Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C88A1/7AE4145AD2D011F18F5E88B8CE1D38B0/-krEl1Q-1tVVnk4hN4J8CVslLbM.mft
File:                     -krEl1Q-1tVVnk4hN4J8CVslLbM.mft (raw, json)
Hash identifier:          BY4mT18khQEEmpV8sEs1dZT2RvvhibFDkl3/t607y9A=
Subject key identifier:   DD:13:1F:01:4D:9B:4D:37:F3:04:EB:75:A1:CF:3F:EA:41:C6:FF:59
Authority key identifier: FA:4A:C4:97:54:3E:D6:D5:55:9E:4E:21:37:82:7C:09:5B:25:2D:B3
Certificate issuer:       /CN=F36C88A1AF/serialNumber=FA4AC497543ED6D5559E4E2137827C095B252DB3
Certificate serial:       08
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-krEl1Q-1tVVnk4hN4J8CVslLbM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C88A1/7AE4145AD2D011F18F5E88B8CE1D38B0/-krEl1Q-1tVVnk4hN4J8CVslLbM.mft
Manifest number:          08
Signing time:             Wed 04 Nov 2026 06:06:29 +0000
Manifest this update:     Wed 04 Nov 2026 06:06:29 +0000
Manifest next update:     Fri 06 Nov 2026 06:06:29 +0000
Files and hashes:         1: -krEl1Q-1tVVnk4hN4J8CVslLbM.crl (hash: bX6uRAItpSDhlO/yue+8YypYfce2wk0/5ug6qeegjjM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C88A1/7AE4145AD2D011F18F5E88B8CE1D38B0/-krEl1Q-1tVVnk4hN4J8CVslLbM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C88A1/7AE4145AD2D011F18F5E88B8CE1D38B0/-krEl1Q-1tVVnk4hN4J8CVslLbM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-krEl1Q-1tVVnk4hN4J8CVslLbM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 06:06:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C88A1AF, serialNumber=FA4AC497543ED6D5559E4E2137827C095B252DB3
        Validity
            Not Before: Nov  4 06:06:29 2026 GMT
            Not After : Nov  6 06:06:29 2026 GMT
        Subject: CN=6aeacb65-25a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:12:66:73:8b:88:01:d5:1f:7c:43:e3:4f:
                    ec:de:7b:01:f0:fb:11:69:ba:cc:9f:df:68:76:97:
                    77:18:81:0d:c9:0c:5e:53:8c:91:fc:54:da:cb:61:
                    d2:8b:08:d1:f7:ba:c1:9e:0a:0c:c9:ec:8d:76:9a:
                    c2:dd:7a:c8:c6:35:c0:39:3f:22:51:7e:4c:d8:19:
                    b4:f4:b5:47:dc:9a:8e:2e:48:bd:00:e6:bf:aa:7f:
                    aa:01:0b:ea:2d:d1:b0:32:aa:56:be:9e:a1:55:79:
                    5d:3c:a9:7f:84:9b:00:ed:a0:01:17:94:44:ba:82:
                    9a:16:28:33:9b:d8:5d:1f:f1:35:d9:5e:bb:4e:9c:
                    63:74:32:de:d6:d0:2a:35:87:f2:40:ab:35:9c:58:
                    9e:7a:40:bd:01:56:f6:a7:12:6b:67:ea:18:5a:2c:
                    0e:18:3e:02:ee:34:a5:bc:f7:2b:14:fc:fe:31:cb:
                    ea:1a:df:93:49:a3:9a:31:39:bf:12:1a:a2:b6:e1:
                    11:73:19:80:34:8d:cb:4a:3b:66:a4:b3:3c:e3:fa:
                    36:20:fc:6d:55:52:a8:e7:8f:94:85:74:d9:9c:a6:
                    d8:2f:6c:34:31:d8:c7:b1:b6:74:0c:4b:ed:25:01:
                    00:9b:74:d9:03:ee:8e:aa:2e:6b:5f:8c:5d:e5:99:
                    8e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:13:1F:01:4D:9B:4D:37:F3:04:EB:75:A1:CF:3F:EA:41:C6:FF:59
            X509v3 Authority Key Identifier:
                keyid:FA:4A:C4:97:54:3E:D6:D5:55:9E:4E:21:37:82:7C:09:5B:25:2D:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C88A1/7AE4145AD2D011F18F5E88B8CE1D38B0/-krEl1Q-1tVVnk4hN4J8CVslLbM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-krEl1Q-1tVVnk4hN4J8CVslLbM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C88A1/7AE4145AD2D011F18F5E88B8CE1D38B0/-krEl1Q-1tVVnk4hN4J8CVslLbM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:5f:b7:2c:93:01:18:09:18:06:fa:46:7f:ca:f4:89:1c:ee:
         78:8b:ea:1f:62:06:c7:3b:4d:ce:f8:6d:d3:1d:3f:ea:b7:46:
         9c:cc:5e:31:66:35:4e:94:1e:3d:26:a4:01:7a:cd:84:0a:70:
         9a:8d:58:30:1b:f1:16:f0:74:4d:20:6c:05:08:d2:10:7b:53:
         2a:3f:a4:a1:39:ed:fa:72:29:23:7c:08:b3:76:9a:94:79:bd:
         d7:4c:fd:ac:ce:1d:84:87:2c:15:1e:f9:c7:42:b0:21:00:48:
         d7:40:59:46:f0:d7:d9:c6:23:c4:d6:4a:37:f9:8c:ba:13:c7:
         9b:07:c0:46:1b:b3:cf:b4:0a:d5:03:bf:0a:56:ab:df:7c:52:
         3e:f9:80:4e:5f:f0:7d:2c:a6:6b:03:da:fa:05:26:e4:c2:e3:
         73:5e:a1:09:eb:c9:8a:11:59:33:51:df:80:a0:87:f5:08:58:
         45:ae:b6:67:56:4c:c4:d8:9a:04:46:f2:81:d9:65:5d:07:5c:
         64:44:3b:e8:d2:e7:b1:34:b5:fb:7c:a0:9b:72:73:3f:ef:ed:
         b3:33:bf:30:2b:e1:5e:a2:9d:69:50:71:db:52:44:a4:b7:86:
         55:18:da:5f:c8:15:25:88:0f:e1:f3:c0:e5:cd:f6:d0:fc:3a:
         75:a7:63:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----