Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
File:                     sNdja0QI8KwoxZz1uRZkvYIxQFA.mft (raw, json)
Hash identifier:          QoksLJO02+40zblbtMiCVkXAkLvD3tVyrRAzEzYVaVc=
Subject key identifier:   61:7B:A5:BD:00:B9:64:FE:71:0A:D4:A3:5F:53:57:48:F2:B5:C2:03
Authority key identifier: B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50
Certificate issuer:       /CN=F36CEA2AAF/serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
Certificate serial:       01F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
Manifest number:          01F9
Signing time:             Sat 24 Oct 2026 04:56:50 +0000
Manifest this update:     Sat 24 Oct 2026 04:56:49 +0000
Manifest next update:     Mon 26 Oct 2026 04:56:49 +0000
Files and hashes:         1: sNdja0QI8KwoxZz1uRZkvYIxQFA.crl (hash: F3MK1yIfdL6H2e6urtxQSu7XGczWcgs2DgQv0CYrbXI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 04:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CEA2AAF, serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
        Validity
            Not Before: Oct 24 04:56:49 2026 GMT
            Not After : Oct 26 04:56:49 2026 GMT
        Subject: CN=6adc3a92-bacc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:3a:97:81:5e:82:6f:9a:21:62:19:c9:99:
                    67:07:76:bf:42:5d:09:74:9a:d0:a7:c8:ee:36:7f:
                    0e:0b:e3:47:3a:3e:56:23:b6:37:09:00:8a:18:95:
                    54:81:74:59:07:3c:eb:b2:35:37:85:87:d5:4b:4c:
                    be:47:6c:2f:7c:20:c5:e5:9b:45:56:0e:30:db:24:
                    86:35:b4:a5:cc:78:13:ad:e8:28:51:4b:5d:aa:d7:
                    1b:38:ce:ba:76:c1:ca:40:d1:b5:03:f6:f8:11:d9:
                    d0:3c:a9:9f:3b:9f:fa:fd:0d:aa:fe:1d:3b:09:a1:
                    0c:c9:e2:64:45:ce:d9:36:fc:ad:0b:33:91:1a:d0:
                    06:e7:af:13:87:26:49:fa:8b:8b:bc:ce:d3:e7:20:
                    da:00:e7:44:b4:5d:f6:0d:8f:76:65:b2:08:07:55:
                    39:eb:4c:e8:12:57:cc:0f:89:8e:65:86:b5:5a:5c:
                    af:eb:52:54:33:7c:d5:bd:37:42:5f:54:86:6e:3b:
                    1c:e0:16:55:70:5c:76:8d:28:57:28:e7:8c:65:4d:
                    71:d9:51:73:ad:4f:0e:11:2c:c9:0a:c1:b1:2e:3f:
                    5e:5a:67:ae:22:85:9e:a8:c7:3b:85:56:da:55:84:
                    bf:a9:cd:e3:68:34:41:7e:7a:db:30:ed:ff:99:4e:
                    47:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7B:A5:BD:00:B9:64:FE:71:0A:D4:A3:5F:53:57:48:F2:B5:C2:03
            X509v3 Authority Key Identifier:
                keyid:B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:6b:b4:d7:6c:da:e7:95:55:6a:68:3e:3a:ab:8f:d1:db:96:
         49:b5:62:01:66:2a:e8:31:fd:02:d5:7a:1f:b5:bb:b3:57:b9:
         4a:d4:36:1b:8d:c2:4e:64:98:29:d4:33:b7:94:6b:f8:28:3b:
         cf:ef:61:87:ca:4d:fe:d9:61:cd:8e:c7:65:1f:87:c3:fe:84:
         98:e3:ee:9b:e5:88:4c:e4:9a:82:42:17:5a:3a:6a:58:14:db:
         f6:00:0e:2a:0b:b7:3c:28:72:6e:8f:19:a9:fa:06:73:3a:be:
         2d:f9:de:a7:d3:e7:ad:e9:92:85:31:76:b6:69:23:64:13:5b:
         af:42:32:72:12:de:97:58:33:93:43:8c:84:2d:79:ab:b6:b1:
         38:34:0b:c3:36:8d:00:c9:c2:3a:9e:06:c2:58:71:cb:e4:89:
         d7:dc:3a:d1:52:04:07:33:66:8e:6c:db:b2:23:79:77:20:c0:
         2f:1e:d2:ef:e7:28:ee:e9:dd:dd:03:99:f7:91:4f:e7:3e:1a:
         17:9a:2b:75:6b:3c:2b:a1:95:7b:1e:f6:0e:fb:ea:b5:e8:64:
         c6:e1:fb:08:4f:6b:0a:3e:85:e1:03:ae:9b:85:67:d0:1a:32:
         24:a7:72:16:9a:9f:27:e3:2e:6b:08:1e:c7:6f:10:31:45:0a:
         e4:95:26:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----