Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.mft
File:                     3-0dsxhpvczJZ7VA4i2wVkJULx0.mft (raw, json)
Hash identifier:          kp9nDv4wLo3VjuufsfuBEI/YVGvYUMIhexcQuQSjYfA=
Subject key identifier:   AC:83:0E:C8:D4:8D:BB:35:88:BE:34:6F:7A:4F:86:19:32:E5:8F:99
Authority key identifier: DF:ED:1D:B3:18:69:BD:CC:C9:67:B5:40:E2:2D:B0:56:42:54:2F:1D
Certificate issuer:       /CN=F365C741AF/serialNumber=DFED1DB31869BDCCC967B540E22DB05642542F1D
Certificate serial:       10A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.mft
Manifest number:          10A2
Signing time:             Wed 28 Oct 2026 00:50:44 +0000
Manifest this update:     Wed 28 Oct 2026 00:50:43 +0000
Manifest next update:     Fri 30 Oct 2026 00:50:43 +0000
Files and hashes:         1: 3-0dsxhpvczJZ7VA4i2wVkJULx0.crl (hash: iu6XGvmmTf82spzSPBZONTeRyiYgpgqS34OKzRHX/PY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4265 (0x10a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C741AF, serialNumber=DFED1DB31869BDCCC967B540E22DB05642542F1D
        Validity
            Not Before: Oct 28 00:50:43 2026 GMT
            Not After : Oct 30 00:50:43 2026 GMT
        Subject: CN=6ae146e4-999a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:67:5d:ef:d3:61:9c:8b:7b:db:18:a7:5c:59:
                    8d:95:53:46:60:f7:b8:86:e5:bd:c6:09:85:58:0b:
                    c0:42:cc:f6:79:98:f4:09:e7:f3:8c:ba:69:5b:27:
                    d4:bd:fc:ec:1a:e3:f4:54:e0:53:f4:95:30:60:6c:
                    fc:65:41:16:9f:b5:cf:ad:42:c1:9e:aa:3c:fc:3d:
                    7f:36:7d:9d:88:72:8f:0d:3b:8e:13:ec:c2:5f:43:
                    00:38:3d:cb:44:97:35:de:d3:8e:16:da:3a:e1:57:
                    04:ff:9f:f7:ca:a2:00:37:7f:67:9d:17:ff:f3:50:
                    a7:9e:4e:4f:45:1e:dd:37:11:45:db:6a:76:37:cc:
                    6b:b1:2d:86:e0:79:bb:f6:ba:30:22:f6:45:18:36:
                    f3:e3:ea:37:cc:98:fd:59:e6:2c:37:ee:f6:07:bf:
                    9a:1c:2f:0a:1f:56:0c:ba:f7:da:e8:44:06:16:4b:
                    f1:12:e1:9e:33:e5:02:50:90:32:5e:a9:29:f6:8a:
                    63:72:f1:d9:0b:93:ab:57:f8:8e:86:43:7e:71:7b:
                    49:9e:3f:9b:11:9f:e4:d2:80:91:98:a3:d4:a2:cd:
                    fb:84:4e:50:a6:ff:c8:6d:ce:66:00:a2:dc:10:59:
                    0e:8f:12:41:0d:69:47:17:22:a6:5b:0c:e8:30:a7:
                    a5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:83:0E:C8:D4:8D:BB:35:88:BE:34:6F:7A:4F:86:19:32:E5:8F:99
            X509v3 Authority Key Identifier:
                keyid:DF:ED:1D:B3:18:69:BD:CC:C9:67:B5:40:E2:2D:B0:56:42:54:2F:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3-0dsxhpvczJZ7VA4i2wVkJULx0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C741/BE173EB406BD11E588824D08F8AEA228/3-0dsxhpvczJZ7VA4i2wVkJULx0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:b9:9e:d0:63:18:7b:83:3d:6d:3e:ec:17:f9:08:aa:b8:d2:
         d7:64:07:94:d5:69:15:d3:70:8a:5e:86:01:bb:bc:39:8f:42:
         89:2d:b8:7f:5a:06:fa:e2:1e:69:84:25:0f:b5:ff:ec:10:d5:
         42:6c:3e:a8:3a:20:a0:ea:2b:7f:89:64:65:b3:81:30:d2:be:
         de:ac:12:3f:30:9f:1b:67:2a:c3:0f:d2:52:34:c5:d3:62:ff:
         45:c6:b8:23:f6:cb:3c:a7:88:22:2b:f1:14:63:2c:09:0e:47:
         79:6e:42:14:56:ab:61:26:97:7d:cb:eb:6c:a7:79:91:24:97:
         73:20:10:30:59:f2:ba:bc:df:e5:93:88:f8:ba:63:31:ed:f6:
         b1:69:93:3d:cc:47:25:04:25:64:51:aa:35:8d:90:50:cb:46:
         ae:99:8e:8a:c1:e5:1f:31:a2:22:1a:de:6b:89:94:28:88:85:
         ac:28:ae:74:11:2d:c2:6b:62:92:d7:3f:43:e2:fc:82:62:5a:
         47:1a:95:06:6c:4e:3a:57:0e:13:f7:bf:69:1d:6e:bf:68:7b:
         5f:4a:34:3a:a7:99:36:7d:c8:dd:a1:98:e8:77:79:65:e9:10:
         40:ef:86:fb:19:1f:cb:05:69:2f:a9:cf:50:23:ed:7f:87:8e:
         42:ae:05:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----