Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.mft
File:                     q8dHcDs8OmElBW0TmYePr4S5kLk.mft (raw, json)
Hash identifier:          zSsl+O2+i2BrsX12B2YjSVP+W9SukUR4RN5M+zy3Zes=
Subject key identifier:   04:9F:A0:C8:D1:76:63:77:DB:EB:CA:FC:E4:A7:D9:F1:E4:2C:58:1E
Authority key identifier: AB:C7:47:70:3B:3C:3A:61:25:05:6D:13:99:87:8F:AF:84:B9:90:B9
Certificate issuer:       /CN=F361A88EAF/serialNumber=ABC747703B3C3A6125056D1399878FAF84B990B9
Certificate serial:       2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/q8dHcDs8OmElBW0TmYePr4S5kLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.mft
Manifest number:          27
Signing time:             Sun 25 Oct 2026 05:58:05 +0000
Manifest this update:     Sun 25 Oct 2026 05:58:04 +0000
Manifest next update:     Tue 27 Oct 2026 05:58:04 +0000
Files and hashes:         1: q8dHcDs8OmElBW0TmYePr4S5kLk.crl (hash: 9US1X6AJUlugW7fmD0rcjbqONZEGHP9AnBtqWLO0EEE=)
                          2: 501D74D6BD8C11F1978C7CA0CE1D38B0.roa (hash: qXW7CKWCX5d4vyt0e5dih86dNo17dys4v/Ah335StlA=)
                          3: 24B89BE4BDB011F18F9D4704CF1D38B0.roa (hash: pcaoC9JMipCpL0o+fPYmLKm+bNa7SS6GMm/D55dDlTY=)
                          4: 051F8D2CBD7B11F1AA9AD7B1CE1D38B0.roa (hash: i6y1B6HtR7ZOumE0hmbO1Wy73BFpw2iwcD+rCu9vZxI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/q8dHcDs8OmElBW0TmYePr4S5kLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361A88EAF, serialNumber=ABC747703B3C3A6125056D1399878FAF84B990B9
        Validity
            Not Before: Oct 25 05:58:04 2026 GMT
            Not After : Oct 27 05:58:04 2026 GMT
        Subject: CN=6add9a6d-4b9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:ff:f9:36:9d:d9:2e:e0:e9:cd:9d:62:02:ae:
                    00:f0:83:ad:20:95:f0:be:f3:1e:1e:2a:53:be:9f:
                    0b:87:bc:cc:c7:b5:46:79:8f:00:31:dc:74:7e:6c:
                    cb:6d:ae:76:88:4b:67:ac:68:77:9d:1a:45:3c:8c:
                    ff:7c:a3:c4:9e:99:a7:aa:63:b3:d7:12:4e:9c:03:
                    c3:37:4b:ca:5e:44:e4:f6:67:d8:b9:d2:54:19:bd:
                    10:32:90:5e:ae:df:25:d4:27:e0:41:9f:75:ef:cb:
                    9d:f1:55:a7:5c:fa:1f:28:12:76:36:e9:3a:bf:26:
                    32:0a:ea:df:48:8d:40:d3:fe:a6:be:fa:38:5c:76:
                    b8:7a:53:90:18:80:2c:27:ae:ba:be:69:15:33:ee:
                    2c:13:be:69:40:8b:31:05:a0:d7:1c:41:60:3f:f8:
                    73:e4:1d:67:35:a5:ec:0d:0f:66:c8:f4:d5:41:64:
                    f3:59:aa:f3:0c:9f:87:25:1f:62:23:8d:86:e1:0f:
                    8c:1e:9b:39:38:09:d1:90:58:a3:47:06:0f:ba:14:
                    ac:db:21:ed:46:70:6d:af:e2:e3:84:6f:62:49:b4:
                    10:fa:96:19:a3:00:d0:19:4d:55:3a:70:6c:b3:0d:
                    d5:c8:55:65:45:7f:a0:de:de:14:34:1e:f4:9f:4f:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:9F:A0:C8:D1:76:63:77:DB:EB:CA:FC:E4:A7:D9:F1:E4:2C:58:1E
            X509v3 Authority Key Identifier:
                keyid:AB:C7:47:70:3B:3C:3A:61:25:05:6D:13:99:87:8F:AF:84:B9:90:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/q8dHcDs8OmElBW0TmYePr4S5kLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361A88E/86D64BD2B91911F181EB6110CF1D38B0/q8dHcDs8OmElBW0TmYePr4S5kLk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:6e:42:83:f1:12:d5:5c:e9:6e:22:5a:a7:f6:a1:91:84:13:
         c9:1b:3b:60:0b:be:02:8a:3a:99:55:7a:76:d6:07:54:b1:ad:
         38:07:a6:fc:32:5d:0b:94:7b:12:01:c0:ed:42:5c:03:73:a5:
         9a:3f:67:64:2b:64:dc:bb:8b:00:b9:30:66:6b:73:5d:83:6c:
         37:f5:6e:71:75:df:f2:87:26:cf:8f:d0:70:e1:50:ef:1d:ac:
         f0:ea:51:cb:9f:60:80:49:7d:b5:16:f6:61:da:a5:3d:6a:46:
         91:62:c0:2f:96:5d:f3:ec:2f:03:50:b1:bd:5b:83:d1:93:bb:
         b1:bc:a0:86:9e:40:e6:cb:a5:10:2e:47:c1:33:94:41:5e:21:
         f6:65:3e:1e:2d:17:fe:c6:24:50:8b:1c:0a:89:c2:47:e0:6f:
         d0:d0:a9:4b:69:51:0f:96:e4:3e:a8:12:dc:36:30:50:cb:df:
         11:1c:32:d0:96:29:c6:11:73:62:68:34:18:49:aa:af:1f:84:
         aa:d9:73:8a:d1:15:71:27:e0:af:e3:71:d2:99:83:e1:18:07:
         df:25:d9:1b:c5:bb:a4:45:00:35:7e:59:56:33:13:87:25:1b:
         67:9b:99:3c:b7:bf:5b:39:bb:10:99:2d:4c:bd:33:21:a3:3a:
         65:41:31:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----