Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
File:                     XzgIgB6hYgLrL2fOP2WA29PCwuI.mft (raw, json)
Hash identifier:          IDmohQ5O9w6JW+jnLHIwRgTPJ1oEZd4yXo3DLgyC+rs=
Subject key identifier:   58:77:D2:FE:EF:7E:DF:06:88:AF:E3:E1:48:D9:A1:B4:95:62:7B:43
Authority key identifier: 5F:38:08:80:1E:A1:62:02:EB:2F:67:CE:3F:65:80:DB:D3:C2:C2:E2
Certificate issuer:       /CN=F3652A25AF/serialNumber=5F3808801EA16202EB2F67CE3F6580DBD3C2C2E2
Certificate serial:       59
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
Manifest number:          58
Signing time:             Tue 27 Oct 2026 05:47:07 +0000
Manifest this update:     Tue 27 Oct 2026 05:47:06 +0000
Manifest next update:     Thu 29 Oct 2026 05:47:06 +0000
Files and hashes:         1: XzgIgB6hYgLrL2fOP2WA29PCwuI.crl (hash: eJevLeZ/WeBw0cK0RmlQxdAQ70wqnGPW5go3QzVYiwM=)
                          2: B910CB028E6E11F1845A6602CF1D38B0.roa (hash: w0divEnGeKhPaNpp5pSAeh2v6YZz+bPKKZA6O6oQeAo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 05:47:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652A25AF, serialNumber=5F3808801EA16202EB2F67CE3F6580DBD3C2C2E2
        Validity
            Not Before: Oct 27 05:47:06 2026 GMT
            Not After : Oct 29 05:47:06 2026 GMT
        Subject: CN=6ae03adb-a88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7a:a9:23:2b:88:c0:1d:52:25:74:e9:00:b1:
                    e3:ec:86:da:a9:ff:eb:cb:35:59:cc:9e:16:21:87:
                    80:42:27:ad:7a:89:29:70:64:32:ec:3c:17:f8:59:
                    89:53:74:40:5c:be:fe:95:8b:bd:e8:e6:82:a0:36:
                    36:c5:7d:ed:f1:23:01:f9:ae:f9:04:c0:90:fa:a8:
                    ab:06:62:45:54:1d:07:43:3c:38:c1:9f:c4:d8:54:
                    ad:c8:a7:32:48:af:55:6d:85:97:be:48:05:75:37:
                    3f:31:a1:01:53:bb:56:62:78:44:36:84:4c:a7:67:
                    82:a1:af:ab:37:ec:e8:ef:b5:ec:d9:0a:4e:cc:69:
                    af:18:1d:23:4b:4c:42:02:c7:53:bc:d9:bf:3a:ed:
                    52:c8:ed:08:e6:9d:90:29:59:16:06:e3:b4:fc:1a:
                    27:75:57:5e:1c:8f:97:3c:dc:12:68:e9:57:32:55:
                    42:57:c2:41:d8:a7:df:3b:ca:1c:ea:5e:93:26:84:
                    a0:f9:6a:c0:e7:1b:25:75:86:22:b1:89:13:8a:85:
                    b2:24:34:1b:05:f4:c5:49:54:7b:ff:94:1f:8f:0f:
                    4d:29:59:83:2d:2b:79:1a:b6:21:f2:3e:3e:c3:95:
                    b6:ae:31:70:82:ce:dd:43:75:66:26:23:6f:60:68:
                    fe:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:77:D2:FE:EF:7E:DF:06:88:AF:E3:E1:48:D9:A1:B4:95:62:7B:43
            X509v3 Authority Key Identifier:
                keyid:5F:38:08:80:1E:A1:62:02:EB:2F:67:CE:3F:65:80:DB:D3:C2:C2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:65:74:9f:01:77:3e:97:a4:39:d8:0c:a7:2a:38:be:df:fd:
         53:14:ed:a4:70:30:b1:ef:75:e9:55:41:72:05:94:ea:c5:2f:
         fc:e0:1d:f7:2b:49:2d:88:df:ff:c5:6c:79:70:83:62:e9:fa:
         2c:5b:20:3c:ec:22:dd:37:5b:de:7a:8e:c9:9a:82:9f:8b:06:
         1a:55:94:64:12:f8:25:b8:77:6b:10:eb:5b:3e:ba:8d:64:c6:
         38:a2:bb:23:f9:32:81:f3:4e:1a:ae:0d:0a:c1:34:d5:4e:c1:
         df:d7:bd:80:18:2a:af:26:77:68:81:17:9d:23:81:fe:63:cc:
         5e:0c:97:f4:a0:b5:4a:69:31:38:21:31:bd:17:f1:60:2d:47:
         0b:fc:61:2d:e3:47:d1:7a:56:eb:4d:c7:72:2f:bb:85:9e:01:
         99:8c:aa:c7:7f:de:8e:35:8f:3d:15:0d:45:f0:bf:38:97:9f:
         86:b1:93:e9:db:5b:34:b2:f1:05:f5:e3:18:72:af:73:bb:c1:
         47:6c:60:43:56:e5:da:e3:25:ab:40:f1:0d:e3:f2:92:d8:b7:
         b9:24:a5:52:09:cc:88:6f:9b:49:ca:3b:c4:a3:1a:4e:a0:ae:
         57:c4:68:f7:ef:45:d0:1f:47:a6:9b:9f:58:f6:79:57:b2:49:
         b5:b9:e1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----