Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
File:                     HzhXx5DQI1940ThbDraTCwjzqOc.mft (raw, json)
Hash identifier:          A3gIFuoKVmDm9jSFikupz906HkoJUNO4tq8A9x36glw=
Subject key identifier:   72:28:8D:42:69:4A:78:3D:14:A2:56:07:D8:81:B2:07:30:DC:30:3B
Authority key identifier: 1F:38:57:C7:90:D0:23:5F:78:D1:38:5B:0E:B6:93:0B:08:F3:A8:E7
Certificate issuer:       /CN=F365D714AF/serialNumber=1F3857C790D0235F78D1385B0EB6930B08F3A8E7
Certificate serial:       E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
Manifest number:          E3
Signing time:             Mon 26 Oct 2026 05:32:48 +0000
Manifest this update:     Mon 26 Oct 2026 05:32:48 +0000
Manifest next update:     Wed 28 Oct 2026 05:32:48 +0000
Files and hashes:         1: HzhXx5DQI1940ThbDraTCwjzqOc.crl (hash: lkXMa9QCuCS8rrebDOXdh8nrQzEHvQBJG4efOhAffY4=)
                          2: 8F463D3227AF11F1930A44A7DAE4EC9C.roa (hash: olApEm5VDBpoyz8XFSGTWF+ZGrgDV6oxvgIY+GR8RDU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:32:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 228 (0xe4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365D714AF, serialNumber=1F3857C790D0235F78D1385B0EB6930B08F3A8E7
        Validity
            Not Before: Oct 26 05:32:48 2026 GMT
            Not After : Oct 28 05:32:48 2026 GMT
        Subject: CN=6adee600-0aa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fa:7e:89:14:39:0a:40:8a:40:5b:1f:0c:d6:
                    9a:d8:3d:ea:4b:89:3a:b3:76:60:61:2a:ee:ac:3f:
                    13:8c:49:44:92:9a:bb:09:50:f8:ef:f0:49:63:27:
                    8e:c7:34:32:25:7b:2d:13:bf:9e:b4:74:35:e5:bf:
                    d4:f5:c2:0c:24:c9:1f:95:fa:67:f3:31:ea:42:9d:
                    c2:59:78:bc:c6:70:15:d7:0f:0b:80:d3:7f:05:de:
                    85:d6:0e:dc:19:f6:b2:29:0f:d8:e8:c6:f9:b4:af:
                    ed:a8:19:93:a6:5c:92:f8:50:26:ca:ba:b4:6c:c9:
                    da:38:82:45:1f:b7:b2:83:e5:7d:2e:8d:52:23:ee:
                    5e:70:6e:71:c3:5a:05:00:96:10:7e:0f:b9:12:da:
                    c5:f4:2c:75:00:aa:47:59:dc:47:f1:d5:49:30:d4:
                    45:94:54:c1:da:c2:0e:09:65:18:e8:d0:9d:b6:75:
                    f6:9e:e4:c3:11:d4:67:63:8f:76:33:26:63:da:ee:
                    90:be:a8:65:04:cb:ee:dc:43:bc:83:81:cb:66:77:
                    62:de:98:b5:79:fe:f7:af:a3:7d:d9:18:bd:38:6c:
                    8c:7e:10:bd:e9:5c:a4:c9:b9:84:3e:fe:36:53:a3:
                    8c:58:83:4b:87:ce:79:28:8d:cd:e2:ef:e5:8a:9d:
                    e8:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:28:8D:42:69:4A:78:3D:14:A2:56:07:D8:81:B2:07:30:DC:30:3B
            X509v3 Authority Key Identifier:
                keyid:1F:38:57:C7:90:D0:23:5F:78:D1:38:5B:0E:B6:93:0B:08:F3:A8:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HzhXx5DQI1940ThbDraTCwjzqOc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365D714/52A01FC0222211F18D133DCBDAE4EC9C/HzhXx5DQI1940ThbDraTCwjzqOc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:df:75:06:02:9f:ca:7b:2e:37:05:4d:bb:8a:8b:99:2d:8c:
         78:0a:12:91:43:b3:40:4b:31:7e:55:1b:19:d8:ad:a7:4c:dc:
         9a:88:7d:25:9b:0a:bf:b1:c5:2c:74:26:eb:0d:e0:38:3c:1b:
         71:cc:26:5f:af:60:49:58:45:6d:4a:45:65:84:56:1b:fa:f8:
         a4:ac:7b:27:47:fd:81:cc:d3:c5:27:61:90:82:a6:7c:92:82:
         88:f8:20:c1:b8:30:b1:6c:9f:42:e1:b6:0d:92:f8:f8:bc:0e:
         ec:27:76:18:16:d1:c7:d9:7b:d0:e8:44:ab:d8:6b:35:27:87:
         eb:3e:fb:ab:eb:32:e6:69:90:2f:87:17:19:12:02:40:00:aa:
         73:94:53:18:76:5e:64:90:7a:65:38:b8:aa:5b:60:d2:04:8c:
         4c:e6:f4:36:30:ed:be:90:f3:55:92:90:ff:a0:1b:74:36:d8:
         65:06:80:23:97:a7:fb:02:c1:88:44:3e:fa:27:50:4e:12:71:
         49:15:46:d4:89:14:d1:0e:bf:0d:9e:36:05:7f:6d:d3:56:72:
         90:98:9a:74:42:79:03:fd:d6:8e:d5:e3:e2:80:96:a2:84:3f:
         ee:40:3b:ae:0f:23:54:db:84:b1:a7:85:b5:21:fe:29:3d:3e:
         3b:0e:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----