Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft
File:                     SdbI5u983B6XdR7zkR1lCLYMIp8.mft (raw, json)
Hash identifier:          zrE8WLbRacSF4MD7uvlCssdwix0Lw1yVTJDao0aafGo=
Subject key identifier:   C7:E9:AA:7E:20:71:19:E2:B9:7A:9D:61:7B:4D:A4:02:0F:1E:AD:42
Authority key identifier: 49:D6:C8:E6:EF:7C:DC:1E:97:75:1E:F3:91:1D:65:08:B6:0C:22:9F
Certificate issuer:       /CN=F36C3523AF/serialNumber=49D6C8E6EF7CDC1E97751EF3911D6508B60C229F
Certificate serial:       075C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SdbI5u983B6XdR7zkR1lCLYMIp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft
Manifest number:          075A
Signing time:             Sun 27 Sep 2026 02:22:52 +0000
Manifest this update:     Sun 27 Sep 2026 02:22:51 +0000
Manifest next update:     Tue 29 Sep 2026 02:22:51 +0000
Files and hashes:         1: SdbI5u983B6XdR7zkR1lCLYMIp8.crl (hash: cMrxbJpQjgNMQ7xcJ5jBKNYgUwgwLMGbKoNwih1TZDU=)
                          2: 46935BB485F211F1A9C4F5ACCE1D38B0.roa (hash: gXi6GZQR7cizkA0sBJkkqkY7x15aPSEtpYpReDKdKRk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SdbI5u983B6XdR7zkR1lCLYMIp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1884 (0x75c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3523AF, serialNumber=49D6C8E6EF7CDC1E97751EF3911D6508B60C229F
        Validity
            Not Before: Sep 27 02:22:51 2026 GMT
            Not After : Sep 29 02:22:51 2026 GMT
        Subject: CN=6ab87dfc-b235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:7c:79:31:6e:a3:70:65:ea:62:e1:99:9b:
                    21:52:1d:5a:68:38:77:c2:ec:6c:ff:bb:97:a3:10:
                    32:53:c8:ce:1b:4c:21:fa:9c:3f:3b:cd:3b:5a:58:
                    ce:24:b0:f0:06:1f:cc:4d:35:f6:6d:d4:33:d3:6d:
                    2e:09:de:fd:f1:ad:e9:fe:5d:19:d8:a5:63:31:fb:
                    f6:18:0d:34:21:f7:39:e4:85:32:0d:7b:c6:bc:f6:
                    3f:d2:16:ec:58:b8:5c:9c:5a:41:ab:cd:9a:66:75:
                    29:61:99:28:db:7e:56:a6:05:79:46:a5:64:c0:c3:
                    5b:8d:9c:7f:db:d7:00:53:17:61:f1:e7:04:3f:5e:
                    f6:ce:c5:87:f9:cc:38:27:4c:c3:4f:e0:eb:61:48:
                    a5:30:9f:2a:ec:cc:e6:21:3d:1a:ea:b7:c1:c4:3a:
                    74:ac:44:4a:0f:41:cb:3f:97:1a:03:75:e1:50:67:
                    db:6c:23:6d:32:fa:45:0f:84:62:1b:38:79:7e:c5:
                    8e:40:39:4c:ce:83:13:07:1b:ed:50:31:9f:20:b2:
                    e0:0e:9b:e7:f1:b3:84:46:ee:71:f5:ef:bc:cc:72:
                    ff:b7:42:7d:1c:ed:17:b6:38:ee:c4:8b:10:3b:ca:
                    2f:7a:58:45:4a:85:35:d3:af:6d:3b:dc:b1:71:7f:
                    82:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:E9:AA:7E:20:71:19:E2:B9:7A:9D:61:7B:4D:A4:02:0F:1E:AD:42
            X509v3 Authority Key Identifier:
                keyid:49:D6:C8:E6:EF:7C:DC:1E:97:75:1E:F3:91:1D:65:08:B6:0C:22:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SdbI5u983B6XdR7zkR1lCLYMIp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3523/08A8A39C177D11EC98ABEC14D8A014CE/SdbI5u983B6XdR7zkR1lCLYMIp8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:02:5d:7f:ea:97:d8:d4:2d:ac:14:61:88:ec:be:3b:75:52:
         20:6e:d6:6f:d3:b2:2c:42:13:6d:16:5e:d5:b9:49:3b:bb:86:
         9c:0b:6e:1a:30:8b:c5:6a:ed:59:54:c0:a6:b5:c1:ab:12:0b:
         99:eb:30:ec:f3:45:37:8b:f6:e9:d8:ed:c4:5e:de:e6:a3:dd:
         ac:a7:5d:b4:cc:33:d2:a0:3c:99:46:67:29:e2:67:39:b6:d2:
         7e:93:9d:b7:58:6b:2d:9a:36:f4:2a:8c:db:79:93:1f:ad:83:
         da:de:cf:5b:f5:6c:23:d4:d4:b2:6b:28:0a:9d:ed:f7:8e:66:
         c7:a6:21:51:f4:eb:34:80:cb:3c:9e:b0:3c:bc:0e:0c:52:84:
         3c:57:ff:b6:51:78:75:c5:0d:2f:a7:38:3e:37:16:09:59:ab:
         b3:03:ac:54:74:35:34:9d:a3:a2:d7:80:59:1b:9b:e7:fd:fe:
         94:74:94:d7:07:c0:51:2b:91:a5:22:32:ac:21:aa:8f:10:94:
         8d:af:fd:42:7b:92:78:ef:17:4f:c8:07:a0:ff:7a:04:d5:c7:
         30:44:68:ac:3c:34:0d:91:cb:ae:74:dd:0d:db:9b:3b:76:0e:
         8e:ef:74:13:a4:f3:ab:52:2b:4d:9a:8d:b0:8f:4a:30:01:37:
         b5:5a:53:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----