Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft
File:                     FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft (raw, json)
Hash identifier:          cXH6IE7af7S4Enfs0DUJyIbB8TkYPIDqMsJfwmPnI+0=
Subject key identifier:   1B:85:AF:0E:96:71:98:1F:27:40:7B:08:22:DB:33:08:38:0A:F0:08
Authority key identifier: 16:C3:69:2A:83:39:1D:C8:FB:92:2E:9E:0F:15:A6:85:E5:44:67:69
Certificate issuer:       /CN=F3634E30AF/serialNumber=16C3692A83391DC8FB922E9E0F15A685E5446769
Certificate serial:       108B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft
Manifest number:          108B
Signing time:             Sun 25 Oct 2026 00:50:55 +0000
Manifest this update:     Sun 25 Oct 2026 00:50:54 +0000
Manifest next update:     Tue 27 Oct 2026 00:50:54 +0000
Files and hashes:         1: FsNpKoM5Hcj7ki6eDxWmheVEZ2k.crl (hash: HLl880bWyKqLF5+socAi5FRjkFhCA3BziGnEJ2fiGB0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4235 (0x108b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3634E30AF, serialNumber=16C3692A83391DC8FB922E9E0F15A685E5446769
        Validity
            Not Before: Oct 25 00:50:54 2026 GMT
            Not After : Oct 27 00:50:54 2026 GMT
        Subject: CN=6add526f-408f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:46:6c:ee:c3:15:c4:f2:aa:86:2e:b7:46:
                    83:0a:11:5c:ca:92:c2:e3:a2:7c:6a:9e:00:6b:ed:
                    3c:db:a9:b7:a0:3b:b0:88:9b:aa:30:5f:97:c0:ed:
                    7c:e5:6e:c2:63:a2:59:98:53:36:e1:70:1d:58:06:
                    0b:46:c2:74:fa:b4:3d:37:82:a3:cb:80:0e:0a:56:
                    86:86:d5:10:51:cb:84:8b:02:e5:71:dd:6b:f3:f3:
                    eb:9f:b3:00:fb:47:14:bd:1f:df:61:84:f5:ec:2f:
                    78:e6:a4:7a:1b:c9:d5:2e:40:24:07:94:b7:84:5b:
                    4a:5b:ae:8b:d2:74:2a:d7:d4:c5:bf:5c:b7:11:21:
                    0a:60:c8:46:26:27:d8:9b:46:16:5f:69:1a:83:0f:
                    3b:68:9a:d1:9d:9c:82:38:f6:ac:61:ed:3a:5e:12:
                    7d:e6:3b:26:3a:de:03:8b:ae:7d:d6:2a:fb:05:8f:
                    ed:a7:66:80:17:f4:21:db:4c:ad:ce:2c:5d:d3:49:
                    26:d6:4c:07:eb:37:1a:c1:f7:cd:8d:d3:6c:f8:bd:
                    76:dd:e6:33:87:e8:50:5f:35:49:d9:b3:70:3b:1c:
                    dc:1f:43:07:b5:4d:5a:95:b7:a6:74:66:ee:e3:44:
                    f9:15:1f:7b:3b:47:bb:f4:f3:0b:e1:11:89:ab:d4:
                    63:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:85:AF:0E:96:71:98:1F:27:40:7B:08:22:DB:33:08:38:0A:F0:08
            X509v3 Authority Key Identifier:
                keyid:16:C3:69:2A:83:39:1D:C8:FB:92:2E:9E:0F:15:A6:85:E5:44:67:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3634E30/B714895C093111E59A9B4A22F8AEA228/FsNpKoM5Hcj7ki6eDxWmheVEZ2k.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:44:24:80:a0:a1:78:1c:38:7c:f8:db:b7:1a:0c:fb:15:13:
         8b:3e:97:b0:6d:a4:ea:8f:d0:ae:47:97:c6:23:57:dc:1e:be:
         b2:b1:cf:57:22:15:f5:bf:0b:34:18:0f:2c:74:a7:f8:d4:a3:
         0f:33:73:1e:92:54:47:64:1e:c3:2e:dd:47:74:1e:72:88:b3:
         48:ed:51:38:8d:9a:2a:16:80:a5:19:c4:da:69:93:bb:d7:d2:
         fd:5c:ef:4a:3d:8a:ce:9d:48:c2:ff:0f:1f:b1:b7:34:b1:f0:
         a2:82:ba:76:30:07:ea:3a:19:e3:ea:87:ef:36:a9:38:76:b9:
         6c:92:44:c8:53:68:e3:e7:5a:f1:f4:9e:b0:cc:f5:5c:60:b1:
         8f:e8:9e:d9:f6:b6:00:6b:0d:37:21:be:82:19:95:61:56:ac:
         83:48:c9:76:db:ab:de:05:6e:12:03:36:81:c4:b7:34:44:0b:
         7c:6a:bb:cf:95:6a:b5:89:1b:7a:54:fb:d0:7f:c5:fd:7f:f7:
         bd:63:3c:3c:23:07:11:79:01:b5:29:74:90:63:12:2d:5d:ef:
         c0:5d:6b:ba:b0:7d:86:0c:0f:a6:81:4d:7c:4c:82:f4:b9:23:
         30:00:97:10:16:37:58:c2:88:30:6f:25:45:7e:0c:7a:38:74:
         da:b3:d8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----