Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
File:                     M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft (raw, json)
Hash identifier:          7OuEErjOXVOd0DX2FwN1pKb8Gr7d9wIFZDFPxAHQKvQ=
Subject key identifier:   5B:C2:CE:3D:87:F9:9B:A8:FE:C1:A3:8C:A8:94:63:1E:75:5D:AA:86
Authority key identifier: 33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F
Certificate issuer:       /CN=F366828BAF/serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
Certificate serial:       0918
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
Manifest number:          0917
Signing time:             Sat 24 Oct 2026 01:53:34 +0000
Manifest this update:     Sat 24 Oct 2026 01:53:33 +0000
Manifest next update:     Mon 26 Oct 2026 01:53:33 +0000
Files and hashes:         1: M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl (hash: rTAGKmy1pQqk5QpdmMLYShPPdvZUUbO78JVz/8EiV08=)
                          2: 60006F6A915A11F185393ABFCE1D38B0.roa (hash: goRWL6CGAmpfbIqL0VB3VYBWqJMfEgGDMqheOF6UqTM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2328 (0x918)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366828BAF, serialNumber=33D38C4411A488581697F61DBF5FB4FD358D821F
        Validity
            Not Before: Oct 24 01:53:33 2026 GMT
            Not After : Oct 26 01:53:33 2026 GMT
        Subject: CN=6adc0f9e-b8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f9:32:bc:32:8d:ff:2c:f5:28:67:61:97:6f:
                    ee:de:2b:c2:b9:90:15:e0:b7:4e:9f:08:d7:fa:c9:
                    dd:24:e0:2d:f1:86:2f:95:dc:0f:46:45:b9:c4:fa:
                    13:fe:f6:17:20:f2:12:34:45:92:63:70:05:e9:7d:
                    50:5f:84:50:fe:58:61:60:65:e3:05:21:7b:26:b0:
                    f6:97:96:81:b7:c4:e3:97:fa:32:96:5f:59:8f:dc:
                    92:f3:2d:1f:62:61:ba:cb:0f:e8:ac:51:70:6f:8f:
                    67:a8:57:a4:7b:97:5d:35:cc:dc:c5:53:aa:d5:52:
                    5b:68:7a:4e:25:2e:d6:3f:5a:35:50:2f:64:cd:63:
                    67:a7:66:43:0d:c7:3d:70:0a:52:aa:b5:92:b6:16:
                    0e:81:4f:5b:62:e1:89:6e:83:fc:a1:ef:62:7f:7a:
                    a1:60:39:00:d5:1e:40:6f:94:4e:8f:ad:2d:74:c0:
                    3c:0b:fc:34:da:d8:eb:bd:2c:86:13:86:bf:42:35:
                    f8:16:40:3c:15:63:22:dc:39:d0:c9:6e:b3:7c:6f:
                    ac:71:7f:df:ea:2f:81:96:c2:7f:5f:1c:e1:60:53:
                    e1:9d:70:13:31:11:e0:d9:dd:1b:c2:92:bc:eb:af:
                    55:fa:5d:1e:11:d1:95:52:85:fc:ff:39:b8:8a:f5:
                    9d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C2:CE:3D:87:F9:9B:A8:FE:C1:A3:8C:A8:94:63:1E:75:5D:AA:86
            X509v3 Authority Key Identifier:
                keyid:33:D3:8C:44:11:A4:88:58:16:97:F6:1D:BF:5F:B4:FD:35:8D:82:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366828B/4A0C87A2D30111EAB14F613CF8AEA228/M9OMRBGkiFgWl_Ydv1-0_TWNgh8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:25:cf:18:32:bb:08:47:b4:ac:48:3e:ff:0a:da:be:b1:80:
         12:4f:c5:13:60:2f:6a:9a:df:66:d7:6f:46:c0:e5:b1:e8:24:
         e6:05:64:73:dc:d4:f2:89:59:cb:63:93:bd:0d:39:c6:3f:95:
         6c:e5:01:11:13:6d:cf:e0:ad:2c:18:58:c4:2e:ce:e4:bd:f2:
         11:99:0e:5c:d2:98:49:dd:f2:94:2b:77:f7:89:65:02:b9:a6:
         e2:4e:d6:0d:cd:eb:9e:57:3c:f4:d3:54:cf:52:6b:c5:86:49:
         e4:d0:06:b7:71:ba:64:14:17:04:94:6a:c4:cd:02:54:d8:1b:
         ab:b2:b6:11:ed:fd:c3:66:fa:d6:0d:32:a7:e3:6c:8a:78:d7:
         e6:2f:82:ed:66:2f:f8:78:95:35:c7:21:ab:7a:53:f8:18:90:
         99:3b:24:df:5d:39:ad:37:6d:b2:a5:15:94:c7:8c:d8:b2:4f:
         ff:a7:3b:ac:52:08:48:b9:85:3a:06:da:7a:2b:af:e3:06:08:
         e2:27:04:d5:96:7d:e9:3d:bf:41:33:26:5a:48:65:75:e0:3e:
         5e:c3:d0:c7:5a:6e:83:14:e0:0f:19:53:b0:df:c0:3f:12:68:
         fc:5f:27:86:39:21:23:6f:0f:3a:4a:63:69:06:f0:ba:b8:7a:
         eb:94:c8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----