Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
File:                     rhXmNVsISpProhxKndYbzcJYtZ4.mft (raw, json)
Hash identifier:          6VJvt268W5XpT8b5p4oVVXZcFc1bZpcFUN/U5oige/g=
Subject key identifier:   F9:BF:7E:20:E5:3A:01:96:6C:B6:C0:93:69:2A:BB:D6:51:C1:8B:6A
Authority key identifier: AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E
Certificate issuer:       /CN=F3660C14AF/serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
Certificate serial:       0AB1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
Manifest number:          0AB0
Signing time:             Sun 25 Oct 2026 01:31:06 +0000
Manifest this update:     Sun 25 Oct 2026 01:31:06 +0000
Manifest next update:     Tue 27 Oct 2026 01:31:06 +0000
Files and hashes:         1: rhXmNVsISpProhxKndYbzcJYtZ4.crl (hash: M3rh+1rcrqs8LYBQ3aRyclUOCtHyN7z6Q92+JiVd+hg=)
                          2: DCDB716EC70211F18B94BAF4CE1D38B0.roa (hash: htT7zWMtp8uSchpzNVXzyCa76G20cDyHx0yo4DSF5eA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2737 (0xab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3660C14AF, serialNumber=AE15E6355B084A93EBA21C4A9DD61BCDC258B59E
        Validity
            Not Before: Oct 25 01:31:06 2026 GMT
            Not After : Oct 27 01:31:06 2026 GMT
        Subject: CN=6add5bda-6731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:16:b5:fc:6b:b2:18:c9:57:49:f3:e2:15:
                    cb:b0:73:92:3b:96:02:57:8e:f1:02:74:ea:47:0f:
                    f5:3a:7d:e5:0b:15:59:e6:c1:e3:33:b2:32:72:2b:
                    e1:78:d4:ef:04:24:9b:41:f8:c3:a8:83:81:b3:0d:
                    11:2d:74:30:2a:c0:fc:35:7c:8b:d2:7a:f6:60:93:
                    6b:db:62:3d:bc:0d:97:89:e8:d9:59:41:5f:1d:83:
                    5c:a6:ff:f8:8a:42:87:11:15:b1:ae:b8:aa:38:81:
                    b0:e1:ce:af:e3:38:d6:56:41:76:bd:e4:bf:41:85:
                    64:91:a9:8d:0e:0a:15:58:5d:cb:22:ab:bf:6c:99:
                    b0:99:f4:65:f0:f5:9e:d9:b0:20:7d:b3:5e:0d:27:
                    2b:d8:0f:19:e4:6b:ae:c6:a1:c0:97:73:0f:21:4b:
                    1d:3f:13:1d:60:36:47:a8:a9:3e:2b:1b:3a:da:85:
                    0c:46:e2:27:4a:64:c8:8f:0b:2b:23:ba:8d:9a:e0:
                    57:02:0c:25:80:c5:59:5e:f8:52:f6:c6:a7:09:e3:
                    c0:3f:3e:da:39:eb:91:16:a6:ea:32:7a:c6:08:ee:
                    ab:48:07:c8:13:59:cd:36:94:87:95:24:0f:58:92:
                    f8:bc:8b:32:ff:71:64:65:7c:c5:bc:73:9c:06:6d:
                    eb:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:BF:7E:20:E5:3A:01:96:6C:B6:C0:93:69:2A:BB:D6:51:C1:8B:6A
            X509v3 Authority Key Identifier:
                keyid:AE:15:E6:35:5B:08:4A:93:EB:A2:1C:4A:9D:D6:1B:CD:C2:58:B5:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhXmNVsISpProhxKndYbzcJYtZ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3660C14/CAD5F3629BFA11E9B1BFC179F8AEA228/rhXmNVsISpProhxKndYbzcJYtZ4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:17:30:85:44:2d:cf:19:25:47:f7:34:8f:e9:7a:a6:d2:d2:
         85:ad:64:5f:53:05:be:7e:9c:ce:0c:c4:61:a2:b6:c5:25:57:
         43:78:52:34:b2:66:92:10:cf:84:b7:b3:e7:7a:85:1d:31:e6:
         d8:89:20:14:5d:fc:00:bc:88:42:8f:0b:29:13:6d:53:45:ca:
         63:d3:5f:2b:67:93:9e:31:ee:35:3c:c6:ef:5e:c6:a7:df:9a:
         f5:71:4f:46:7f:7d:82:27:20:66:e6:84:ac:e3:a4:83:1b:ea:
         9e:cb:7f:7c:f2:04:85:a7:35:a0:0a:b7:0e:23:68:88:84:74:
         80:e5:bc:7e:d2:30:12:90:3b:16:57:89:52:6c:84:e1:a3:6d:
         25:2d:2d:46:42:e6:26:6a:e1:fb:26:86:78:ac:8f:0c:16:c7:
         5a:6a:32:81:d3:2c:b6:3a:ff:0e:90:a7:5a:07:77:3a:50:93:
         c7:2c:b3:df:1a:96:88:f5:16:b5:f6:ac:3b:e3:ae:05:ea:35:
         6d:e9:46:43:dd:ce:61:5e:57:00:42:a2:ac:1c:ff:09:94:5c:
         2c:d0:e9:34:e1:ae:1e:4a:2a:9f:e9:af:bf:6e:d6:32:6d:6b:
         bd:9b:45:01:d1:83:74:e9:d3:be:09:27:5f:7b:ed:41:04:f8:
         b6:c0:b9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----