Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
File:                     y4hYdSezg5FswLHYhmZTwzQx5F0.mft (raw, json)
Hash identifier:          TO6Vadyv8SKBHylUpekpRyziNT8kebM7pi6pUkIdyRA=
Subject key identifier:   3A:AB:D0:4C:31:17:2A:5C:08:8C:07:2E:E3:49:AD:4D:88:02:D2:4D
Authority key identifier: CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D
Certificate issuer:       /CN=F3663CEEAF/serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
Certificate serial:       099D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
Manifest number:          0996
Signing time:             Wed 04 Nov 2026 01:46:17 +0000
Manifest this update:     Wed 04 Nov 2026 01:46:16 +0000
Manifest next update:     Fri 06 Nov 2026 01:46:16 +0000
Files and hashes:         1: y4hYdSezg5FswLHYhmZTwzQx5F0.crl (hash: V3rkhWpxxOTGlDiSH6+7zEF493OGaSUH4BGyZywrQdc=)
                          2: 7780EF6C630A11F180A1E4B2CE1D38B0.roa (hash: fkIhbGcLK27MDR00HJfXuZdrNmz7WeoBwxqN+OBnQWA=)
                          3: 24B727805CBA11F0A0DBD87DDAE4EC9C.roa (hash: URhpC1wmpxyjiKTCACXMGSDga5+OKiFUmrZJhnhMHo0=)
                          4: 413B19025CBA11F0B3AC387EDAE4EC9C.roa (hash: huhnDHM3c28d4RK7MjVi9V09R1xz37R9RDv4groETcU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:08:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2461 (0x99d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3663CEEAF, serialNumber=CB88587527B383916CC0B1D8866653C33431E45D
        Validity
            Not Before: Nov  4 01:46:16 2026 GMT
            Not After : Nov  6 01:46:16 2026 GMT
        Subject: CN=6aea8e69-ec19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4e:8b:a3:cb:b6:a6:fb:60:a5:05:f3:95:ed:
                    14:d5:4d:7c:f4:b4:53:c7:45:96:94:2f:67:c4:82:
                    4a:7e:63:60:0a:69:57:98:9a:07:87:e8:5e:ad:00:
                    d8:90:d3:3c:b4:67:7e:1c:18:68:bb:01:d3:a1:83:
                    f8:18:8f:28:de:0c:c0:a6:5e:8d:f0:ab:ee:46:db:
                    22:68:c5:54:2b:18:2b:1c:8e:d3:9d:7b:8b:22:b8:
                    3d:e1:1f:90:48:da:83:c0:6e:e8:82:16:04:ac:5c:
                    a7:43:aa:26:4e:ad:73:f8:14:a4:56:a8:8a:82:14:
                    98:41:01:16:fc:67:8e:75:81:67:6c:d3:81:b7:20:
                    b7:3d:27:da:3b:a7:64:98:86:bc:71:ea:eb:5d:24:
                    dc:4c:cd:48:4f:8f:7c:3b:21:c2:fd:d7:f0:38:b2:
                    3f:d4:22:81:e6:58:4a:33:ff:26:2c:78:81:6a:4c:
                    cb:7b:66:12:54:79:f1:0b:0a:e9:b3:85:45:7b:04:
                    98:20:ea:00:17:9d:d6:50:d2:1d:39:48:15:27:4e:
                    3c:a1:a2:b2:c1:3a:5d:f9:24:92:27:bb:07:59:07:
                    72:75:71:22:e7:d8:2e:23:29:12:9e:31:e9:21:37:
                    9c:64:f3:0a:3a:4e:37:ae:c8:2b:b2:7a:d9:48:fa:
                    73:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:AB:D0:4C:31:17:2A:5C:08:8C:07:2E:E3:49:AD:4D:88:02:D2:4D
            X509v3 Authority Key Identifier:
                keyid:CB:88:58:75:27:B3:83:91:6C:C0:B1:D8:86:66:53:C3:34:31:E4:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/y4hYdSezg5FswLHYhmZTwzQx5F0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3663CEE/1FBC442083BE11EA8A65B730F8AEA228/y4hYdSezg5FswLHYhmZTwzQx5F0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:fe:70:8a:04:55:04:c7:0d:44:18:42:2c:ae:8c:f1:f2:83:
         3a:ec:10:ae:b6:c8:ba:c5:03:92:e3:8b:29:cd:e2:c0:d7:e2:
         2c:52:08:29:3a:e5:ae:4b:cd:07:db:36:a2:44:1e:a3:a3:dc:
         92:d4:2c:d3:3d:8f:55:20:2f:6a:fb:8a:f6:f1:7c:6b:52:a9:
         23:b2:68:9b:ae:2c:2c:86:97:e5:29:69:44:9e:d8:6f:c4:fb:
         2b:8e:9f:7b:e2:46:30:5a:f9:16:b5:0e:78:7c:1a:60:1c:02:
         ea:6f:50:6a:48:9c:2e:c8:af:c8:18:65:1b:e3:a0:03:ae:20:
         d1:48:7d:a3:6d:73:ec:8f:77:f5:10:ca:4e:57:75:1e:0d:6a:
         11:a8:5a:ac:19:a6:7e:7e:fa:5e:89:32:f5:34:3c:28:53:9b:
         fa:a4:4c:b0:bc:2b:db:16:b9:66:46:20:d9:ad:2b:09:a3:06:
         6c:d9:4a:aa:06:0e:5d:6a:34:32:9c:8b:94:b0:8e:49:8b:fd:
         1c:f5:04:5a:13:44:fa:95:a0:0e:9e:cd:13:11:18:70:12:b5:
         03:fb:22:35:d8:ef:2e:17:50:06:0b:14:8b:98:c3:a1:6d:0a:
         e3:44:84:9c:e5:48:44:51:1b:4d:5e:b7:b1:ec:04:08:fe:e2:
         90:35:0b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----