Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
File:                     -_THz17IYtQtyBCgQwAhG6K3xQg.mft (raw, json)
Hash identifier:          gLXtr5DhuvyHdGkC3nD6VLEVR+v1aLoFSCwCtTW9qyc=
Subject key identifier:   BF:F2:26:BE:CB:86:8A:02:B5:1B:2D:91:57:57:BA:6E:45:3C:4B:0E
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Certificate issuer:       /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial:       0343
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
Manifest number:          0341
Signing time:             Sun 25 Oct 2026 04:21:37 +0000
Manifest this update:     Sun 25 Oct 2026 04:21:37 +0000
Manifest next update:     Tue 27 Oct 2026 04:21:37 +0000
Files and hashes:         1: -_THz17IYtQtyBCgQwAhG6K3xQg.crl (hash: 04aOSr0+tLkConkz4I7P/y3VVtK+UItW74J/HqpDCtc=)
                          2: 77F1FD96F30311F0BB59B0B2DAE4EC9C.roa (hash: 27JN0a34HOJqzg6BUQSCN5NuMTh9XjW2kVc8l5WoK4A=)
                          3: CB2EDEFCF30311F09BBA82B6DAE4EC9C.roa (hash: ByzttdB9J3NGHz1Z3lKqffInl1ohB/rmI07GuVpfCBk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 04:21:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 835 (0x343)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658583AF, serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
        Validity
            Not Before: Oct 25 04:21:37 2026 GMT
            Not After : Oct 27 04:21:37 2026 GMT
        Subject: CN=6add83d1-2549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cc:57:4f:9f:9d:52:1d:be:36:a9:c1:51:c7:
                    53:19:4f:7d:af:45:55:da:fd:83:d0:19:9b:b5:fa:
                    cc:af:e9:ff:05:ab:fb:12:fc:e7:8e:99:35:4c:cb:
                    1a:b6:68:61:c7:c0:f6:69:85:f0:03:e0:58:d3:c6:
                    3a:ad:08:f7:44:10:82:20:67:55:47:30:73:e8:af:
                    c9:f5:02:56:22:b8:5d:95:96:0e:75:86:17:0d:63:
                    c3:97:47:d7:24:3f:d2:d9:0d:b5:34:f0:b5:92:46:
                    5b:5f:e3:b2:48:1a:89:e1:30:87:53:15:39:ca:ef:
                    8b:2b:c7:b1:ac:7c:40:9d:d8:94:d9:33:17:17:69:
                    51:c2:7d:ad:68:44:6c:94:ab:46:7c:f7:f0:18:a9:
                    b1:3b:a7:e9:b0:36:62:05:51:90:2e:9c:ad:69:d3:
                    bc:d5:1f:9e:5e:a0:0a:e1:71:f9:f7:66:90:e6:a2:
                    41:e0:c2:63:cb:3c:b7:04:0b:2e:76:f4:24:b0:a9:
                    70:03:cb:a7:9a:9b:5d:83:f3:d5:83:d8:5b:9f:f6:
                    9a:82:ba:35:e4:ef:72:21:f1:6f:41:d1:63:97:61:
                    da:7f:5b:98:c8:6f:fb:1c:a1:3b:db:68:18:4f:f0:
                    3e:83:c4:57:f4:38:37:98:43:bf:f5:11:32:98:5a:
                    48:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:F2:26:BE:CB:86:8A:02:B5:1B:2D:91:57:57:BA:6E:45:3C:4B:0E
            X509v3 Authority Key Identifier:
                keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:0e:ef:2e:a4:d4:33:56:91:9d:20:2b:3e:94:44:0e:63:
         34:40:60:07:1c:fd:c8:fa:40:34:31:18:da:52:b6:67:40:54:
         1e:11:f2:8e:41:9b:a7:b1:19:e3:3c:bb:3e:a3:87:68:35:f2:
         bd:9a:f9:92:3d:95:d6:82:bb:3c:07:2a:f3:14:72:a5:c0:69:
         42:ec:65:92:be:ec:7f:e7:1c:bc:ed:1a:a6:21:b3:2a:11:21:
         c1:2e:8b:06:32:b8:bd:45:f2:9b:dd:e3:2a:9b:3c:9a:1f:f3:
         7d:e8:8f:ee:7f:ef:04:86:b0:17:15:17:50:91:0b:26:08:e9:
         39:3e:05:be:1b:d0:27:9c:99:13:f6:e6:d5:96:3e:97:dd:fa:
         53:34:c8:38:fa:44:15:86:4d:6f:e3:ba:d1:9b:35:02:50:8c:
         f3:83:71:14:67:dc:0b:bb:8b:a8:fd:5f:be:12:7e:a4:c9:0c:
         33:11:b9:f6:a6:b1:30:0c:22:b3:be:49:7f:76:5c:58:a1:38:
         dd:1e:94:ee:28:9b:19:9a:d9:5d:20:35:bc:52:0f:ca:6b:07:
         1e:5e:02:64:df:c1:59:54:81:ed:f7:d6:0f:3f:65:c4:ae:59:
         aa:d6:90:ad:4c:67:b7:e8:be:85:37:2b:d4:01:bd:d8:09:84:
         a4:4d:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----