Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36306AE/9DBFBA10BFF211F1A6AAE2C8CE1D38B0/iZojtpvsuSptrU89oJmYyYvtiLY.mft
File:                     iZojtpvsuSptrU89oJmYyYvtiLY.mft (raw, json)
Hash identifier:          9KEbukQeps9oF/+ChmA25/8xP0zkv0IbXL+itjndv1c=
Subject key identifier:   51:A9:4B:F7:6F:74:28:01:B7:E7:1F:D8:1F:E0:F5:54:5F:C2:C8:EB
Authority key identifier: 89:9A:23:B6:9B:EC:B9:2A:6D:AD:4F:3D:A0:99:98:C9:8B:ED:88:B6
Certificate issuer:       /CN=F36306AEAF/serialNumber=899A23B69BECB92A6DAD4F3DA09998C98BED88B6
Certificate serial:       16
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iZojtpvsuSptrU89oJmYyYvtiLY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36306AE/9DBFBA10BFF211F1A6AAE2C8CE1D38B0/iZojtpvsuSptrU89oJmYyYvtiLY.mft
Manifest number:          16
Signing time:             Sun 25 Oct 2026 05:59:29 +0000
Manifest this update:     Sun 25 Oct 2026 05:59:28 +0000
Manifest next update:     Tue 27 Oct 2026 05:59:28 +0000
Files and hashes:         1: iZojtpvsuSptrU89oJmYyYvtiLY.crl (hash: +QlyoF5Y+xS6Ck4dRHOYzN5h29jvPy4vlbJVBzkDDpQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36306AE/9DBFBA10BFF211F1A6AAE2C8CE1D38B0/iZojtpvsuSptrU89oJmYyYvtiLY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36306AE/9DBFBA10BFF211F1A6AAE2C8CE1D38B0/iZojtpvsuSptrU89oJmYyYvtiLY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iZojtpvsuSptrU89oJmYyYvtiLY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36306AEAF, serialNumber=899A23B69BECB92A6DAD4F3DA09998C98BED88B6
        Validity
            Not Before: Oct 25 05:59:28 2026 GMT
            Not After : Oct 27 05:59:28 2026 GMT
        Subject: CN=6add9ac0-b464
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:e7:1f:60:87:1e:b5:a0:99:12:bd:4f:d8:82:
                    73:3b:79:f2:9b:bc:2f:ca:1e:a1:7e:f0:12:2e:aa:
                    2c:2d:19:7e:54:10:cc:d3:63:ed:d1:c2:05:ed:b6:
                    f0:f8:d2:e4:9b:2e:79:ba:90:1a:87:2b:66:a2:f6:
                    a5:c8:2c:89:f5:6d:48:e3:d7:df:f7:cb:a1:34:80:
                    36:1b:90:d8:e0:7f:b0:c8:ea:57:4a:c5:44:a1:a6:
                    a8:cc:2b:96:f0:85:a5:f9:37:a2:31:80:b1:ff:f4:
                    9c:55:58:4d:5f:ba:c5:b5:0c:ca:9e:c5:04:c8:e7:
                    28:6a:04:7e:d6:fa:39:59:1d:8c:23:06:75:0d:22:
                    fd:4d:c2:5c:cc:ec:80:06:c4:29:e6:c3:23:08:4b:
                    5f:f0:3d:98:db:37:9b:76:9d:ef:ac:b0:5b:82:28:
                    ae:28:82:39:d0:4c:30:0f:fd:71:28:a5:db:46:15:
                    e1:95:b7:bc:0d:3a:2f:5a:83:de:3c:18:85:20:7f:
                    71:4c:57:f6:d5:0f:bf:b3:76:cf:31:c3:8b:32:a7:
                    eb:c5:6c:37:e1:4e:36:68:1a:00:39:e2:07:5e:ad:
                    1d:1d:8c:27:1a:8e:1f:0b:d6:89:ff:5b:ce:b5:6e:
                    a6:d9:b1:7a:7f:f1:90:30:25:a9:1f:e7:ad:de:01:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:A9:4B:F7:6F:74:28:01:B7:E7:1F:D8:1F:E0:F5:54:5F:C2:C8:EB
            X509v3 Authority Key Identifier:
                keyid:89:9A:23:B6:9B:EC:B9:2A:6D:AD:4F:3D:A0:99:98:C9:8B:ED:88:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36306AE/9DBFBA10BFF211F1A6AAE2C8CE1D38B0/iZojtpvsuSptrU89oJmYyYvtiLY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iZojtpvsuSptrU89oJmYyYvtiLY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36306AE/9DBFBA10BFF211F1A6AAE2C8CE1D38B0/iZojtpvsuSptrU89oJmYyYvtiLY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:b9:1e:3d:68:e2:eb:0c:f9:a6:9e:73:0a:de:21:ed:a4:b3:
         38:ff:35:38:73:34:27:5e:06:2d:8b:35:c7:6e:4a:a4:0c:37:
         b6:ee:93:57:c6:08:3a:4e:0c:67:9f:98:5d:2c:f1:f9:b1:14:
         ac:ce:c3:ed:6d:f8:56:3f:25:c3:11:2d:b4:be:9b:96:81:b2:
         4e:ae:88:00:44:e2:92:9e:66:b5:48:9b:b8:85:ed:01:da:02:
         10:c5:16:e5:89:cb:57:29:d8:d9:0f:31:2a:0e:98:3c:07:9a:
         10:30:ec:f5:5a:43:89:8d:30:37:0a:48:37:8a:21:ce:cf:ea:
         98:6b:fb:81:04:25:d8:b6:63:4f:86:5b:1a:50:b6:62:53:f6:
         ce:fb:dc:ee:cb:b9:e0:91:62:2d:05:82:12:6a:2a:d2:e1:2c:
         8e:f8:cd:41:20:a7:df:9d:a4:ff:b3:ff:f5:02:87:da:47:38:
         ce:ff:52:b7:1c:00:79:94:db:86:ff:29:88:7b:b7:09:91:a3:
         07:6a:8b:77:b0:23:ae:c2:26:c8:a6:0d:2f:3e:51:c7:69:4d:
         59:63:3a:57:9c:ba:f5:27:ca:1a:3a:03:2e:ef:a8:c9:0a:fa:
         0c:43:8a:46:56:d2:f0:ae:03:a1:b1:fd:56:2e:a4:34:61:2e:
         06:01:4c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----