Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
File:                     zES432VSaGhWOxfptlH5NdVgDNA.mft (raw, json)
Hash identifier:          kP/o42xdUMCH3X0v41WBlN1x7pO2zQUC7e/oWs//ec8=
Subject key identifier:   FA:8C:4A:D5:81:58:6F:7F:18:F2:99:9A:08:77:03:16:FE:5D:51:B9
Authority key identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0
Certificate issuer:       /CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
Certificate serial:       092C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
Manifest number:          0928
Signing time:             Sun 25 Oct 2026 01:52:52 +0000
Manifest this update:     Sun 25 Oct 2026 01:52:52 +0000
Manifest next update:     Tue 27 Oct 2026 01:52:52 +0000
Files and hashes:         1: zES432VSaGhWOxfptlH5NdVgDNA.crl (hash: kpSnqTESE0u9J3RDcEyjeJQWBBoJNy7fGU8b6b1VTIE=)
                          2: C665522E84F911F1AF90E6CACE1D38B0.roa (hash: BlAie0Tlat6KcCr7zSL4GFYwdKacjGVvkC5cmrbXIJU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348 (0x92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FCC8AF, serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
        Validity
            Not Before: Oct 25 01:52:52 2026 GMT
            Not After : Oct 27 01:52:52 2026 GMT
        Subject: CN=6add60f4-f080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:c6:48:56:03:cc:e9:05:35:d0:38:31:42:
                    28:7c:f6:25:56:ee:fa:0f:a6:02:6c:11:cc:91:6c:
                    2a:3a:9c:b6:41:ad:56:3b:6f:2a:5b:1d:1f:ff:77:
                    76:5e:59:86:03:79:d7:52:75:1b:64:67:69:85:4d:
                    31:60:ce:3d:44:6c:e8:55:b0:3b:d8:20:b8:53:74:
                    a7:43:f5:d9:84:a1:25:56:34:df:27:bc:35:04:59:
                    5f:83:72:2c:50:81:30:2a:b0:74:ee:a4:d1:56:83:
                    93:f5:c2:8c:e7:c3:16:49:b6:8e:d7:c0:a5:a9:5d:
                    e9:33:8a:7c:3a:86:2c:70:67:86:0b:5f:99:ff:9f:
                    ad:0f:e6:2a:2b:c0:fb:29:e9:75:46:96:f7:21:66:
                    b1:a0:30:ff:91:f7:02:f2:12:d5:47:19:33:ba:82:
                    9b:64:c0:49:19:77:74:58:62:77:ac:97:fa:7e:69:
                    da:4c:f1:75:f5:57:39:f0:e3:62:cf:3b:ec:21:24:
                    ef:da:ed:48:e5:04:45:1b:f6:f5:71:d3:4c:7e:f6:
                    a8:5a:85:66:ef:88:32:29:20:94:a4:7a:df:56:f2:
                    5c:21:17:8d:5d:78:53:12:0b:ea:b3:43:f1:33:6e:
                    16:12:28:fe:f2:f7:7a:4d:97:39:77:aa:43:b4:ec:
                    04:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:8C:4A:D5:81:58:6F:7F:18:F2:99:9A:08:77:03:16:FE:5D:51:B9
            X509v3 Authority Key Identifier:
                keyid:CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:d2:01:0f:92:78:19:e6:74:04:6e:fa:e9:05:64:96:06:c5:
         5d:8b:fe:75:9b:a7:73:1c:06:3a:fa:9e:32:b0:de:39:b6:a0:
         50:62:23:d0:20:a5:0c:f2:d6:d6:2b:7b:02:1b:1c:26:13:22:
         65:5a:c6:75:d6:83:e3:12:94:75:f5:e2:65:6b:7f:2f:f7:b8:
         35:cd:cb:b8:6d:6e:73:0c:e9:84:25:11:85:f0:a8:61:66:8f:
         0a:71:d4:9a:a4:6f:38:74:e5:6a:8e:f9:21:34:1a:49:57:6a:
         d8:53:10:29:90:6c:4b:28:74:3c:0b:a4:56:20:7e:bc:36:b3:
         23:d3:5d:c0:3a:53:71:1c:d4:2a:aa:ea:2c:37:b3:63:8b:dc:
         1c:5e:35:ff:ff:84:bf:26:d5:43:d7:b0:a5:2d:f7:14:65:e6:
         c1:e6:24:88:ff:e1:2d:b8:80:7d:c7:16:11:44:64:87:b0:4c:
         d9:01:9b:7b:a3:fb:5a:e0:38:01:12:27:42:fe:9a:b1:bc:20:
         d8:11:8a:d1:b2:44:78:4e:84:94:8f:4c:ad:79:3b:d2:55:31:
         a0:81:01:0f:f4:00:0c:ff:58:4a:aa:22:54:df:22:5a:d9:af:
         53:53:51:0e:21:bf:98:de:e9:e7:9e:9c:25:31:da:a5:dd:4b:
         af:60:b3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----