Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File:                     xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier:          0zGge+JhX2V8BfXQLyIy1nsxlyiQ8JFkrYh9lA4kktY=
Subject key identifier:   4E:F5:DE:A3:81:76:C3:12:90:1A:42:E4:4F:21:8E:1E:B1:7E:FC:75
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer:       /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial:       0698
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number:          0698
Signing time:             Sat 24 Oct 2026 02:42:10 +0000
Manifest this update:     Sat 24 Oct 2026 02:42:09 +0000
Manifest next update:     Mon 26 Oct 2026 02:42:09 +0000
Files and hashes:         1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: UsprzHj0jBdvUFpyCBroCIrBUL+lRM8TrXvM8XhW6Ec=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1688 (0x698)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAF, serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
        Validity
            Not Before: Oct 24 02:42:09 2026 GMT
            Not After : Oct 26 02:42:09 2026 GMT
        Subject: CN=6adc1b01-d8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4c:f9:ee:4c:7e:46:50:57:17:03:65:8d:8e:
                    06:bd:31:f3:27:4a:0d:0e:4a:48:16:75:5b:0b:fc:
                    e9:e5:9c:5c:9f:73:cd:1f:e7:f1:df:61:c2:2b:ae:
                    09:20:43:a9:1d:9f:1f:17:fa:a4:8f:63:1e:34:28:
                    c1:31:58:fe:c5:b7:ab:e9:75:4b:40:af:7f:08:f1:
                    81:c1:4b:1e:81:45:e7:13:58:72:54:05:6c:22:f3:
                    56:7c:e2:f0:b6:21:72:b8:e0:46:2d:6c:38:93:c6:
                    09:d9:21:9b:27:93:ee:2c:56:71:8b:f8:eb:b1:99:
                    1b:06:0a:05:65:a5:36:d1:6e:41:40:a8:8c:95:71:
                    42:41:9c:9e:07:0d:40:de:90:c6:a9:40:cb:4f:46:
                    8b:7d:47:ff:45:50:af:0a:34:fb:30:69:e5:8d:05:
                    4c:83:0c:f8:69:a1:82:13:97:27:bd:d1:45:9e:10:
                    90:04:e0:aa:0e:ad:5d:43:8a:86:6b:f4:81:2d:43:
                    59:ab:42:8d:5f:2a:dd:8c:4a:19:e9:30:68:cf:ee:
                    7f:6f:7e:e5:0d:7e:97:80:4b:ca:25:0c:68:8f:ae:
                    08:dd:23:06:5e:95:dc:cf:0b:8f:52:b3:a5:b9:99:
                    2d:82:8e:3e:77:63:25:06:f7:83:38:c1:98:33:aa:
                    9f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:F5:DE:A3:81:76:C3:12:90:1A:42:E4:4F:21:8E:1E:B1:7E:FC:75
            X509v3 Authority Key Identifier:
                keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:45:95:d5:8c:3e:e2:48:b6:6d:96:5b:ef:77:00:fe:94:fa:
         15:0f:c1:bb:6b:11:22:fc:9d:19:93:4b:da:c4:df:0d:b3:7b:
         0d:52:12:70:7f:bd:2e:0f:8e:18:31:3c:1f:86:b8:77:85:6a:
         00:30:72:8a:3d:69:d8:7f:37:8f:09:b5:c6:cf:e6:09:61:2b:
         14:d9:5d:29:99:c1:54:45:78:37:f8:ea:90:ff:a9:62:b7:11:
         57:63:24:a1:45:b1:47:f3:ab:a6:c1:ef:4f:4b:1f:d9:9d:e1:
         7e:47:f5:6f:2e:fa:f4:1b:ce:54:6d:94:b4:3d:cb:82:62:da:
         a7:8c:fc:a0:03:06:91:c2:94:6c:38:07:1a:c5:dc:22:c9:01:
         87:b7:b6:92:ac:a0:2b:64:97:ab:40:0e:c7:2b:f5:c2:a9:35:
         25:34:b7:87:42:b8:78:85:58:1b:39:53:0a:33:a6:54:23:03:
         c0:7a:17:2f:00:5d:f1:c8:2a:fe:92:69:71:66:2b:92:8c:7d:
         61:cd:09:e6:f7:25:9d:3b:72:02:96:f6:18:c5:50:62:ec:74:
         6b:8e:f7:63:30:d2:1b:f8:db:aa:68:90:4a:c2:2a:fc:d4:df:
         f2:ba:60:b8:b4:df:ed:6c:c6:ec:09:f0:70:d4:94:74:5d:60:
         20:bf:03:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----