Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.mft
File:                     C5G8ukaa9TvPni5WJ16WVLSy1G4.mft (raw, json)
Hash identifier:          C5f+Y0LFq+rxB8vJkUMThb8xhebENGtF5XdoG7NG1CY=
Subject key identifier:   EA:53:C2:71:EA:7F:2B:93:5D:11:0A:4B:B8:DB:07:E3:EF:8C:CB:63
Authority key identifier: 0B:91:BC:BA:46:9A:F5:3B:CF:9E:2E:56:27:5E:96:54:B4:B2:D4:6E
Certificate issuer:       /CN=F36EADB9AF/serialNumber=0B91BCBA469AF53BCF9E2E56275E9654B4B2D46E
Certificate serial:       21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C5G8ukaa9TvPni5WJ16WVLSy1G4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.mft
Manifest number:          20
Signing time:             Sat 19 Sep 2026 10:06:18 +0000
Manifest this update:     Sat 19 Sep 2026 10:06:18 +0000
Manifest next update:     Mon 21 Sep 2026 10:06:18 +0000
Files and hashes:         1: C5G8ukaa9TvPni5WJ16WVLSy1G4.crl (hash: miHZiazrNgfqyaSg6yD3TIAse68i1cJUmvkqRsLbJuY=)
                          2: 7A3F78BE9C9D11F18683E8FACE1D38B0.roa (hash: A3e8zbZAElAeLly1ySrC7Jgdi/mDLTG30Wvzb/zQ158=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C5G8ukaa9TvPni5WJ16WVLSy1G4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EADB9AF, serialNumber=0B91BCBA469AF53BCF9E2E56275E9654B4B2D46E
        Validity
            Not Before: Sep 19 10:06:18 2026 GMT
            Not After : Sep 21 10:06:18 2026 GMT
        Subject: CN=6aae5e9a-7177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:58:34:39:dd:9c:01:b4:54:d3:5a:87:f7:31:
                    e2:d3:1b:39:17:5c:5e:a6:6c:88:31:b3:3d:11:1c:
                    15:b9:65:86:01:60:0c:67:b9:ee:96:23:79:9c:4d:
                    f7:55:9a:13:5d:aa:b1:25:43:78:df:74:1e:60:c3:
                    74:d5:35:c2:a1:63:b0:d6:2e:b1:c2:4f:f9:40:86:
                    9e:67:1a:51:f7:39:c0:c4:c3:c9:80:21:ac:a8:17:
                    83:9f:4a:ac:fd:68:8a:b3:6b:e3:a2:b5:3f:bb:bf:
                    51:fb:d6:bd:dc:4b:cd:6c:15:bc:be:f7:70:09:2a:
                    1b:4e:ab:a0:8d:15:ec:0d:f7:1b:26:88:b6:99:2d:
                    ea:55:9e:c9:da:a0:cc:23:f3:be:f3:54:c4:e6:c5:
                    1e:c9:8b:2d:ac:d3:7f:90:8c:ae:af:42:cd:5c:ed:
                    28:7d:6b:10:6e:61:8d:a8:9a:22:90:44:10:1c:32:
                    6f:2a:d6:0d:72:c8:8a:8c:24:6f:99:c9:51:7e:70:
                    a2:67:df:27:a7:f3:6a:66:a1:d8:e4:c8:65:2b:62:
                    aa:c2:28:83:ba:a0:17:8c:34:e4:4e:ae:39:95:7d:
                    70:50:98:ea:ee:02:30:18:76:38:5b:45:ff:1e:a2:
                    08:db:8f:db:52:f5:db:a8:ff:6e:4d:43:6f:3a:d6:
                    88:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:53:C2:71:EA:7F:2B:93:5D:11:0A:4B:B8:DB:07:E3:EF:8C:CB:63
            X509v3 Authority Key Identifier:
                keyid:0B:91:BC:BA:46:9A:F5:3B:CF:9E:2E:56:27:5E:96:54:B4:B2:D4:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C5G8ukaa9TvPni5WJ16WVLSy1G4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EADB9/884266F29C9711F1A3B445D7CE1D38B0/C5G8ukaa9TvPni5WJ16WVLSy1G4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:e0:4c:4c:48:a9:10:e7:21:33:59:30:e0:e0:58:7c:53:90:
         d3:3a:80:0a:3e:32:5c:54:ac:68:b8:39:e4:52:91:84:fb:ce:
         a2:23:4e:22:25:8d:09:62:c1:12:48:ef:bb:d3:11:64:09:83:
         b6:ed:0c:be:f9:23:e1:f5:ac:5c:03:63:17:d0:c4:6c:bb:0c:
         95:5e:ae:58:54:fc:18:d9:43:c5:f0:a4:4c:48:13:b3:96:e1:
         37:d1:f3:1c:4f:b7:a5:23:7a:13:7b:2a:d8:eb:4c:64:e9:9f:
         f2:d2:13:c0:5e:db:42:8e:c0:64:87:ed:ac:d6:65:42:24:69:
         fd:f3:86:45:83:4c:f9:b2:2c:6e:34:e4:df:c1:53:be:b3:16:
         00:10:20:3b:d0:02:f2:98:51:f0:44:24:9e:d8:e8:e4:cf:22:
         18:9e:f7:e1:12:5e:7f:9c:29:05:2a:1f:af:5e:de:9b:6f:d5:
         22:01:92:e5:3a:d1:7a:c6:2a:d3:99:88:86:fb:cc:49:6f:09:
         ab:41:7a:29:85:eb:ea:16:20:28:54:f8:4e:06:4b:f0:20:01:
         b3:ff:88:85:69:8f:a1:5f:b5:ae:3e:ec:ae:5e:78:1a:58:a4:
         2d:a8:9c:66:af:32:36:7a:a7:3b:a1:4d:a4:df:8e:0f:70:d9:
         f2:95:e5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----