Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
File:                     fdXEm3fH1Lf97amkdPdSEWYtoRw.mft (raw, json)
Hash identifier:          yq8nmLmfR3hTryZhOhvrLRYFedfqW7LZVmsOunQiD2A=
Subject key identifier:   70:74:91:EE:2F:13:42:FB:C1:CF:63:70:B1:4B:22:F6:05:34:01:1D
Authority key identifier: 7D:D5:C4:9B:77:C7:D4:B7:FD:ED:A9:A4:74:F7:52:11:66:2D:A1:1C
Certificate issuer:       /CN=F36B32D3AF/serialNumber=7DD5C49B77C7D4B7FDEDA9A474F75211662DA11C
Certificate serial:       46
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
Manifest number:          46
Signing time:             Wed 04 Nov 2026 05:51:16 +0000
Manifest this update:     Wed 04 Nov 2026 05:51:15 +0000
Manifest next update:     Fri 06 Nov 2026 05:51:15 +0000
Files and hashes:         1: fdXEm3fH1Lf97amkdPdSEWYtoRw.crl (hash: a1iI7YxpaMMjX7OkJkZSQ/kteEvAmkDLFUricnnlQa0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 05:51:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B32D3AF, serialNumber=7DD5C49B77C7D4B7FDEDA9A474F75211662DA11C
        Validity
            Not Before: Nov  4 05:51:15 2026 GMT
            Not After : Nov  6 05:51:15 2026 GMT
        Subject: CN=6aeac7d3-8b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ee:95:64:f7:fe:47:c8:ea:76:e8:77:fb:4b:
                    c3:ba:94:48:dd:de:b1:13:73:a5:7a:6e:55:7a:98:
                    de:5a:2b:ff:22:2b:28:c9:d6:82:28:2f:3a:12:93:
                    96:7a:d9:6a:c1:fc:4a:0c:f9:b9:72:79:92:c3:c0:
                    bc:4e:99:51:6f:37:99:f8:d4:85:79:69:38:fe:1f:
                    8c:53:ad:23:05:82:78:db:66:47:4f:ae:ff:cf:80:
                    ce:91:af:09:ff:c2:df:be:6d:4b:76:58:a8:d2:76:
                    e4:31:a5:e9:bb:8c:65:6a:4a:1a:59:08:05:2a:a9:
                    95:bf:8e:f4:fe:e6:db:bf:d7:38:4b:c4:80:82:c9:
                    79:6f:58:bb:88:5f:89:a3:06:f0:22:65:dc:9a:61:
                    5c:1e:22:13:79:1e:6c:61:38:2e:43:69:92:13:43:
                    bd:4a:e4:97:2e:81:bc:86:5b:d0:c0:04:d8:44:f4:
                    0d:23:71:16:33:1b:c4:14:84:e3:f6:da:d0:cc:c1:
                    83:83:b8:a0:94:b4:82:42:31:bf:1a:ba:cc:47:1d:
                    d5:e5:dc:42:21:6f:c5:67:61:01:d6:02:f7:e5:01:
                    e1:76:47:22:17:ad:c7:8d:4d:ab:bf:30:21:ce:5d:
                    de:21:b5:eb:ed:38:7a:f4:74:45:bc:09:28:ba:4d:
                    96:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:74:91:EE:2F:13:42:FB:C1:CF:63:70:B1:4B:22:F6:05:34:01:1D
            X509v3 Authority Key Identifier:
                keyid:7D:D5:C4:9B:77:C7:D4:B7:FD:ED:A9:A4:74:F7:52:11:66:2D:A1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:c3:5f:cb:6b:40:9b:32:0f:bd:dd:05:a3:3a:cc:04:44:e2:
         8a:b5:b2:4e:70:33:ca:ce:06:04:61:c9:d7:f0:43:d1:e1:35:
         ac:95:cb:a0:73:60:8b:7b:54:0b:43:84:58:66:04:df:19:c7:
         99:ca:2a:3f:d4:94:04:02:2b:d7:e5:bf:83:00:5b:dd:57:35:
         5d:c7:f1:33:e2:a1:7c:17:32:f3:55:79:f2:60:4d:43:93:ee:
         dc:7b:6c:27:bd:af:fe:10:8e:91:85:62:d4:a3:46:ab:98:8b:
         87:fe:10:c8:dc:c5:59:63:e4:76:bd:db:e2:4d:a2:ea:ce:0d:
         29:66:e2:ae:68:42:04:61:b8:f9:ae:92:90:99:6e:fc:38:73:
         d4:0b:d3:50:0f:a1:2c:0d:1e:7e:67:79:b9:96:06:26:75:84:
         0b:d7:c2:fc:6d:9b:8f:de:e9:98:b7:25:9e:71:5e:1a:f4:5e:
         af:a6:e3:ea:44:9d:4e:cf:da:29:4f:48:3d:28:e2:9e:c5:8c:
         3b:69:d0:a8:5e:a1:c2:e5:67:69:80:12:f1:d6:18:96:70:a8:
         2f:fd:fe:b3:b2:b1:47:a9:a1:65:e5:cc:d1:11:2e:bf:9d:a1:
         fc:4d:1d:58:a9:02:a8:25:5a:9a:1e:c4:99:a1:2f:dc:ee:69:
         36:bf:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----