Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
File:                     bssXAorVt9tcd32x3OCXh-SVstE.mft (raw, json)
Hash identifier:          azjwu/260Cp62YSEk43R00czvCvslqhPxiIhd1q+/uY=
Subject key identifier:   19:25:E8:58:78:08:8E:98:18:CA:61:32:45:83:3F:E2:70:DF:BB:C2
Authority key identifier: 6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1
Certificate issuer:       /CN=F3630D7EAF/serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
Certificate serial:       099D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
Manifest number:          0998
Signing time:             Sun 25 Oct 2026 01:45:03 +0000
Manifest this update:     Sun 25 Oct 2026 01:45:02 +0000
Manifest next update:     Tue 27 Oct 2026 01:45:02 +0000
Files and hashes:         1: bssXAorVt9tcd32x3OCXh-SVstE.crl (hash: fHp/4U7ZdyEkHf6VL3HgFn65l2d0ygPRF60kuCOr/c8=)
                          2: 4C93AD482A7111F1BFB9EECADAE4EC9C.roa (hash: 1Oc7qz+Lk94BWa35i9DuQ6Lqo6kBFCtOUZX3ruT365o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2461 (0x99d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3630D7EAF, serialNumber=6ECB17028AD5B7DB5C777DB1DCE09787E495B2D1
        Validity
            Not Before: Oct 25 01:45:02 2026 GMT
            Not After : Oct 27 01:45:02 2026 GMT
        Subject: CN=6add5f1f-6344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bc:b6:c9:45:95:61:31:69:db:3b:57:ab:05:
                    2e:90:2d:8f:2c:38:80:e3:b3:4c:bf:cf:b2:63:d9:
                    33:5e:c8:0d:73:cc:a7:14:60:d3:58:90:54:29:09:
                    90:0f:37:69:24:ed:26:48:15:bf:7b:34:a6:eb:aa:
                    4a:47:1f:6f:b4:7f:bc:e1:e4:31:05:dd:dd:8f:13:
                    5a:a2:49:af:78:6e:2d:ef:ad:0f:c5:09:59:85:1f:
                    95:51:9a:68:e2:32:0a:99:3f:2e:60:ef:4a:d6:dc:
                    e1:39:55:23:38:1d:9b:c4:81:ef:fa:85:17:5c:d1:
                    c8:1d:ba:0b:30:48:b7:19:25:80:c3:10:7a:e1:e5:
                    73:f4:f4:82:a7:b5:41:ae:5b:ff:cb:88:40:c9:5e:
                    d5:04:a7:e1:5e:a4:2f:96:24:c3:b6:3c:4b:76:4c:
                    b3:6c:c0:eb:68:4b:61:85:f0:f5:9d:9b:86:83:cc:
                    1a:bf:96:a5:2a:f8:ea:5e:06:0a:0f:b6:df:c8:94:
                    81:ee:46:66:2b:da:57:b1:50:42:3b:b9:c3:8b:b5:
                    6a:6b:f9:73:a6:5a:7a:02:fb:4a:7d:6d:74:1f:42:
                    83:a7:00:36:4d:23:6d:3f:b3:a8:2c:ed:3a:97:67:
                    b8:81:de:ab:f9:8a:5d:cf:2e:a9:dc:24:22:f7:a7:
                    da:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:25:E8:58:78:08:8E:98:18:CA:61:32:45:83:3F:E2:70:DF:BB:C2
            X509v3 Authority Key Identifier:
                keyid:6E:CB:17:02:8A:D5:B7:DB:5C:77:7D:B1:DC:E0:97:87:E4:95:B2:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bssXAorVt9tcd32x3OCXh-SVstE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3630D7E/E06DA510797311EA82E97681F8AEA228/bssXAorVt9tcd32x3OCXh-SVstE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f2:b7:9e:c1:46:d2:87:1a:5b:4c:84:19:65:b8:22:d0:93:
         9d:f1:e4:2e:9e:21:54:61:16:be:a0:5e:34:26:32:f2:d4:aa:
         c6:bb:cb:7f:e4:cd:3a:ad:02:a8:ba:7a:6c:65:e1:ef:35:22:
         62:a1:4f:ca:42:5e:19:4d:af:5f:0e:54:8c:ad:34:ac:8b:51:
         aa:50:85:17:14:18:c5:56:b7:97:62:61:1b:c2:46:54:fd:ea:
         f6:ab:ab:5a:6c:4c:af:74:33:89:06:e9:4b:34:b0:90:95:2c:
         b2:b8:90:a3:a7:19:cd:7a:e7:9a:b8:30:9a:82:12:ae:82:4d:
         8b:5d:80:6c:6c:d7:85:bf:c3:eb:e5:c9:5b:69:d4:9c:c7:05:
         45:54:fe:72:23:80:c6:2a:1c:d2:1b:a5:af:74:d0:76:1e:8b:
         bb:eb:20:97:b9:88:9d:24:c9:31:ce:d6:ed:a2:91:5a:40:45:
         a7:6b:41:2e:4d:dc:a2:31:2c:23:91:b4:56:26:f6:59:8b:7a:
         67:2c:7c:b9:86:33:64:25:e0:07:a5:09:ba:8d:90:31:2e:1f:
         fc:e2:25:0c:4b:72:3a:8e:b8:df:60:22:c5:b9:36:28:6c:e4:
         43:88:5d:a2:b3:68:6a:79:1f:70:cc:42:c4:c3:db:e0:02:6e:
         0f:c4:83:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----