Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
File:                     CrgqSYFgfZszadx3bbCHPaDXW0o.mft (raw, json)
Hash identifier:          c9RkC4+M+UH6M7FJat9YPh8KwT1HROjLgrl8X1ina1I=
Subject key identifier:   1D:F9:00:36:85:6C:C2:34:6C:8B:C5:09:BD:CC:77:F7:BA:08:51:43
Authority key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
Certificate issuer:       /CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Certificate serial:       0352
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
Manifest number:          034F
Signing time:             Wed 28 Oct 2026 04:18:24 +0000
Manifest this update:     Wed 28 Oct 2026 04:18:23 +0000
Manifest next update:     Fri 30 Oct 2026 04:18:23 +0000
Files and hashes:         1: CrgqSYFgfZszadx3bbCHPaDXW0o.crl (hash: 1MH3W9osMcNBdb2z2Rq8JOzBX0urvJevJ20O6enO02Q=)
                          2: 49178D26482111EFBF6A9846762E951A.roa (hash: Uq5zF4pcoSNvC1y+ziK2X/Qxf/rDJCV5RGjunbzu6Yw=)
                          3: B03D2452482111EF9F9EC84A762E951A.roa (hash: jCfjvbMFxRCBjcQ1hYzWoTlmpoZT6gauVXaJc8YGgBc=)
                          4: 74DC4CE4482111EFB52ABE46762E951A.roa (hash: IrKSaBlXTXvuFdDCMcmVoeGgt+ao2gr+1sDL9IuQ/x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C2DAF, serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
        Validity
            Not Before: Oct 28 04:18:23 2026 GMT
            Not After : Oct 30 04:18:23 2026 GMT
        Subject: CN=6ae17790-1220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:f0:5a:bc:2d:47:a7:4c:8b:ac:ad:2f:eb:
                    cb:8a:71:6d:12:47:15:01:da:9d:69:e2:00:c7:6a:
                    27:d2:34:e0:58:53:9d:2a:04:47:17:c5:c0:68:9b:
                    6d:03:28:58:50:de:24:7e:49:d0:38:a1:5e:3d:15:
                    d6:4f:88:99:80:a0:d4:43:93:a1:36:01:84:10:d8:
                    98:17:5f:b1:77:11:84:c7:20:da:cc:21:f7:a8:d9:
                    a3:a2:cf:2a:5c:b7:f3:87:1e:9f:4e:14:93:19:7c:
                    07:88:7d:11:be:4a:f9:5c:86:24:59:24:69:12:0e:
                    42:1b:47:44:7f:f7:59:04:60:3f:1d:79:ba:f8:9d:
                    22:d5:b9:a4:52:6b:bf:80:64:04:e0:f0:40:c9:4e:
                    66:11:2d:27:4f:f5:bd:87:e4:f4:0e:b0:70:8e:33:
                    d0:15:42:17:54:86:ff:23:e8:42:89:b0:f0:6c:82:
                    ee:8c:d1:8b:8c:8c:bb:f9:aa:4c:40:ab:ad:82:e9:
                    59:37:47:8e:fc:3a:6d:85:28:b6:09:8c:d6:2c:7e:
                    be:c4:6a:69:a3:f2:49:73:7b:73:80:47:03:50:c1:
                    8b:b5:2b:8a:39:a8:87:02:7e:9e:e4:d0:69:9d:0b:
                    8a:a4:ad:e1:0c:46:b7:f9:9b:65:0d:b0:64:8f:17:
                    e5:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:F9:00:36:85:6C:C2:34:6C:8B:C5:09:BD:CC:77:F7:BA:08:51:43
            X509v3 Authority Key Identifier:
                keyid:0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:98:1e:b4:6c:8a:60:03:dc:60:a9:ce:ab:57:e9:ed:51:e5:
         17:6e:b7:26:11:7d:62:9a:52:f7:9f:c5:9d:56:36:e5:e8:1b:
         f0:61:f3:f2:5b:f1:ce:71:59:7a:1e:e8:a3:d4:71:a2:27:d5:
         e8:05:02:18:a1:ae:1a:f5:09:1f:19:f9:20:13:19:fa:df:42:
         01:64:40:da:64:30:08:6e:df:2e:10:9a:0b:df:ee:43:54:92:
         c5:f6:32:ab:e8:8d:23:bb:26:76:21:59:42:3e:06:c6:c5:bf:
         cd:20:41:c9:85:7a:1e:d1:91:67:6e:b9:38:82:08:8c:3c:34:
         13:19:9c:0e:01:55:d4:a8:da:1e:b2:35:df:7f:40:81:fd:85:
         6e:7c:f1:74:d9:79:9d:71:85:ce:1f:da:8d:1f:99:79:9d:e4:
         f4:90:c6:d9:88:bd:10:4a:89:80:93:a7:16:37:19:ae:18:15:
         75:ea:5e:12:4e:2e:61:21:f0:b7:f0:35:a4:38:8b:5e:5e:05:
         51:1c:ed:9b:f2:8b:3a:b6:f2:54:53:78:8a:48:91:7a:b9:17:
         de:89:22:06:ba:86:59:8f:89:e7:56:bb:55:87:1f:96:1f:05:
         df:f2:e8:07:bb:2b:2a:10:30:71:15:fe:a4:85:a9:ed:24:96:
         89:58:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----