Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
File:                     aaGydU0sb2tHJmd6cgRQI2vS7NE.mft (raw, json)
Hash identifier:          gwdeqzE9yB//Bw2bNVMyr9P8Tjc9bNgpG64FJsRBgOI=
Subject key identifier:   14:03:2D:6D:8D:01:AB:9F:BA:D0:29:FF:58:65:C0:FF:62:FC:99:BF
Authority key identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
Certificate issuer:       /CN=F3641DDCAF/serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Certificate serial:       01E5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
Manifest number:          01E4
Signing time:             Mon 26 Oct 2026 05:01:12 +0000
Manifest this update:     Mon 26 Oct 2026 05:01:11 +0000
Manifest next update:     Wed 28 Oct 2026 05:01:11 +0000
Files and hashes:         1: aaGydU0sb2tHJmd6cgRQI2vS7NE.crl (hash: TDqNlHGghbv4E2vryLG74K+fT80AnrZOFYao4VDLyqA=)
                          2: 73B4059658CE11F0B51042EFDAE4EC9C.roa (hash: LH5vIdf+4h9q3kvMURVZYnoRUhO4LGq7NT3aZO9J2wU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3641DDCAF, serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
        Validity
            Not Before: Oct 26 05:01:11 2026 GMT
            Not After : Oct 28 05:01:11 2026 GMT
        Subject: CN=6adede98-eece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f5:0d:23:89:2a:c9:d3:dc:72:8d:85:36:34:
                    c1:39:28:25:1f:b6:cd:01:c6:2d:77:8a:63:49:1f:
                    a8:6e:4c:2e:29:fe:a6:34:56:e5:22:19:48:76:6c:
                    23:fd:62:b9:dc:e0:8a:57:ed:6a:20:c9:ab:f0:80:
                    2a:2a:39:09:11:c7:16:de:92:ff:c2:eb:6f:ab:49:
                    d6:cc:b9:f7:f7:c7:20:a3:0c:a7:89:6f:62:ee:19:
                    b7:6f:e9:2d:8e:ec:6e:95:44:41:5b:19:cc:98:5b:
                    4d:89:96:48:52:01:b9:8b:f8:fb:25:0c:91:53:19:
                    b2:6e:0a:f4:e1:ac:c1:2a:97:12:9a:85:e3:22:4c:
                    39:1f:af:47:20:61:3e:61:bd:6e:2c:ff:ed:9f:e1:
                    ef:b6:78:a6:a9:e0:7f:cc:f3:b5:14:bb:c5:a1:f6:
                    38:93:8c:81:bc:18:af:1c:6b:bb:2c:63:cb:57:02:
                    a5:dd:25:36:e8:f9:dc:08:d6:29:17:18:fb:04:f7:
                    35:b5:55:91:4b:2f:ca:74:ab:1f:14:ff:ce:16:d3:
                    12:14:d8:29:fa:3a:0b:6d:33:3d:8a:dc:88:83:10:
                    50:16:39:c5:f4:f7:5a:4d:13:66:82:62:1d:88:93:
                    ed:9a:b8:1b:b8:00:60:5d:9e:0d:05:28:8f:ff:d8:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:03:2D:6D:8D:01:AB:9F:BA:D0:29:FF:58:65:C0:FF:62:FC:99:BF
            X509v3 Authority Key Identifier:
                keyid:69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d8:db:c9:9c:6e:3c:76:cc:a8:a2:28:38:52:df:45:f9:0d:
         33:ba:38:ac:72:63:d5:eb:3a:ee:5f:db:96:73:4d:f9:cf:b1:
         03:ed:14:97:5d:49:27:6d:b6:4e:3a:dd:9c:9e:39:dc:1c:83:
         11:47:48:25:d4:96:92:da:30:4f:d9:64:ae:a9:84:38:94:0e:
         61:a2:be:fa:3d:43:0d:f5:73:57:76:43:29:a1:93:52:01:f5:
         11:47:2e:24:5f:c5:b0:16:bc:d4:18:60:14:8c:8d:1c:71:b3:
         82:f3:4d:d9:eb:44:7f:54:3b:94:17:ef:d6:ed:79:4c:30:f6:
         6a:78:cd:6a:64:bd:fe:68:6c:53:07:12:cf:49:90:c9:1c:fc:
         91:d4:43:e3:84:15:c4:29:b0:29:f3:9c:08:9d:5f:a8:04:56:
         71:fa:e1:43:a8:36:97:ac:c0:71:e8:9b:c9:f2:f7:b5:dc:93:
         87:bb:be:37:ac:c7:8c:d7:d4:fc:19:f7:89:42:0b:95:83:0f:
         95:71:b2:d8:d7:2f:99:4c:6a:31:8c:05:6c:3a:1b:34:fd:30:
         6f:dd:7a:d8:6b:3d:d8:71:49:84:42:87:03:04:13:56:2c:05:
         66:54:59:b8:d4:d2:87:99:6b:57:6a:06:68:c9:89:a9:a5:f9:
         d6:d2:bb:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----