Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
File:                     A-IO7xUFA6CxlRGK6Idof1pCecI.mft (raw, json)
Hash identifier:          vPUlw35CwT6rQSLEnMoSUivo2KVciixEUu/y+troU1k=
Subject key identifier:   50:18:1A:29:47:7C:ED:C8:2D:BD:22:08:E9:AE:EA:D3:22:54:20:58
Authority key identifier: 03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2
Certificate issuer:       /CN=F3654397AF/serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
Certificate serial:       0659
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
Manifest number:          0643
Signing time:             Thu 22 Oct 2026 02:54:35 +0000
Manifest this update:     Thu 22 Oct 2026 02:54:34 +0000
Manifest next update:     Sat 24 Oct 2026 02:54:34 +0000
Files and hashes:         1: A-IO7xUFA6CxlRGK6Idof1pCecI.crl (hash: uGdO4Mz6e2b2zIYBYprrvOOGR+5V/1f80+9VX0fYjoQ=)
                          2: 31A1A204ADF911F19714F7DCCE1D38B0.roa (hash: XD7YArUzQvb4NYRZII5G1y7Bf9VhaiGbaYAymCOGtmY=)
                          3: C2D8A386ADF311F180B3D6BBCE1D38B0.roa (hash: +quuyWeNpBBc0KHUfp1CaDC7Ur1yFOArKapGxWjcOBA=)
                          4: 0AC40528ADF411F1ABEB76BFCE1D38B0.roa (hash: w87n18ULPadsOUYXqoJVNpf3Ux7VMCFOBiYRq5proH8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 24 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654397AF, serialNumber=03E20EEF150503A0B195118AE887687F5A4279C2
        Validity
            Not Before: Oct 22 02:54:34 2026 GMT
            Not After : Oct 24 02:54:34 2026 GMT
        Subject: CN=6ad97aeb-9478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d6:d5:ca:74:b8:a5:15:da:20:3f:1d:5d:3a:
                    9f:d3:ae:d4:3d:a6:39:05:57:40:ce:90:5a:e6:0f:
                    06:a8:aa:b4:64:e0:25:03:a2:43:70:c7:3a:d2:2a:
                    f2:dd:57:0e:94:de:32:7c:15:fc:f5:ec:15:f9:ad:
                    04:26:c7:3b:e7:c8:d8:61:d1:e4:ec:0f:fa:5d:10:
                    f2:4a:d1:f9:e7:1b:e9:c1:a5:d9:37:75:87:90:ff:
                    07:98:92:8b:66:73:3f:4c:4f:c1:47:71:0d:98:8e:
                    6b:88:fc:43:b8:93:4b:ee:09:0a:94:f7:53:7e:a8:
                    bb:77:00:ad:a7:13:84:e1:9f:27:73:b2:d3:1c:0a:
                    86:41:ae:e4:10:97:c0:c8:e9:42:91:15:1a:a6:c0:
                    cd:f3:1f:a7:7a:23:2d:50:09:54:32:d0:e9:16:c7:
                    9b:65:5e:a4:e9:eb:d4:3f:01:3f:3d:91:8e:2c:dd:
                    19:93:72:ca:60:a6:6c:bc:44:de:65:15:8b:2a:70:
                    ee:ba:49:ce:00:a5:02:db:19:39:e5:37:ca:b9:4e:
                    95:31:e8:a8:78:f3:51:8b:b5:98:89:d6:d6:27:ef:
                    a0:5c:bf:5e:bb:d2:59:a6:49:74:7b:38:19:2e:d1:
                    e1:90:13:76:c1:62:82:5c:9a:b5:69:1e:0e:62:2f:
                    89:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:18:1A:29:47:7C:ED:C8:2D:BD:22:08:E9:AE:EA:D3:22:54:20:58
            X509v3 Authority Key Identifier:
                keyid:03:E2:0E:EF:15:05:03:A0:B1:95:11:8A:E8:87:68:7F:5A:42:79:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A-IO7xUFA6CxlRGK6Idof1pCecI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654397/8D7B31801F9611ED8233F28CF1222468/A-IO7xUFA6CxlRGK6Idof1pCecI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ff:c6:72:5c:af:b0:ce:fb:39:6f:2a:67:44:92:2e:f8:88:
         80:15:28:5f:54:2d:95:0f:b2:33:63:49:40:20:9c:01:0d:1d:
         56:8c:a4:7b:7a:fd:19:22:27:b4:ca:39:9b:fa:a7:8e:ab:c1:
         08:29:8d:11:b1:62:05:8c:33:83:92:fe:00:77:b5:46:58:0d:
         e0:c6:9f:9f:e8:42:74:32:90:1e:0e:51:7a:dd:ef:4c:5a:16:
         d8:2d:51:96:71:1a:3d:87:eb:67:69:38:39:c9:5b:28:d4:15:
         3c:4d:38:c0:81:47:37:4e:97:ca:0f:b3:fd:bd:4c:27:c2:da:
         8d:d5:52:6a:66:57:1e:4c:0d:5b:34:f2:65:62:16:ef:a0:fd:
         61:20:8d:77:4b:9b:cc:c6:3a:38:3e:f7:c2:4b:60:bc:ac:0a:
         95:57:3f:fe:42:df:65:82:d0:64:b4:48:ac:1c:0e:08:af:6e:
         a9:86:97:0d:6d:a8:98:74:94:8a:22:e1:50:33:b7:35:6e:d5:
         52:65:20:10:36:c4:4c:c7:f4:b8:a8:9d:12:a6:ea:8f:a1:22:
         b1:ff:73:60:eb:50:e3:b0:f9:37:97:55:c1:99:e4:13:90:2a:
         aa:c6:be:74:90:74:8e:2a:78:d9:e5:8a:34:95:a0:ae:4a:d3:
         4b:fc:07:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----