Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
File:                     xj3vPkSJRRRCc6POcAST0qDFrZo.mft (raw, json)
Hash identifier:          JL5BISTAizbM48JrWYowEcEyz9z1boKWDtMyuTeGN0M=
Subject key identifier:   B3:A8:64:4E:01:B5:4B:60:31:B4:A9:1F:3D:51:33:EF:DA:9F:38:81
Authority key identifier: C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A
Certificate issuer:       /CN=F3640DFDAF/serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
Certificate serial:       02ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
Manifest number:          02EC
Signing time:             Mon 26 Oct 2026 04:37:51 +0000
Manifest this update:     Mon 26 Oct 2026 04:37:51 +0000
Manifest next update:     Wed 28 Oct 2026 04:37:51 +0000
Files and hashes:         1: xj3vPkSJRRRCc6POcAST0qDFrZo.crl (hash: kZ9OZD00rANBDIQf/SA4MKGaYC7l6GJcyrm4OLZG9pI=)
                          2: 70BD095E911A11EF82BB6497762E951A.roa (hash: 5fyS1GERhUUgdGRbwBe9ouhJvbIYLSd3rIAGNjMRUFs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749 (0x2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3640DFDAF, serialNumber=C63DEF3E448945144273A3CE700493D2A0C5AD9A
        Validity
            Not Before: Oct 26 04:37:51 2026 GMT
            Not After : Oct 28 04:37:51 2026 GMT
        Subject: CN=6aded91f-b78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:41:b8:52:1c:f0:c2:ac:e6:e6:f4:25:8b:5d:
                    e8:32:ba:4e:21:8e:25:33:1a:10:bf:4b:4f:bb:96:
                    ef:67:64:64:d6:eb:53:7d:d7:d8:a0:17:6b:ab:1b:
                    dc:69:6b:ff:19:d8:f6:c5:cd:cd:61:b3:63:cf:f6:
                    21:e2:23:2f:18:05:69:7f:b1:bc:7d:1b:14:77:5d:
                    ab:97:64:96:cc:c4:46:9e:a0:0c:26:a2:db:8f:5f:
                    ea:c1:f9:9a:19:2d:e2:f1:07:ee:06:67:f8:89:cf:
                    be:18:e0:a4:4d:21:84:21:83:89:41:48:34:ed:7c:
                    7b:63:42:02:84:81:99:b8:37:69:43:8f:23:0e:47:
                    d9:ca:b2:89:b0:98:ea:ab:3f:92:bc:b5:6d:5f:fe:
                    c0:cb:16:b8:f1:ba:8c:fa:36:b7:f9:5e:7e:ac:4a:
                    d3:dc:2c:85:0d:10:d9:cd:44:5b:08:ab:d9:c1:8d:
                    c4:4f:13:cc:09:90:10:b3:65:bd:ff:b1:96:df:30:
                    e4:a4:3c:30:6d:72:04:ad:36:4c:5a:5a:4c:a0:63:
                    29:99:7a:d6:27:a7:45:5f:bd:db:51:35:77:b6:93:
                    79:58:46:3b:84:54:cd:ea:5b:cb:e5:01:b5:ed:8d:
                    95:6a:46:0d:1a:03:74:a1:e2:eb:0d:d8:fc:23:b9:
                    d5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A8:64:4E:01:B5:4B:60:31:B4:A9:1F:3D:51:33:EF:DA:9F:38:81
            X509v3 Authority Key Identifier:
                keyid:C6:3D:EF:3E:44:89:45:14:42:73:A3:CE:70:04:93:D2:A0:C5:AD:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xj3vPkSJRRRCc6POcAST0qDFrZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3640DFD/B233BB2E909A11EFB949646B762E951A/xj3vPkSJRRRCc6POcAST0qDFrZo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:fd:67:22:b5:90:dd:e8:78:35:b0:b9:0b:ff:5c:ea:89:52:
         96:f7:47:b9:b0:36:29:9e:22:61:42:2b:3f:62:1f:cf:fe:65:
         8b:9f:05:31:9f:61:91:8f:c2:93:c5:7a:91:e1:08:77:37:a5:
         2a:cc:39:b5:60:f4:5f:25:1d:fe:b8:de:9e:e2:ca:c0:e9:40:
         45:62:c8:2e:ec:8a:04:ec:3a:e1:87:c8:4a:66:2a:bd:89:43:
         99:d7:46:21:e3:b5:66:0a:47:b3:9f:61:59:9b:4e:f8:87:86:
         b8:f3:d0:e1:cb:8f:43:ae:7d:c8:ac:e5:9a:07:b2:b1:a0:97:
         92:36:8c:74:d9:86:42:78:0f:8f:65:07:d4:48:2d:b4:b2:48:
         7d:ff:2d:37:ad:84:6f:0c:b3:d9:e0:32:9f:cc:b5:94:75:7b:
         6e:73:69:53:3b:2c:01:07:43:8f:83:1c:2c:08:03:f9:9f:c6:
         6d:36:e1:f5:ee:09:2c:95:a8:0f:15:fe:cc:4e:3f:79:57:71:
         bb:f8:f0:64:bc:ef:5b:78:a5:51:5b:8b:be:39:40:5b:fa:96:
         b4:41:11:3c:bf:eb:4a:c2:11:4c:06:3c:4b:12:6f:c1:15:d2:
         39:e0:da:ef:19:fb:07:05:43:3c:60:39:4f:e9:a0:84:30:28:
         47:8b:09:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----