Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
File:                     TiZQ4qujZbOc_hWOyk20jWQs22U.mft (raw, json)
Hash identifier:          x1IiNQJuCB0MpPCg3/l4XdwT+MR6JbGC6EmLBJtAw14=
Subject key identifier:   1E:79:30:25:DF:5C:9C:1B:B4:38:8B:38:2D:5B:38:AF:67:CB:55:73
Authority key identifier: 4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65
Certificate issuer:       /CN=F369942EAF/serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
Certificate serial:       0B5E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
Manifest number:          0B5D
Signing time:             Sat 26 Sep 2026 01:16:26 +0000
Manifest this update:     Sat 26 Sep 2026 01:16:25 +0000
Manifest next update:     Mon 28 Sep 2026 01:16:25 +0000
Files and hashes:         1: TiZQ4qujZbOc_hWOyk20jWQs22U.crl (hash: kunVq1XnPI1G1YEsbT0eCzOqrdZ6HqRzwyjXcVBXqKo=)
                          2: 234EC302FF0211E8A910092BF8AEA228.roa (hash: NOa5khrVmkhCUl9lhv8WYW52PgfD6O4eOvTJHt2DcIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2910 (0xb5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369942EAF, serialNumber=4E2650E2ABA365B39CFE158ECA4DB48D642CDB65
        Validity
            Not Before: Sep 26 01:16:25 2026 GMT
            Not After : Sep 28 01:16:25 2026 GMT
        Subject: CN=6ab71cea-92d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6f:5d:6c:bd:58:c4:6a:ed:da:7f:9b:a0:dd:
                    1d:f3:f1:8c:71:9a:eb:a8:b6:9d:c5:32:dd:4e:76:
                    1b:40:e4:c9:76:ec:46:21:11:8a:cc:e4:b7:6a:ac:
                    69:0f:65:e3:69:72:fe:76:63:ef:02:44:9e:7f:7f:
                    b7:fe:7e:61:33:1a:0b:62:dd:7e:a0:49:32:a6:b5:
                    81:ff:dc:ba:e4:e3:79:07:50:b3:bf:b3:a3:c5:c1:
                    c7:a1:59:ae:2f:7e:99:da:05:8f:b7:56:9b:60:25:
                    50:13:e0:e2:8d:86:ae:3a:91:f6:8d:25:e7:12:1a:
                    e2:13:e5:56:d3:27:67:61:e7:d1:6c:66:c2:6e:63:
                    0b:10:32:1d:a5:32:bc:d0:49:5b:ae:18:3e:9c:be:
                    3a:49:2e:7d:b1:18:82:70:3b:58:b6:b8:0e:72:c1:
                    6c:ec:9a:f6:63:c8:bf:6b:4e:8e:b5:e4:1b:aa:66:
                    3a:bf:10:23:f7:90:5c:e9:22:c3:d7:f3:21:6d:2a:
                    8f:88:3a:d7:bb:e2:db:4f:45:66:3d:51:82:d4:c3:
                    20:46:68:a4:db:57:79:5c:a0:ee:f7:b8:f9:7d:fa:
                    a7:8e:65:1e:3f:b0:27:f3:a1:27:a9:b1:4d:ff:b3:
                    49:ce:34:6e:89:e2:c4:11:6a:71:ee:07:7f:77:8d:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:79:30:25:DF:5C:9C:1B:B4:38:8B:38:2D:5B:38:AF:67:CB:55:73
            X509v3 Authority Key Identifier:
                keyid:4E:26:50:E2:AB:A3:65:B3:9C:FE:15:8E:CA:4D:B4:8D:64:2C:DB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiZQ4qujZbOc_hWOyk20jWQs22U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369942E/D5A8905CFF0011E8B496012AF8AEA228/TiZQ4qujZbOc_hWOyk20jWQs22U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:62:67:c9:d0:de:c2:1c:de:92:12:c0:fe:ca:cb:39:56:b9:
         43:ed:c8:52:67:ad:e1:a6:ad:77:e1:21:31:29:53:75:e9:ec:
         bd:76:56:63:9f:e7:5c:b7:67:65:c5:76:22:7b:5d:68:1c:47:
         a6:89:d9:84:b4:64:e1:76:ef:ab:00:49:d0:d7:90:d7:c5:c2:
         88:4d:c6:bd:3c:18:98:fd:99:e2:68:94:f7:5a:24:ac:93:ff:
         d6:49:e1:33:79:df:fe:6c:7b:d9:bf:16:48:df:b7:de:00:db:
         c2:fa:4f:be:fa:fb:da:7d:93:40:48:be:f8:0b:66:c1:51:9b:
         ab:36:61:53:0b:63:cd:bd:79:ab:e8:4f:14:23:79:aa:56:03:
         67:e5:a2:7c:b3:31:74:b2:c2:6b:04:70:53:a0:5d:3b:52:c2:
         17:a6:17:2a:54:27:98:28:18:42:b8:bf:06:97:20:86:b1:d8:
         1e:52:bd:03:1a:4c:53:ed:94:96:44:5d:9c:a8:a4:cc:f7:6d:
         6e:5c:66:41:18:44:af:57:0c:43:44:bf:c3:d4:4f:a3:57:19:
         6b:e6:95:8e:2d:bd:12:ea:51:27:93:a5:b4:96:7d:73:47:cc:
         50:14:fa:40:ab:4f:a6:9a:bf:f3:e1:85:0a:5f:c9:d1:41:c2:
         67:a6:7b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----