Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
File:                     XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft (raw, json)
Hash identifier:          bvYcJ9IfMrz3h4Dk9c3w0KwEEX1BMoBwWt+Fz+UaMjU=
Subject key identifier:   08:3E:8D:90:9D:EB:46:07:41:33:48:A5:C0:BD:35:3D:C7:E3:C9:FB
Authority key identifier: 5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
Certificate issuer:       /CN=F3627065AF/serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
Certificate serial:       033A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
Manifest number:          0339
Signing time:             Sat 24 Oct 2026 04:23:55 +0000
Manifest this update:     Sat 24 Oct 2026 04:23:54 +0000
Manifest next update:     Mon 26 Oct 2026 04:23:54 +0000
Files and hashes:         1: XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl (hash: CgwPcFOzPXn0IMBArGqjDwewS/dUNk12saVGdfPF32o=)
                          2: 47D8021A53D411EFA7C83C74762E951A.roa (hash: QwK+XpG/BTzSdMaFzgcL2FXrrpo9GOI3wltkdoXtHnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 826 (0x33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627065AF, serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
        Validity
            Not Before: Oct 24 04:23:54 2026 GMT
            Not After : Oct 26 04:23:54 2026 GMT
        Subject: CN=6adc32db-fc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c3:78:89:a1:ee:99:63:33:75:0a:9d:a9:80:
                    c3:b6:3b:65:2c:66:e7:67:07:2f:43:53:2d:63:65:
                    7d:13:00:30:e3:ac:ff:90:f4:0e:15:96:e1:63:49:
                    b1:99:3f:e4:b6:99:22:a8:9b:04:c3:68:8c:af:98:
                    f4:b9:08:f8:36:70:d6:49:2f:80:5a:de:25:39:5d:
                    38:72:d7:a7:7e:7a:fa:41:65:26:6a:95:71:5e:c7:
                    ee:59:35:69:2b:78:be:a2:33:59:8b:c4:ca:55:31:
                    3e:f3:c7:5c:9f:2f:14:1f:fe:a6:5a:50:b1:5b:bb:
                    5b:42:a7:f3:47:c1:e8:aa:f6:8d:e4:4e:59:a3:fd:
                    93:7b:f6:eb:15:a8:8f:f9:85:fd:06:02:30:18:89:
                    12:78:cd:b3:ba:07:22:a6:fa:2f:35:ac:19:64:a6:
                    54:0d:c5:ee:0d:cb:a2:7c:bb:78:b7:c2:b0:4f:93:
                    60:78:39:2f:d2:76:ef:a6:14:e3:b1:12:a5:bc:94:
                    0e:cb:a6:8d:ce:45:4f:d6:19:b5:39:3b:61:fb:d7:
                    7c:07:cf:3b:ac:22:07:9b:ee:d9:7f:bd:1c:03:9a:
                    13:ea:49:8b:06:20:b9:bf:a9:d5:af:82:f3:39:4d:
                    a7:0e:8b:91:c7:e9:96:2a:28:0f:2d:aa:d8:39:d3:
                    11:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3E:8D:90:9D:EB:46:07:41:33:48:A5:C0:BD:35:3D:C7:E3:C9:FB
            X509v3 Authority Key Identifier:
                keyid:5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:60:1d:99:b6:8d:06:93:40:81:89:f9:56:10:74:7c:a8:5a:
         b7:c3:c8:43:f2:f3:21:14:94:5a:6c:24:87:5e:dd:75:3c:fa:
         93:ee:79:4d:05:22:01:62:bd:ae:ef:e5:5a:bb:24:f9:9e:78:
         6a:28:25:4a:b6:7c:70:04:f8:9f:be:1b:51:1a:7f:e2:3d:c3:
         7b:7b:65:51:8e:b7:9a:aa:fc:dc:2f:8d:63:b2:8f:e3:0a:61:
         79:b7:31:8f:df:4a:1a:92:f6:94:10:9f:2c:1f:ba:24:db:21:
         19:07:f2:7f:6c:e8:c4:e8:3c:14:3f:ff:94:d3:43:fe:e4:99:
         43:17:d8:28:fc:93:4e:78:a0:0a:a5:a2:d2:db:88:be:6b:c5:
         e4:e4:df:69:cd:a2:66:7e:af:0c:6d:a9:22:ce:94:e6:aa:60:
         80:9e:d0:da:35:9e:b0:5b:b3:ca:8f:e4:83:b3:c3:e5:48:65:
         e2:24:4f:77:d2:2e:ea:7d:75:0f:be:6e:85:8c:b6:69:8d:8b:
         c7:4e:cd:98:4f:c3:c5:62:be:f0:13:21:67:fe:9b:2f:41:28:
         9b:0d:91:fd:40:76:c5:18:8d:3e:5c:5c:ae:bc:83:10:27:19:
         14:0e:e5:11:4c:95:59:0f:92:ec:5d:db:6e:f3:06:10:c3:d6:
         43:21:14:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----