Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
File:                     h2h0NgiWQiWeHHlERxdaLHZY6qw.mft (raw, json)
Hash identifier:          2fHV0c9GjreQjM+wt5nmuzvXULsfoaCQ7gkJQB0+//k=
Subject key identifier:   78:AE:52:81:57:06:A5:15:96:75:B7:F1:5B:31:73:79:9C:7C:7B:36
Authority key identifier: 87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC
Certificate issuer:       /CN=F3616EA4AF/serialNumber=87687436089642259E1C794447175A2C7658EAAC
Certificate serial:       021A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
Manifest number:          0217
Signing time:             Tue 27 Oct 2026 04:51:48 +0000
Manifest this update:     Tue 27 Oct 2026 04:51:47 +0000
Manifest next update:     Thu 29 Oct 2026 04:51:47 +0000
Files and hashes:         1: h2h0NgiWQiWeHHlERxdaLHZY6qw.crl (hash: xZVzqAmo/CunOf4uaHcRht73mZoAx0O5lh9u1h9Elf0=)
                          2: 60A315E6417711F0BAB45C7CDAE4EC9C.roa (hash: 1DDIa6aslINFzcXNYReTt3YTJSjzz9Bz8PpNSRKmn4s=)
                          3: 8ABD40685DBA11F0882F677FDAE4EC9C.roa (hash: LtTHAsI+8AgzrnAlcOiN9VsFsRmyEiAm6n6J+entv6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 04:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 538 (0x21a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3616EA4AF, serialNumber=87687436089642259E1C794447175A2C7658EAAC
        Validity
            Not Before: Oct 27 04:51:47 2026 GMT
            Not After : Oct 29 04:51:47 2026 GMT
        Subject: CN=6ae02de3-baba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:bd:06:e9:80:05:1b:87:67:01:21:92:a4:ec:
                    61:c3:f0:ea:9e:f5:27:90:df:54:da:ac:f8:06:68:
                    82:39:c6:7d:41:44:d5:0c:56:8c:00:a3:b1:1c:de:
                    62:0b:72:f0:14:9f:94:fe:ab:fa:c3:a9:cd:44:14:
                    05:cf:4c:56:89:d3:6c:ab:3d:f4:e9:f4:89:b3:2c:
                    05:f8:66:68:55:12:d3:09:42:0c:14:19:8c:d7:ef:
                    a4:f3:d5:a9:27:33:fc:9f:66:f4:5c:10:f3:f8:2a:
                    9a:06:99:38:49:73:f2:80:bd:b8:30:63:4a:91:e3:
                    b3:33:11:c1:c0:90:dd:5a:81:63:b9:c6:33:15:1e:
                    77:4c:39:08:31:cc:52:61:c7:a2:dd:7d:fd:c0:bf:
                    d8:cf:14:45:f0:bb:1d:c9:23:3d:17:8e:8e:f1:80:
                    0a:e8:4b:08:4f:06:09:7c:48:c3:87:de:ac:7b:89:
                    2e:3c:92:7b:36:47:28:45:a4:93:b0:80:d1:96:e7:
                    a5:af:e9:37:2c:80:bb:39:70:65:ef:2d:d0:19:14:
                    fc:98:16:b3:74:fa:fa:7b:14:9d:fb:05:6f:65:f7:
                    4c:2a:41:9a:ed:cb:c8:e7:63:ef:78:36:3e:1f:ed:
                    0d:a2:30:4e:23:7f:8b:00:8b:6d:68:57:33:88:fc:
                    bb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:AE:52:81:57:06:A5:15:96:75:B7:F1:5B:31:73:79:9C:7C:7B:36
            X509v3 Authority Key Identifier:
                keyid:87:68:74:36:08:96:42:25:9E:1C:79:44:47:17:5A:2C:76:58:EA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h2h0NgiWQiWeHHlERxdaLHZY6qw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3616EA4/D074417C354E11F097434DA3DAE4EC9C/h2h0NgiWQiWeHHlERxdaLHZY6qw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f3:37:97:19:7b:64:78:ce:c8:66:52:32:9a:8f:10:55:4f:
         1a:67:c9:3e:4a:e5:82:79:5c:ba:65:3c:0e:1d:c6:49:25:3b:
         a8:b0:6b:2f:d0:81:38:f5:d3:54:4d:a4:26:a6:4e:00:95:8e:
         1d:6f:6f:f5:c9:5a:37:1f:db:c7:4c:f2:0a:10:0c:7c:dd:1e:
         3c:6a:b9:4c:7e:8e:54:03:54:fc:9b:56:41:cd:fe:c0:6a:4f:
         3a:ed:21:51:56:72:2d:31:e6:fb:71:cf:d3:b1:c6:a1:a5:a7:
         6e:d7:ad:9e:af:b6:c0:3b:25:ac:fa:7b:09:c6:b7:43:9e:3b:
         e7:8b:c7:3f:99:2f:3c:7c:da:d7:3a:00:ad:48:8c:d3:f2:d5:
         d6:f7:63:38:ac:d7:c1:6a:7d:69:d0:7c:0c:ea:15:7b:b9:ec:
         a3:87:32:0c:2e:80:55:1e:8a:16:2e:0d:77:10:58:da:4a:31:
         13:ce:58:99:ee:7c:f5:90:cc:1a:0b:c4:7d:71:c7:c8:5d:47:
         10:fb:b6:17:c9:a8:e3:30:89:83:c4:65:1a:d3:4d:33:d7:e9:
         d5:a1:4f:8f:6e:28:ab:d9:42:4f:93:49:af:09:69:0f:6a:6b:
         42:99:20:19:79:f6:4c:fb:ab:c2:19:55:37:e3:02:b7:f4:83:
         97:71:aa:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----