Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
File:                     TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft (raw, json)
Hash identifier:          u/8M3f4gVUWyvKXeoXgy5ez0Esn53ilW7c9g3dfkGxk=
Subject key identifier:   D0:CC:FE:F3:E8:C9:72:B7:9D:C2:FF:05:B6:DB:93:0D:C7:DB:2E:00
Authority key identifier: 4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0
Certificate issuer:       /CN=F3611B04AF/serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
Certificate serial:       0208
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
Manifest number:          0207
Signing time:             Fri 23 Oct 2026 04:55:27 +0000
Manifest this update:     Fri 23 Oct 2026 04:55:26 +0000
Manifest next update:     Sun 25 Oct 2026 04:55:26 +0000
Files and hashes:         1: TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl (hash: IYPTMWsLl33PmdhclzDxkruEzeKZ8P4ZrMUsicgjbFg=)
                          2: D4D84B9E3D5211F08FF5E995DAE4EC9C.roa (hash: /d1iMp/ZT/BMLsfn6Ybe9u0ARPnAxFGfjCR2WymN//o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 04:55:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 520 (0x208)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611B04AF, serialNumber=4E23AA7A0DA8340E2EDDFD215EB6C4533742FCF0
        Validity
            Not Before: Oct 23 04:55:26 2026 GMT
            Not After : Oct 25 04:55:26 2026 GMT
        Subject: CN=6adae8bf-659f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3b:f6:bc:55:3e:13:ca:94:8a:ac:ba:7a:9f:
                    79:ce:bc:f5:b2:fb:5f:51:26:2e:22:6b:6a:83:09:
                    2d:0f:a9:85:66:7e:c8:05:2a:4b:57:71:72:15:a4:
                    a1:ea:35:af:65:10:f5:3a:81:3c:20:83:87:be:a9:
                    42:e4:7f:48:13:a5:2a:ce:09:03:46:8d:de:72:54:
                    02:27:9d:30:f5:e8:56:16:45:05:e4:c8:63:c4:9d:
                    9e:2b:0d:98:75:1d:98:51:4b:4a:0a:70:d2:f1:7b:
                    ee:88:38:b2:96:f9:e7:d8:4f:99:fa:0e:80:38:a0:
                    bb:af:99:c6:58:a8:1b:0b:bc:91:e8:15:93:0e:e6:
                    eb:96:74:ff:35:48:be:18:3b:b3:f5:8c:73:2c:7e:
                    db:38:03:ff:63:56:86:90:2c:a1:f7:6a:6d:de:fc:
                    89:93:97:ba:3e:1e:90:c0:94:4c:3b:64:10:b4:43:
                    c2:eb:df:68:09:8d:61:d6:51:fd:57:26:65:77:5a:
                    84:5b:22:6b:84:09:57:95:dc:0b:f6:19:0d:aa:1b:
                    d2:3c:85:8c:d0:ee:07:53:91:82:26:13:bc:fd:60:
                    77:8f:59:89:8d:ee:24:5c:b6:49:bb:35:0c:29:d5:
                    82:f2:ce:9f:fd:2d:6a:a1:f4:06:79:45:01:75:7d:
                    0c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:CC:FE:F3:E8:C9:72:B7:9D:C2:FF:05:B6:DB:93:0D:C7:DB:2E:00
            X509v3 Authority Key Identifier:
                keyid:4E:23:AA:7A:0D:A8:34:0E:2E:DD:FD:21:5E:B6:C4:53:37:42:FC:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TiOqeg2oNA4u3f0hXrbEUzdC_PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611B04/78F95A183D5011F080DBDA86DAE4EC9C/TiOqeg2oNA4u3f0hXrbEUzdC_PA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:75:a8:3d:95:52:ee:24:13:aa:9b:45:1b:7b:a3:73:82:76:
         d0:df:a1:c7:27:31:59:68:67:0a:19:b9:03:49:1b:f8:fe:a7:
         9d:ce:d0:72:8e:62:d5:2f:12:8a:6a:f8:83:9e:13:e8:5c:ed:
         54:29:39:6d:59:67:7b:dc:b3:25:af:ac:5c:c1:c3:58:a0:d9:
         61:df:bb:95:35:de:14:01:2e:e1:93:73:85:68:87:12:54:7b:
         4c:1f:b7:55:d8:3a:cd:d1:b2:c7:35:6f:6b:4f:0a:97:43:15:
         72:b3:86:12:35:a4:59:c7:68:8a:4c:ed:ad:d0:d0:12:c4:33:
         f6:14:33:c9:f2:d5:6e:66:76:e7:53:72:93:59:9a:4f:f6:8d:
         d7:11:d6:22:6e:c8:ac:cc:c1:ea:33:bf:e4:ae:0b:24:b1:58:
         37:39:60:4e:24:49:74:4f:d3:4b:f3:27:09:39:74:61:77:da:
         0a:21:0f:e5:6e:f8:16:70:c6:5f:04:7a:f5:29:dc:fd:c8:45:
         bd:5f:c2:2b:a5:eb:b1:95:40:e2:6a:94:e6:40:74:95:ed:96:
         d4:be:28:35:40:1d:3c:db:5a:1e:dd:34:53:c3:0e:75:9a:40:
         7f:07:c4:2f:18:e1:a9:0d:2e:f5:ff:7d:16:23:50:d9:d4:f2:
         29:11:bf:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----