Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3675483/EE665696CEC411F19B2276D5CE1D38B0/pG7sIsEruXr_5fjNaCN7s3iNaDU.mft
File:                     pG7sIsEruXr_5fjNaCN7s3iNaDU.mft (raw, json)
Hash identifier:          19N0BIyZEnuoLapOebUok9L1jYeTh1WUm6qac7rxv0Y=
Subject key identifier:   3E:C5:42:AF:29:CE:73:94:DA:AA:73:AC:77:CD:C8:B1:37:07:15:8A
Authority key identifier: A4:6E:EC:22:C1:2B:B9:7A:FF:E5:F8:CD:68:23:7B:B3:78:8D:68:35
Certificate issuer:       /CN=F3675483AF/serialNumber=A46EEC22C12BB97AFFE5F8CD68237BB3788D6835
Certificate serial:       0F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pG7sIsEruXr_5fjNaCN7s3iNaDU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675483/EE665696CEC411F19B2276D5CE1D38B0/pG7sIsEruXr_5fjNaCN7s3iNaDU.mft
Manifest number:          0E
Signing time:             Wed 04 Nov 2026 06:04:53 +0000
Manifest this update:     Wed 04 Nov 2026 06:04:53 +0000
Manifest next update:     Fri 06 Nov 2026 06:04:53 +0000
Files and hashes:         1: pG7sIsEruXr_5fjNaCN7s3iNaDU.crl (hash: h+UpCpiKicRgp128OD9SiN2wQBB7LFk8e7nA+iWoxVM=)
                          2: 3B6837D4CEC511F18D11A4D7CE1D38B0.roa (hash: ygsqTa+UY5Tmt71iwk2Cd3x8EJyqdjqTxWAUQHW5f70=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675483/EE665696CEC411F19B2276D5CE1D38B0/pG7sIsEruXr_5fjNaCN7s3iNaDU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675483/EE665696CEC411F19B2276D5CE1D38B0/pG7sIsEruXr_5fjNaCN7s3iNaDU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pG7sIsEruXr_5fjNaCN7s3iNaDU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 06:04:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675483AF, serialNumber=A46EEC22C12BB97AFFE5F8CD68237BB3788D6835
        Validity
            Not Before: Nov  4 06:04:53 2026 GMT
            Not After : Nov  6 06:04:53 2026 GMT
        Subject: CN=6aeacb05-ebbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:50:fe:ff:4f:20:3d:9e:8c:0c:80:b9:6a:a4:
                    4f:36:70:88:4a:b4:b3:44:34:35:d0:bb:ba:12:5b:
                    6c:d3:37:0b:95:9a:1e:28:e1:e3:b5:81:5d:cb:60:
                    ae:24:b7:cb:35:4c:35:2d:5c:18:1d:c9:fa:58:d9:
                    d4:b4:9c:c8:3b:ea:2c:ca:85:ad:36:85:a3:87:5e:
                    9d:e6:a8:1e:1c:3c:d5:9c:64:c0:69:87:fa:cf:03:
                    f9:69:35:27:ca:7b:33:1b:4e:1b:df:b6:3a:d5:d4:
                    51:f7:79:87:08:23:82:bc:f1:e1:9c:61:94:41:88:
                    d5:73:12:c4:1f:49:36:8d:39:de:aa:27:28:ba:30:
                    34:41:1d:2d:eb:6c:7e:a1:8b:67:21:c7:27:04:e7:
                    04:f9:13:86:c8:ef:2b:e6:9c:f9:67:34:c7:fd:c7:
                    30:45:e1:b0:82:b7:3d:57:9c:b5:c1:a5:60:56:fa:
                    51:79:52:3d:19:86:39:2a:ae:dc:46:24:73:56:6d:
                    b8:57:d8:9e:c0:4b:ba:a9:4d:62:18:86:2a:05:b6:
                    eb:eb:f8:ca:d6:be:eb:39:ca:a3:96:08:30:45:64:
                    e1:c2:08:a8:28:4e:25:c7:f9:12:5b:d8:af:75:80:
                    59:85:48:f2:96:45:82:f0:68:0b:37:ea:0d:bf:b7:
                    43:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C5:42:AF:29:CE:73:94:DA:AA:73:AC:77:CD:C8:B1:37:07:15:8A
            X509v3 Authority Key Identifier:
                keyid:A4:6E:EC:22:C1:2B:B9:7A:FF:E5:F8:CD:68:23:7B:B3:78:8D:68:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675483/EE665696CEC411F19B2276D5CE1D38B0/pG7sIsEruXr_5fjNaCN7s3iNaDU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pG7sIsEruXr_5fjNaCN7s3iNaDU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675483/EE665696CEC411F19B2276D5CE1D38B0/pG7sIsEruXr_5fjNaCN7s3iNaDU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:96:36:b4:dd:bd:7d:89:2c:71:74:66:fd:7c:13:bd:e7:32:
         9b:dd:38:76:24:7e:c5:33:a1:62:e7:c1:84:1a:1a:3c:ea:1e:
         72:d6:5d:0b:fb:87:23:22:6f:ef:81:79:4a:d8:79:ea:b9:a9:
         26:e0:05:8b:66:9a:41:51:5b:b2:e9:02:fa:61:d3:59:31:51:
         df:a7:0e:76:ba:e6:b2:30:60:b1:00:f9:6e:63:92:ee:56:ba:
         f2:a8:cf:43:8b:30:96:0f:7d:0a:0f:02:b0:7d:ef:52:dd:5c:
         be:c6:92:36:c5:ee:45:ee:28:58:04:55:1a:a2:02:06:2d:fb:
         51:d8:02:55:68:f2:80:93:40:ef:76:f1:09:08:73:36:37:85:
         e9:e6:fd:76:e7:94:33:fc:2b:c0:bc:02:b0:eb:54:f2:86:e6:
         a0:72:4d:0e:99:56:9b:15:9e:ca:3a:86:2e:d4:37:93:f5:90:
         59:13:e6:31:45:7c:45:25:69:78:1c:85:44:b0:a8:45:51:ad:
         da:29:2f:4e:8d:90:4f:84:a5:cd:d3:99:89:42:41:f1:a6:42:
         55:e1:ff:50:e8:a0:15:ba:22:f2:45:dc:28:ac:d2:c6:a0:bf:
         30:69:20:84:5e:7b:65:95:54:56:80:e0:35:b6:5e:07:0b:ef:
         6d:fc:67:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----