Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
File:                     C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft (raw, json)
Hash identifier:          q4to6YUZ36LTJl9B9AvzWUUKtAKthDJkV+9CR9Q5HaI=
Subject key identifier:   19:C0:FF:43:53:B9:70:44:41:B5:AF:3C:DE:E1:C5:E2:72:C7:D8:DA
Authority key identifier: 0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
Certificate issuer:       /CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Certificate serial:       097D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
Manifest number:          0978
Signing time:             Sun 25 Oct 2026 01:48:04 +0000
Manifest this update:     Sun 25 Oct 2026 01:48:03 +0000
Manifest next update:     Tue 27 Oct 2026 01:48:03 +0000
Files and hashes:         1: C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl (hash: Q++aKyQaIte4V38hcUO15f/FbVBcs2sqD+kA66/JCVw=)
                          2: C69507C6303111F08DE721DEDAE4EC9C.roa (hash: n1LnT/xuX8ossK6e1Qu5ErVwbY8lo9OUKGVmWsM35RE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2429 (0x97d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645501AF, serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
        Validity
            Not Before: Oct 25 01:48:03 2026 GMT
            Not After : Oct 27 01:48:03 2026 GMT
        Subject: CN=6add5fd3-5d2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:49:04:89:76:a7:30:9d:8d:93:69:1c:2d:
                    c3:0c:b1:ad:5f:e1:ed:86:35:5b:cc:1a:fd:01:76:
                    67:95:bd:f2:aa:56:cf:b0:15:ba:3e:ff:89:14:ef:
                    c6:73:8e:62:f2:53:38:fc:43:d2:08:9a:87:2a:38:
                    b9:4d:37:81:b4:f5:e5:de:fa:fc:b6:07:c5:5b:a1:
                    5d:65:b9:28:d1:ee:23:09:1c:ff:85:53:b2:1e:09:
                    db:a6:c9:33:a1:65:02:37:0f:3b:10:87:73:08:83:
                    5b:0b:ca:3d:51:e8:22:71:03:a2:e7:79:8f:64:c4:
                    fd:75:62:a4:95:ce:3f:f3:18:d5:56:45:8b:1f:fe:
                    57:5d:bb:36:08:24:d9:6b:0b:ef:66:fe:43:25:05:
                    23:a5:ce:1f:ce:aa:90:f7:56:78:df:28:56:08:52:
                    2f:17:45:c0:07:46:6c:d0:ae:f0:9d:a9:00:d5:f8:
                    87:19:4a:8b:42:9e:0f:dd:86:4a:d3:8c:cf:a9:0c:
                    1b:a5:3d:d2:d4:97:c4:f6:1a:b8:8f:7f:ac:d3:d5:
                    71:af:f8:6d:92:d4:f5:ed:81:29:9c:fa:09:c4:2e:
                    97:2a:33:89:1b:93:19:71:d3:61:c1:af:ae:04:eb:
                    7e:5c:b1:1e:a9:07:3d:53:88:c2:ae:88:74:ae:78:
                    8f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C0:FF:43:53:B9:70:44:41:B5:AF:3C:DE:E1:C5:E2:72:C7:D8:DA
            X509v3 Authority Key Identifier:
                keyid:0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:57:70:82:13:11:a3:fd:6e:ce:0b:7c:c5:4e:d1:8b:df:19:
         ee:f1:51:bb:27:82:72:f5:d3:fe:4e:ba:2d:04:00:01:41:f2:
         e7:da:51:24:04:40:76:00:56:49:ec:c3:fb:91:e7:e9:68:9b:
         8d:f2:5a:a3:e9:3f:8c:7c:39:55:ae:69:6e:60:95:8f:93:ba:
         c9:42:7b:f4:0e:48:11:bf:d0:bf:f4:fb:e4:c8:50:36:56:15:
         6b:2a:96:a3:97:e2:98:90:58:aa:f6:b7:b9:8d:c6:e0:c2:be:
         2e:b5:ce:3e:8a:66:c8:ec:c0:48:58:df:1f:a6:1a:f2:53:f6:
         3c:8d:6c:9e:00:cd:1c:01:bb:d9:29:87:45:d2:c1:92:9a:b8:
         5b:5e:6e:b4:40:9f:be:e2:d4:2e:93:86:67:d8:6c:ec:0f:cc:
         67:34:f9:80:cc:81:ee:17:67:06:10:86:f5:70:d7:dc:95:19:
         d6:6d:68:1e:81:d6:e1:a6:28:a7:2f:cd:0b:46:c8:f8:a6:6d:
         e2:d4:37:88:4e:6f:97:5e:f4:05:81:43:a3:34:e4:cb:d5:b7:
         e5:e8:82:b1:df:6a:a5:1b:0d:84:4f:e4:f8:f6:7f:9c:88:1f:
         a8:1f:1c:bd:0a:ff:d1:06:24:36:04:3f:ee:ef:b1:98:fb:01:
         da:16:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----