Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
File:                     KyRChIF0qoiURpp3m5_X2klYxmk.mft (raw, json)
Hash identifier:          pRyoSroDYck6Y8FLklvlXubIrbOxFZYQo7m4GXAqqKg=
Subject key identifier:   4F:7A:10:D4:FC:81:CC:96:D6:57:25:BF:35:E9:0C:58:28:02:57:D9
Authority key identifier: 2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69
Certificate issuer:       /CN=F361D299AF/serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
Certificate serial:       104E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
Manifest number:          1040
Signing time:             Sun 25 Oct 2026 00:55:55 +0000
Manifest this update:     Sun 25 Oct 2026 00:55:54 +0000
Manifest next update:     Tue 27 Oct 2026 00:55:54 +0000
Files and hashes:         1: KyRChIF0qoiURpp3m5_X2klYxmk.crl (hash: WtjfFVvjBR7U+2e6f8ZnjYY6whJbBtuUGQNKW/9vSyQ=)
                          2: 7C0BFD26F4F511EFB3E4B9B5762E951A.roa (hash: 5wXs7RMJiyud6JyXFkR1o4z/jMZs+dRUug3mlkais2g=)
                          3: 603F44FEF4F511EF825958B5762E951A.roa (hash: Ba8AFZPMa3HGsyKURqI70r5EW0Munyy3hZ7Nh86XhXk=)
                          4: BE403084F2A411EFA60BB451762E951A.roa (hash: ia48RiXRj/TS/ZIH2z01yABB9uM5rlXdHXcHKIZJfs4=)
                          5: E5D310BCF2A411EF9A7E2652762E951A.roa (hash: ZQkJvtNfrwoPVbwO+rTZ+tWRmqiD9tIx3HghRCOVm/Y=)
                          6: CAFDB41AD1C211F0A9C2D38DDAE4EC9C.roa (hash: otkoUIeVC07ZHogmrq0P3r+9c9Hq45HdG/7TPnP6EBo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:55:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4174 (0x104e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361D299AF, serialNumber=2B2442848174AA8894469A779B9FD7DA4958C669
        Validity
            Not Before: Oct 25 00:55:54 2026 GMT
            Not After : Oct 27 00:55:54 2026 GMT
        Subject: CN=6add539b-d39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fd:44:39:c5:74:18:a2:c5:67:1f:c6:ee:a3:
                    06:a2:76:d7:9b:94:61:43:8f:43:49:9f:18:bf:63:
                    83:80:f6:d8:45:f7:54:5b:48:ee:f3:ed:22:92:9f:
                    a4:5e:82:27:4a:a0:b3:64:aa:c1:bb:bb:4c:f8:be:
                    30:9e:ca:08:18:9f:89:dc:83:89:dd:9d:ed:8c:18:
                    0a:f7:70:0d:52:b4:34:01:b3:f8:b5:8c:fb:06:39:
                    d1:33:a5:32:68:4b:e2:50:06:5e:e6:40:f1:4c:22:
                    01:ac:23:e1:c0:1c:dc:5b:c2:c6:59:c1:1f:81:d6:
                    49:9b:f2:66:9c:3a:f5:05:60:49:8a:cd:68:28:89:
                    77:9a:1f:f8:4e:5f:17:07:4d:6b:1e:6e:07:15:b4:
                    c4:91:6d:84:2d:04:b0:5e:0c:28:bb:f4:4f:6c:c0:
                    3e:be:04:f4:ad:f2:d8:a3:ca:02:67:b9:07:2e:8e:
                    85:22:b9:9a:6f:6f:d3:5c:90:09:97:34:23:c7:de:
                    df:f9:98:e1:a1:12:02:40:df:fc:6e:f5:74:3b:94:
                    a5:b3:08:55:af:7c:35:38:de:1f:2f:2d:ec:18:8d:
                    79:d6:45:21:a7:6d:1c:fc:20:22:d6:32:ca:61:63:
                    19:23:c5:f5:16:21:46:c9:29:33:7e:51:cb:5c:7f:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7A:10:D4:FC:81:CC:96:D6:57:25:BF:35:E9:0C:58:28:02:57:D9
            X509v3 Authority Key Identifier:
                keyid:2B:24:42:84:81:74:AA:88:94:46:9A:77:9B:9F:D7:DA:49:58:C6:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KyRChIF0qoiURpp3m5_X2klYxmk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361D299/48F008D856D511E5845EF85CF8AEA228/KyRChIF0qoiURpp3m5_X2klYxmk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:c0:a8:df:b6:ef:23:e9:28:92:9c:9d:2f:02:8e:bd:ad:29:
         50:0f:6d:4d:e1:a1:77:5d:ca:b8:5d:9e:dd:5b:aa:ef:60:2f:
         17:98:dc:ff:db:9c:ed:4d:9e:9a:20:0e:c0:75:b7:37:0c:73:
         ee:1b:08:62:37:7d:ab:bb:4b:4f:b0:29:9d:d0:61:8d:89:48:
         8c:8d:6b:bc:78:0b:79:26:5f:bc:e1:b2:b4:f9:60:73:d9:2e:
         78:78:59:d9:6b:0b:f1:16:98:d7:52:41:c6:08:d8:83:6f:96:
         45:3a:e2:9c:c9:f7:a8:ab:97:df:d6:a6:d2:73:91:5b:a7:b1:
         08:60:5d:b7:88:26:c4:9a:d4:cf:de:84:81:a6:82:f7:6f:a8:
         2f:c0:db:d7:b0:46:b5:f7:99:c9:6f:83:dc:c4:b1:83:03:75:
         44:cf:52:b4:9b:a4:c9:df:c9:44:f4:23:3e:e8:5c:6c:d2:00:
         29:7b:73:52:06:6d:ba:20:d4:78:61:cc:a1:78:4d:0b:40:ba:
         fe:d1:cd:b0:f5:29:5c:0d:1b:86:1a:71:e7:55:18:49:1d:10:
         1b:cf:5a:cd:cf:75:68:1f:55:f5:8e:45:fe:8e:9f:d3:ce:7b:
         6c:f0:c5:e3:bf:2d:a6:0b:94:41:3e:c3:9c:94:7d:7b:12:e6:
         4e:90:7f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----