Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
File:                     -wB7KUv_2n8YvxAiZXr2TarOGL8.mft (raw, json)
Hash identifier:          0TozTlaBLwnwNG6KrcXm7o/cVa32x3hr0BwGkViJHRo=
Subject key identifier:   D9:F6:47:47:3E:ED:03:62:BF:93:6E:10:D5:2E:B5:A5:6D:52:3E:28
Authority key identifier: FB:00:7B:29:4B:FF:DA:7F:18:BF:10:22:65:7A:F6:4D:AA:CE:18:BF
Certificate issuer:       /CN=F362438EAF/serialNumber=FB007B294BFFDA7F18BF1022657AF64DAACE18BF
Certificate serial:       01BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
Manifest number:          01BC
Signing time:             Sun 25 Oct 2026 05:05:28 +0000
Manifest this update:     Sun 25 Oct 2026 05:05:27 +0000
Manifest next update:     Tue 27 Oct 2026 05:05:27 +0000
Files and hashes:         1: -wB7KUv_2n8YvxAiZXr2TarOGL8.crl (hash: 0L5Bdt5IZwFiPUXQhL6j7IeeX1lleNkq/DTshfx7Ju8=)
                          2: ACA77C287C1B11F0AB1307CEDAE4EC9C.roa (hash: 6BnYFcUifcR3Iy0hgeVZEvBCKEWqd+xpwV9gtPX4zbE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 446 (0x1be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362438EAF, serialNumber=FB007B294BFFDA7F18BF1022657AF64DAACE18BF
        Validity
            Not Before: Oct 25 05:05:27 2026 GMT
            Not After : Oct 27 05:05:27 2026 GMT
        Subject: CN=6add8e17-a2e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:40:b4:2b:4b:64:24:81:ae:b5:a9:3f:37:
                    98:70:0e:5d:2a:f3:e9:07:e1:2a:c7:ec:ef:22:23:
                    0b:19:83:25:41:1e:65:30:48:e4:c8:58:a2:8b:d5:
                    97:a0:d1:b1:da:51:26:e4:c5:49:d4:a5:26:05:c2:
                    3b:78:6d:35:97:35:0d:c6:1a:64:e5:95:9a:c7:21:
                    40:0d:ab:2c:a3:bb:73:5e:2d:56:bc:7d:27:a4:2e:
                    50:bc:42:8a:d6:e1:f5:02:e0:c8:2f:14:1d:58:24:
                    51:79:ee:97:e7:ac:aa:ef:bf:85:b3:15:70:ef:7f:
                    4c:5e:fa:59:3d:14:41:e5:59:8c:0a:08:92:39:26:
                    a7:ef:04:a2:a3:5c:8c:5f:24:fa:25:1d:ab:3c:57:
                    37:7b:e9:7c:54:c5:b6:f0:df:89:a0:58:43:8b:10:
                    3f:9c:bd:b5:7b:cb:e6:bc:8b:c7:5d:1e:17:4e:d0:
                    08:b6:ea:79:b3:09:aa:f3:39:e5:b3:9f:f8:77:65:
                    59:83:a9:8c:a9:87:10:77:bb:a6:12:bf:3d:08:52:
                    b5:07:7f:f8:48:6e:f4:d3:f0:a1:5e:6b:1b:09:8e:
                    dc:d1:4e:25:a5:cf:4f:7b:71:52:0d:ff:fd:14:27:
                    b2:ee:53:b9:05:67:78:e9:57:9a:39:0f:17:d6:e6:
                    14:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:F6:47:47:3E:ED:03:62:BF:93:6E:10:D5:2E:B5:A5:6D:52:3E:28
            X509v3 Authority Key Identifier:
                keyid:FB:00:7B:29:4B:FF:DA:7F:18:BF:10:22:65:7A:F6:4D:AA:CE:18:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-wB7KUv_2n8YvxAiZXr2TarOGL8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362438E/87C7511678D911F0A0053193DAE4EC9C/-wB7KUv_2n8YvxAiZXr2TarOGL8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:0b:15:c6:a4:f8:0d:2a:f1:c8:f9:ff:1c:1a:2b:f1:05:8e:
         38:44:b6:9b:2b:22:fe:69:af:e7:ff:ab:11:55:0b:24:69:45:
         84:cd:c2:41:a2:d0:c0:28:3c:25:62:6f:70:8f:e0:80:f3:40:
         45:de:58:31:14:8f:53:8b:3d:3b:13:d2:f7:62:e3:24:dd:b3:
         e3:e3:44:35:93:8d:a8:8c:5b:04:8b:29:45:c0:fa:72:5d:fc:
         04:ef:d2:e4:37:bd:03:9a:4a:97:40:25:29:e7:39:3f:7d:4d:
         a2:56:d9:dc:ca:39:47:73:fb:1c:3e:f6:aa:b2:78:01:dc:1e:
         91:e1:7b:da:64:d3:c5:20:2f:09:db:fd:11:cf:e5:96:9c:e5:
         3e:ab:53:ae:5e:7a:cb:b8:83:6b:ec:16:08:95:9c:f3:60:48:
         ef:a4:bc:91:f1:8b:93:b4:5f:53:38:38:a4:c1:57:fb:a5:49:
         04:07:6c:43:f3:6d:0a:a8:9b:6b:e4:9d:dc:4b:cc:3e:43:52:
         53:16:15:28:c6:df:57:93:5d:81:5d:e6:cf:20:91:7e:c0:18:
         51:a1:69:94:1f:f3:2f:cd:3d:99:df:84:03:8f:1e:5d:69:f0:
         17:64:e0:50:9c:c6:90:e7:45:c2:a0:f6:e9:54:89:66:5b:5d:
         a7:85:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----