Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
File:                     QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft (raw, json)
Hash identifier:          O3EYq4W3LKD/mNlsA+UHmrEbgAFTb7DIUay2Ms1Trqg=
Subject key identifier:   5B:FF:76:27:BE:19:22:A8:C4:BE:44:C2:92:8A:BA:7A:FD:42:D7:2C
Authority key identifier: 41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9
Certificate issuer:       /CN=F3629B7BAF/serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
Certificate serial:       0671
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
Manifest number:          066F
Signing time:             Sat 24 Oct 2026 02:46:50 +0000
Manifest this update:     Sat 24 Oct 2026 02:46:49 +0000
Manifest next update:     Mon 26 Oct 2026 02:46:49 +0000
Files and hashes:         1: QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl (hash: +NiLnnw+OwdDtBjLt3pzsZo9hHAonzyenY7Y6XEOtY0=)
                          2: 2E85E16E8A5111F1A46308E6CE1D38B0.roa (hash: aLMN39Ly3jZqRnr/vt0hJ6kpZnAn/edsopHoifZ14/c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1649 (0x671)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3629B7BAF, serialNumber=41F0924C60D68E1FBC00D299F21894CE4CA1B5C9
        Validity
            Not Before: Oct 24 02:46:49 2026 GMT
            Not After : Oct 26 02:46:49 2026 GMT
        Subject: CN=6adc1c1a-6eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:75:65:11:f4:1b:d1:84:65:c9:80:2a:60:07:
                    87:68:68:66:ab:2f:61:f6:d9:c4:a0:6e:af:e4:2e:
                    62:d6:1b:33:a5:85:99:97:70:4a:f3:c6:54:50:08:
                    66:6f:1d:72:3e:79:65:dd:6e:e4:18:b6:d4:21:a0:
                    0c:4b:ad:8c:2a:73:7d:1e:01:53:f3:61:b9:37:7f:
                    75:e9:88:0c:e0:9f:6a:0e:f4:64:19:4e:1c:e3:36:
                    1b:1e:6e:5c:c8:7c:6a:89:34:ae:73:ea:a2:2c:5d:
                    30:62:e5:3a:f1:03:52:8e:8c:30:3a:c1:02:15:aa:
                    e9:e6:65:f2:33:dd:c0:75:48:fc:31:72:db:88:99:
                    91:a9:65:2b:d0:cd:8b:7a:59:df:e4:77:b7:eb:28:
                    7a:93:d6:e0:26:b5:1d:a1:0d:d1:81:80:5b:7c:f1:
                    01:ed:c6:a6:93:df:1b:13:99:2e:7d:15:84:76:c9:
                    bc:b9:c2:00:63:e1:8b:61:76:0d:b5:5e:20:c4:44:
                    62:4a:60:73:27:02:db:e4:6f:94:3a:21:a4:ca:bb:
                    87:fa:08:4b:68:20:95:5b:2d:56:8b:5e:d1:d0:89:
                    09:c0:a1:b1:19:d7:49:bc:bf:0b:bf:ba:4b:f4:58:
                    1b:cb:c3:59:b6:c7:47:e8:ba:1d:67:ef:42:53:3a:
                    cb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FF:76:27:BE:19:22:A8:C4:BE:44:C2:92:8A:BA:7A:FD:42:D7:2C
            X509v3 Authority Key Identifier:
                keyid:41:F0:92:4C:60:D6:8E:1F:BC:00:D2:99:F2:18:94:CE:4C:A1:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QfCSTGDWjh-8ANKZ8hiUzkyhtck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3629B7B/D1FD7020E35511ECB0A0F090F1222468/QfCSTGDWjh-8ANKZ8hiUzkyhtck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:9e:9a:c4:4d:2f:e3:e6:f6:0c:fa:52:a9:ff:0f:f7:ff:e1:
         58:f7:ad:62:04:dd:63:d9:07:64:ea:db:c3:b0:47:5a:ab:e3:
         6a:59:94:e8:1f:65:9c:33:6d:59:89:4d:06:a5:09:de:36:e5:
         a2:b4:d8:2c:83:21:98:fd:24:72:fc:1e:87:e1:e6:03:b7:fa:
         c9:86:49:8c:85:0b:d7:26:c8:09:c5:5c:9c:8e:4a:c9:83:68:
         55:85:2e:29:cb:12:ca:ad:25:b3:4a:39:de:a8:9d:59:61:30:
         24:17:fa:02:d2:ce:de:74:0e:8e:01:83:1a:3f:9c:3f:6c:28:
         8d:cd:e3:13:46:1d:ba:6a:94:0e:a8:29:5d:db:71:05:c2:c2:
         06:b0:cc:29:4b:49:44:38:ed:f4:64:f3:9a:48:8d:ab:3c:21:
         fd:7d:33:da:87:0e:7e:40:4b:2c:ee:45:71:5e:40:54:59:1a:
         05:07:0d:4d:47:3f:47:ff:50:60:73:41:a0:5f:c7:3e:43:e5:
         99:fb:8e:9f:fe:85:84:19:84:0d:15:53:aa:b9:96:49:0c:96:
         3f:29:81:72:29:98:e8:92:ab:da:26:43:0d:34:64:1a:1d:78:
         86:13:51:6b:68:fb:cb:7f:0a:2c:41:eb:49:5a:b3:19:bb:52:
         8d:c0:be:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----