
         28:65:9b:cd:1f:16:3b:7c:c8:6d:0a:bc:6c:f8:c5:c6:2d:cd:
         1b:34:0d:04:87:18:0e:93:0c:04:51:a2:3a:b6:9c:91:89:c9:
         03:d2:ca:fa:75:6b:26:ca:77:f7:cb:ef:3a:2c:b5:8d:76:a1:
         65:b4:91:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----