Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
File:                     tqq1AixPm4Kp_ukaPUxdheRtiR8.mft (raw, json)
Hash identifier:          hLO01189WLffiTBkLBcrAM2AsHX0EpZaQ7xUeJ1NUZw=
Subject key identifier:   DD:A7:C1:5A:37:D5:F0:B1:E8:01:67:B3:5F:01:39:F1:44:77:3D:0B
Authority key identifier: B6:AA:B5:02:2C:4F:9B:82:A9:FE:E9:1A:3D:4C:5D:85:E4:6D:89:1F
Certificate issuer:       /CN=F3644FCCAF/serialNumber=B6AAB5022C4F9B82A9FEE91A3D4C5D85E46D891F
Certificate serial:       0685
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
Manifest number:          0685
Signing time:             Sun 25 Oct 2026 02:42:57 +0000
Manifest this update:     Sun 25 Oct 2026 02:42:56 +0000
Manifest next update:     Tue 27 Oct 2026 02:42:56 +0000
Files and hashes:         1: tqq1AixPm4Kp_ukaPUxdheRtiR8.crl (hash: bJNE88anvsigU7kWAuszqAX7mjhK3sWM52FAmrVh2p0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1669 (0x685)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644FCCAF, serialNumber=B6AAB5022C4F9B82A9FEE91A3D4C5D85E46D891F
        Validity
            Not Before: Oct 25 02:42:56 2026 GMT
            Not After : Oct 27 02:42:56 2026 GMT
        Subject: CN=6add6cb1-5a95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ec:56:0f:e8:d3:3b:79:08:0f:e5:36:c1:5c:
                    0a:cf:33:f8:e3:2e:2f:05:02:5b:be:89:2b:80:6a:
                    11:25:d1:ad:06:fd:ac:53:f3:cb:6c:02:f6:80:20:
                    6c:e7:35:56:58:f4:df:51:26:6a:3d:ad:a0:17:3e:
                    ac:0f:02:e1:0f:a9:a2:94:68:f3:ee:81:94:8f:9f:
                    71:f3:f5:de:bc:e6:6e:c1:66:ab:cb:6f:d3:8e:0a:
                    ff:7f:56:09:cf:9b:24:ec:76:38:6c:a3:c7:9a:40:
                    45:6f:5f:4d:47:73:f3:35:fa:bc:f5:1b:0d:3d:2e:
                    49:f0:e2:12:8b:7c:be:b5:3d:62:aa:72:27:c7:fb:
                    d0:2f:01:26:4f:fd:47:cb:0f:42:33:ec:3c:e1:e6:
                    78:28:e1:67:db:9e:69:f5:ca:46:77:6f:87:96:7a:
                    b4:91:20:f5:86:1c:fb:b5:e3:51:9e:8b:b4:31:1f:
                    2e:0f:ff:ff:48:94:65:c1:18:96:cd:1b:fd:1e:6b:
                    f1:6f:97:85:7a:9e:97:41:f2:1a:50:b7:d3:58:ac:
                    8b:8a:02:7c:1a:e4:d3:f6:8b:8f:e7:3e:7e:ae:c1:
                    a8:95:15:82:42:b2:dd:7e:66:c2:1c:c6:6c:da:be:
                    3a:4a:91:c0:93:9e:5d:1c:49:dd:2e:cc:44:d5:f1:
                    e7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A7:C1:5A:37:D5:F0:B1:E8:01:67:B3:5F:01:39:F1:44:77:3D:0B
            X509v3 Authority Key Identifier:
                keyid:B6:AA:B5:02:2C:4F:9B:82:A9:FE:E9:1A:3D:4C:5D:85:E4:6D:89:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tqq1AixPm4Kp_ukaPUxdheRtiR8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644FCC/B140A4FCD12A11EC92B385EAF1222468/tqq1AixPm4Kp_ukaPUxdheRtiR8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:7c:93:cd:d2:05:22:59:fd:f1:55:ed:a2:61:ff:42:4b:07:
         8f:f3:91:ef:8c:ec:c3:e4:fc:00:99:92:04:8e:f0:51:17:bc:
         d5:43:e8:36:80:40:b8:88:96:33:e0:08:8f:48:e1:3e:9b:ed:
         14:64:29:9d:41:c3:3b:21:77:43:00:29:f1:b5:35:97:36:11:
         11:87:40:40:d3:a5:5b:8a:1c:a1:4d:59:32:e7:9b:8b:c3:a9:
         d4:b3:7b:ad:19:f5:d0:5d:3c:85:39:50:81:17:e0:66:50:14:
         8b:0a:1b:a4:d2:af:8b:6e:e3:da:46:3e:03:3d:80:be:7c:aa:
         66:08:40:8e:e5:a5:87:d3:06:eb:79:94:36:dd:6c:6d:38:80:
         3b:2c:6b:12:fc:91:5c:ad:39:f8:ed:f3:92:c2:40:ad:d5:44:
         1c:b7:e9:9d:2c:83:50:39:b7:79:6b:97:75:f1:a7:90:4a:47:
         98:16:f7:96:e9:77:f9:d6:f2:96:c2:7f:12:16:26:26:94:00:
         c6:2b:78:ea:1c:cb:91:bc:7b:23:eb:75:b6:e0:4c:ea:b8:6e:
         35:a5:3b:7b:d5:3b:0b:1e:39:a3:30:42:e1:8c:2a:4a:57:4e:
         31:7c:39:40:67:46:5e:58:9b:0f:5d:51:0b:52:a9:28:f8:2b:
         b7:cc:18:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----