Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
File:                     5_z-A6OF76F0KyB_rsnT3GwDl50.mft (raw, json)
Hash identifier:          1PyEPPbAU9dpAm9mfU7mOBajjLPo6+otg0FGFio7dYU=
Subject key identifier:   6C:5F:79:46:B3:D7:F0:71:F0:01:6E:A7:02:A2:74:32:D4:11:05:FF
Authority key identifier: E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D
Certificate issuer:       /CN=F3646DCFAF/serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
Certificate serial:       0FEF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
Manifest number:          0FED
Signing time:             Tue 06 Oct 2026 00:58:07 +0000
Manifest this update:     Tue 06 Oct 2026 00:58:06 +0000
Manifest next update:     Thu 08 Oct 2026 00:58:06 +0000
Files and hashes:         1: 5_z-A6OF76F0KyB_rsnT3GwDl50.crl (hash: LIxjT4xB4rSHLF2JewcGeRfcwy6070EfZH7G+On5EAA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 00:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4079 (0xfef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646DCFAF, serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
        Validity
            Not Before: Oct  6 00:58:06 2026 GMT
            Not After : Oct  8 00:58:06 2026 GMT
        Subject: CN=6ac4479f-800b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:eb:57:85:e6:50:91:9f:4c:69:e3:18:aa:
                    a9:83:1d:9a:76:23:51:b4:3e:48:e2:a0:d8:ce:9d:
                    09:94:94:59:ce:29:86:fd:d0:2d:c8:2c:6e:5a:b3:
                    c9:50:13:64:23:99:bb:ce:f3:2e:f2:75:29:e8:77:
                    b6:20:3e:01:9c:71:50:a0:c9:f6:78:87:a8:ef:94:
                    c6:38:fc:3d:ed:3d:12:6b:6f:ff:c7:25:c7:25:aa:
                    a7:17:e6:0c:aa:c8:e7:36:db:81:3c:7d:7d:eb:8c:
                    e1:e7:c1:3f:35:10:ff:da:ee:07:e4:00:b9:2f:4b:
                    c2:0c:17:e0:0c:f9:3f:5e:97:0b:4f:32:04:29:53:
                    ed:83:b3:cb:62:90:7f:96:7b:63:67:2c:99:f6:96:
                    fc:52:28:f2:60:ef:5a:ad:9a:17:e2:fe:a4:73:bd:
                    10:79:7b:0d:c7:8f:3f:27:43:81:d4:4d:a8:40:7c:
                    e8:39:9c:c3:0f:a5:c7:27:9c:72:b1:81:54:59:38:
                    c2:6b:20:2c:ff:cb:bc:99:eb:27:19:4c:6b:b0:7d:
                    08:47:91:3c:c8:cb:bb:f9:9a:b9:e6:6f:02:27:9b:
                    4a:49:29:8d:99:51:7d:3a:7f:b7:eb:1c:cb:ca:1d:
                    a4:0d:a4:cd:33:98:09:ba:ca:c4:29:27:7a:00:c9:
                    e3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5F:79:46:B3:D7:F0:71:F0:01:6E:A7:02:A2:74:32:D4:11:05:FF
            X509v3 Authority Key Identifier:
                keyid:E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:fd:1e:f9:4e:0f:5c:dd:06:64:e5:fc:60:85:c2:21:db:3a:
         d3:e9:23:ad:75:d9:33:c2:12:43:8e:54:84:33:93:8c:ff:a7:
         37:f7:ec:72:f9:78:66:83:47:f9:56:a7:e0:08:c9:46:4c:b8:
         c4:ed:5d:b5:44:46:b0:1e:1d:33:8c:9e:76:3b:0a:2b:09:9c:
         25:80:a4:44:48:e4:46:5d:f4:15:64:6a:84:fc:64:a3:e0:f2:
         c1:0f:ae:6b:3f:11:f4:8a:ec:4d:c8:33:ea:12:97:e1:52:b5:
         2f:19:b5:fc:ab:cb:62:85:6c:77:2b:20:b1:4d:7c:12:f5:db:
         f5:7f:d7:92:56:95:0a:9b:da:e0:95:2d:8d:a9:a7:43:21:75:
         b3:41:dc:a6:24:a3:a3:89:70:11:ef:7f:5a:b7:24:35:31:91:
         e1:9b:90:22:4f:60:d3:3a:24:de:0b:e6:ec:cf:b4:6f:ac:f2:
         f6:d7:b4:7f:2d:8a:30:64:d0:9b:c8:0b:e0:07:b6:4a:bd:ad:
         24:32:c0:61:ea:5d:7e:57:df:d2:e4:72:07:4b:f4:0e:88:8b:
         bc:7c:6c:b0:1f:8c:35:92:d1:ce:bc:54:5f:ea:63:17:44:27:
         30:9a:a1:b1:dc:97:7a:3e:57:f3:0c:19:77:cf:0e:74:97:d3:
         e2:f6:e6:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----