Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
File:                     ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft (raw, json)
Hash identifier:          g1KKARogL9MSzRNHcZ8zhTujpYhTEeh7KVJk9KG9vdI=
Subject key identifier:   05:72:14:FA:46:4C:9E:F3:5B:29:62:D0:E8:6F:E6:2C:47:7D:94:81
Authority key identifier: 66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D
Certificate issuer:       /CN=F364A0C9AF/serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
Certificate serial:       042A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
Manifest number:          0426
Signing time:             Mon 26 Oct 2026 03:56:41 +0000
Manifest this update:     Mon 26 Oct 2026 03:56:40 +0000
Manifest next update:     Wed 28 Oct 2026 03:56:40 +0000
Files and hashes:         1: ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl (hash: gYsh0XCqicpeMWO9ZpRW288nbYjWN8JREW/kRao81U0=)
                          2: 9C225EFAE57E11F0ACCF11ADDAE4EC9C.roa (hash: 52/RrDD53hRvIOj4m0Ki2aPwgfD+p2vQH2NitGDAjtw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:56:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1066 (0x42a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364A0C9AF, serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
        Validity
            Not Before: Oct 26 03:56:40 2026 GMT
            Not After : Oct 28 03:56:40 2026 GMT
        Subject: CN=6adecf79-e1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:35:e2:d7:40:7f:87:2a:5d:fd:66:ed:b9:a3:
                    84:f1:e9:d5:c4:36:d0:70:0a:0e:e7:a1:a4:ab:b1:
                    c9:15:01:bc:1b:6d:25:10:65:3a:f3:93:3a:a5:b5:
                    0e:29:7f:e2:b2:bd:0a:08:f3:7d:8b:ca:9f:09:05:
                    04:c7:cc:4b:60:24:e0:cc:ef:6d:3d:fe:52:7e:2d:
                    d6:f7:52:7f:a7:0e:ec:3b:c0:3d:d5:d5:b9:c2:41:
                    0b:e8:00:3e:00:1b:6e:0b:2e:26:f5:dd:b3:04:68:
                    5c:f9:38:91:9c:b2:28:c8:94:0e:d3:ff:84:ea:59:
                    28:cb:6a:c0:37:50:57:b6:85:a0:51:a2:c3:a7:44:
                    c6:97:bc:e2:e3:22:4a:05:9e:97:89:28:52:c7:7e:
                    9c:aa:41:36:15:64:c6:77:46:a7:3c:d7:16:75:c7:
                    ce:35:0b:22:f2:72:aa:12:15:2a:01:90:88:7f:35:
                    f1:59:a1:97:08:0a:8b:1e:05:7b:3e:bb:17:34:53:
                    c6:b3:86:58:e5:0b:9e:e2:01:48:53:d9:24:af:29:
                    35:b6:25:7a:32:d9:ac:33:90:1f:44:ff:11:04:2f:
                    b4:ef:bc:57:45:19:3d:0c:52:e2:94:80:72:9c:f8:
                    61:99:7b:b7:24:4c:16:e4:1b:ad:31:4c:a4:b5:e7:
                    cf:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:72:14:FA:46:4C:9E:F3:5B:29:62:D0:E8:6F:E6:2C:47:7D:94:81
            X509v3 Authority Key Identifier:
                keyid:66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:4a:07:3b:df:37:c0:7e:d1:60:97:bc:c3:69:08:73:a3:d6:
         cd:36:41:65:12:93:df:4f:6c:31:d2:f8:0d:06:59:23:54:07:
         6c:c0:77:ad:31:3e:f8:da:f7:d5:eb:f0:70:98:3d:42:0e:41:
         d5:73:c8:2c:c5:e4:65:0f:d8:dc:84:1d:2c:82:95:bd:c0:10:
         c3:07:30:d6:11:8c:38:ce:86:a8:22:52:70:1b:49:7c:b0:9f:
         f3:79:a9:c3:04:65:9f:7e:60:2c:f6:a6:64:6f:33:ec:ff:e8:
         fb:d3:db:54:17:0f:68:3b:86:05:d6:98:30:95:28:e6:3d:7c:
         a0:8b:93:d1:13:ff:f2:82:fc:62:4d:9d:5a:cf:fc:0b:91:30:
         da:00:9b:f9:33:29:50:75:e5:36:4e:01:2e:ce:48:b7:15:73:
         16:35:b6:ae:57:b7:0e:d9:ec:98:9f:77:76:27:92:cf:40:e0:
         eb:47:e0:e6:51:b5:38:96:80:46:f2:41:1b:08:6f:c6:80:91:
         8d:70:e6:18:b4:a3:76:a4:d8:8f:3a:66:e4:82:2d:15:b3:98:
         4c:ae:01:a7:ee:77:14:e2:ee:83:80:2a:26:86:7f:cd:7e:30:
         37:72:ba:93:fa:06:20:99:43:97:1e:ac:24:de:d1:dd:aa:b2:
         e6:55:14:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----