Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629889/7F429AB2BE7111F1AC83F6F3CE1D38B0/jiRFv_ABk3ULO_pIqKaicLAOPMU.mft
File:                     jiRFv_ABk3ULO_pIqKaicLAOPMU.mft (raw, json)
Hash identifier:          2PKGGudgdnYj2sF4mWVu7uKLU0l6x4IoHrcSVzru3OU=
Subject key identifier:   90:B3:CF:8A:4B:45:18:6D:56:5E:D0:41:0E:67:4C:66:1C:1B:12:03
Authority key identifier: 8E:24:45:BF:F0:01:93:75:0B:3B:FA:48:A8:A6:A2:70:B0:0E:3C:C5
Certificate issuer:       /CN=F3629889AF/serialNumber=8E2445BFF00193750B3BFA48A8A6A270B00E3CC5
Certificate serial:       1A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/jiRFv_ABk3ULO_pIqKaicLAOPMU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629889/7F429AB2BE7111F1AC83F6F3CE1D38B0/jiRFv_ABk3ULO_pIqKaicLAOPMU.mft
Manifest number:          19
Signing time:             Sun 25 Oct 2026 05:58:53 +0000
Manifest this update:     Sun 25 Oct 2026 05:58:52 +0000
Manifest next update:     Tue 27 Oct 2026 05:58:52 +0000
Files and hashes:         1: jiRFv_ABk3ULO_pIqKaicLAOPMU.crl (hash: 8c7D1SNI3MZh6gguVQ6msIjzRKOkNameV4Lrq/0DnBE=)
                          2: 1F3F0A00BE7211F1B78D5FF8CE1D38B0.roa (hash: xFI9yUGp0VKnLx8f/SF0LaNcUrg/V+in6O8XfzWQzvE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629889/7F429AB2BE7111F1AC83F6F3CE1D38B0/jiRFv_ABk3ULO_pIqKaicLAOPMU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629889/7F429AB2BE7111F1AC83F6F3CE1D38B0/jiRFv_ABk3ULO_pIqKaicLAOPMU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/jiRFv_ABk3ULO_pIqKaicLAOPMU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:58:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629889AF, serialNumber=8E2445BFF00193750B3BFA48A8A6A270B00E3CC5
        Validity
            Not Before: Oct 25 05:58:52 2026 GMT
            Not After : Oct 27 05:58:52 2026 GMT
        Subject: CN=6add9a9d-043f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7b:da:41:f4:bc:49:a6:b8:31:d5:5c:22:4e:
                    fa:46:35:d8:9a:d0:19:6a:60:18:fa:37:35:3f:d8:
                    c3:4d:39:7c:4c:f3:6a:67:ce:b9:65:fd:1a:f6:ea:
                    14:62:fa:17:3c:12:ab:11:1a:37:62:e1:47:cd:2d:
                    8f:a6:35:5c:cf:50:72:46:8f:90:9d:30:8d:e7:de:
                    ba:21:d9:c5:0b:96:45:5d:08:ba:44:71:21:58:5a:
                    a7:52:ce:8f:cb:4f:f9:04:b6:25:bb:68:5f:4b:e8:
                    ae:a5:c0:45:1a:83:5c:ff:ca:87:04:e5:cb:dd:c9:
                    61:03:a9:85:55:3d:c6:2c:ad:8f:86:c0:f9:ff:be:
                    11:4a:ca:7b:3c:4a:a3:bc:af:2c:fa:ed:b5:b0:7d:
                    e8:08:d8:3d:e1:07:69:ca:64:a7:32:d4:28:99:cb:
                    02:dd:05:b5:24:43:eb:52:3a:19:bf:0b:a7:99:9e:
                    36:1d:1b:b0:bf:9c:0e:89:98:82:4e:15:62:73:49:
                    df:55:1c:c3:30:2e:de:8f:79:30:a4:2f:31:4f:36:
                    35:7f:6d:2d:66:ff:ad:71:b2:bb:d9:81:aa:1e:1a:
                    ff:da:8d:0f:ea:2c:5d:45:58:2c:28:6f:e0:9d:aa:
                    c4:dd:36:a2:e2:b4:52:da:8c:23:c6:c5:75:92:d6:
                    bc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:B3:CF:8A:4B:45:18:6D:56:5E:D0:41:0E:67:4C:66:1C:1B:12:03
            X509v3 Authority Key Identifier:
                keyid:8E:24:45:BF:F0:01:93:75:0B:3B:FA:48:A8:A6:A2:70:B0:0E:3C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629889/7F429AB2BE7111F1AC83F6F3CE1D38B0/jiRFv_ABk3ULO_pIqKaicLAOPMU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/jiRFv_ABk3ULO_pIqKaicLAOPMU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629889/7F429AB2BE7111F1AC83F6F3CE1D38B0/jiRFv_ABk3ULO_pIqKaicLAOPMU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:45:f5:fe:5b:37:cb:82:96:89:92:08:3a:fe:8d:b3:14:88:
         67:de:a3:2b:dd:ea:91:cf:0b:2d:8b:ad:94:e8:ad:b0:87:47:
         08:b1:5e:fc:87:05:0c:c3:5d:f3:01:95:88:eb:02:02:d7:08:
         4e:94:aa:a8:72:bf:3f:4b:a3:34:21:5a:f8:f9:f7:cf:33:6b:
         5d:04:fd:4f:22:eb:62:f3:29:8a:4d:46:a4:31:c6:21:13:e4:
         5a:f3:25:60:3d:78:79:43:78:94:c9:c5:1b:e8:2f:9d:57:97:
         2b:86:4a:3c:12:38:70:a5:46:17:4b:68:b0:6b:5d:98:85:5b:
         d0:67:5e:81:4d:0e:43:34:06:5f:63:7c:8b:31:f5:c3:c0:a7:
         a0:a6:19:d6:c1:37:72:97:2f:32:17:df:c8:66:77:91:d4:21:
         1e:2e:7c:06:65:1d:32:eb:11:38:1d:fb:03:41:f3:43:16:78:
         f5:cb:c1:07:7d:4f:db:5a:20:aa:57:19:2a:59:17:61:2e:d6:
         42:bf:aa:81:d9:83:3d:34:59:63:4c:32:ca:47:37:c2:77:78:
         a9:31:b1:ed:47:0f:5b:34:7b:08:32:95:e3:e8:06:a6:78:ab:
         ec:29:5a:b5:55:1a:be:56:67:b1:5e:3a:f2:a5:f5:32:43:fc:
         ff:47:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----