Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ADE80/A5047A10D6D911F1B4146B0CCF1D38B0/i0O5ZsZ-qOtz_lB6v5lmvAhiOTI.mft
File:                     i0O5ZsZ-qOtz_lB6v5lmvAhiOTI.mft (raw, json)
Hash identifier:          VA7E6r9HRR24AQa79CkicEk7/FwADUbbQnjznsCPgnc=
Subject key identifier:   26:21:F8:7B:D6:1C:2A:B3:21:89:FC:BC:0D:29:9E:2D:67:2A:A4:5A
Authority key identifier: 8B:43:B9:66:C6:7E:A8:EB:73:FE:50:7A:BF:99:66:BC:08:62:39:32
Certificate issuer:       /CN=F36ADE80AF/serialNumber=8B43B966C67EA8EB73FE507ABF9966BC08623932
Certificate serial:       04
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i0O5ZsZ-qOtz_lB6v5lmvAhiOTI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ADE80/A5047A10D6D911F1B4146B0CCF1D38B0/i0O5ZsZ-qOtz_lB6v5lmvAhiOTI.mft
Manifest number:          04
Signing time:             Wed 04 Nov 2026 14:22:15 +0000
Manifest this update:     Wed 04 Nov 2026 14:22:14 +0000
Manifest next update:     Fri 06 Nov 2026 14:22:14 +0000
Files and hashes:         1: i0O5ZsZ-qOtz_lB6v5lmvAhiOTI.crl (hash: P/EsbPJJ5yPHXk838tgeEKfc74gLhWNQUtLyHlBl7nE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ADE80/A5047A10D6D911F1B4146B0CCF1D38B0/i0O5ZsZ-qOtz_lB6v5lmvAhiOTI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ADE80/A5047A10D6D911F1B4146B0CCF1D38B0/i0O5ZsZ-qOtz_lB6v5lmvAhiOTI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i0O5ZsZ-qOtz_lB6v5lmvAhiOTI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 07:36:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ADE80AF, serialNumber=8B43B966C67EA8EB73FE507ABF9966BC08623932
        Validity
            Not Before: Nov  4 14:22:14 2026 GMT
            Not After : Nov  6 14:22:14 2026 GMT
        Subject: CN=6aeb3f97-fff1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:0a:13:1a:92:d5:fb:c2:0d:6a:ec:24:93:e9:
                    e7:b2:8a:1c:92:c6:cb:c6:ea:18:28:fc:c5:15:a2:
                    8a:c6:22:ac:67:b7:53:ef:4d:fe:cd:b3:28:48:b6:
                    12:b2:b7:2c:c8:b8:98:bd:8e:d4:ed:8f:a3:68:8f:
                    fa:e4:ef:fe:2a:7c:61:ad:66:75:13:7c:ec:d4:ce:
                    ce:3d:18:6a:c9:95:17:16:cb:db:0e:87:2d:29:32:
                    3b:be:47:18:db:c5:53:33:b4:2f:47:50:9d:19:3d:
                    ef:02:c9:29:89:9b:99:da:04:3f:28:04:7c:63:c7:
                    02:87:84:95:c3:6d:74:84:d4:b3:ce:b5:40:f3:34:
                    95:f8:97:5c:d8:eb:2a:a3:c0:76:db:0d:02:d3:71:
                    1d:25:8c:02:85:23:53:55:3f:70:d3:16:21:d3:a6:
                    8f:20:04:09:b5:2f:27:38:81:76:4b:91:59:3e:59:
                    3c:7a:60:82:0c:8a:23:0a:a3:72:4d:a5:9d:b5:b8:
                    84:b6:e2:a0:35:07:55:aa:2b:06:0a:a1:dd:2d:d8:
                    d0:98:e0:4b:6f:6e:2b:47:37:3f:d1:c2:b4:5b:aa:
                    b3:7b:92:32:ad:6b:e6:e1:76:c5:7b:d8:1c:ad:a8:
                    d8:81:56:09:1a:ab:26:bf:73:68:54:f5:51:e1:5e:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:21:F8:7B:D6:1C:2A:B3:21:89:FC:BC:0D:29:9E:2D:67:2A:A4:5A
            X509v3 Authority Key Identifier:
                keyid:8B:43:B9:66:C6:7E:A8:EB:73:FE:50:7A:BF:99:66:BC:08:62:39:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ADE80/A5047A10D6D911F1B4146B0CCF1D38B0/i0O5ZsZ-qOtz_lB6v5lmvAhiOTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i0O5ZsZ-qOtz_lB6v5lmvAhiOTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ADE80/A5047A10D6D911F1B4146B0CCF1D38B0/i0O5ZsZ-qOtz_lB6v5lmvAhiOTI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:72:8d:d7:48:81:9f:c0:82:78:67:eb:67:19:3c:c8:6b:41:
         4d:a9:0a:8d:f5:9f:7a:75:49:9b:eb:1b:54:fe:42:20:a3:4f:
         e6:07:8d:f5:18:f3:40:84:f1:31:10:c2:10:f7:0f:fc:8a:9d:
         1c:9e:7d:86:04:64:e1:b7:93:91:0b:ac:31:a4:bf:67:31:32:
         e7:87:9d:8a:ef:ea:18:c7:b2:6d:67:d1:88:b0:dd:ab:36:84:
         6c:23:31:fa:87:7b:0b:ef:af:be:22:47:91:e7:fa:56:18:8e:
         a1:db:b4:01:f5:79:90:2c:82:d1:71:2d:82:e7:e2:05:06:56:
         b9:e4:d8:e3:4a:5c:43:35:b9:b6:48:fe:48:34:ba:8f:21:1f:
         cb:b5:34:41:94:6c:c3:9f:7c:ad:2f:25:f0:d0:54:56:75:2c:
         c9:67:96:6d:b9:83:b1:aa:c1:aa:01:31:94:14:d5:3d:4b:65:
         7d:83:4f:cd:bd:63:14:db:02:2c:0f:fe:39:ab:17:f0:df:5b:
         44:7f:87:f8:84:e8:70:74:d8:d3:3d:8a:f1:bf:71:c1:42:b7:
         08:8d:06:66:65:4e:28:0d:f0:91:34:0e:b2:d6:54:2f:2f:a9:
         36:0c:d6:2b:bf:cc:16:c2:5d:e6:b5:43:47:52:c7:54:87:8b:
         52:0e:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----