Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.mft
File:                     byK7yHoPCEoE5IiukfRuyIoPtrs.mft (raw, json)
Hash identifier:          xacxJdqNFnmYESRK+NKc3v2ALVbTU4LAt2KHhX4V2Bc=
Subject key identifier:   56:3F:D2:7C:D5:92:FE:70:89:BF:0E:F0:04:EA:92:DC:74:82:28:59
Authority key identifier: 6F:22:BB:C8:7A:0F:08:4A:04:E4:88:AE:91:F4:6E:C8:8A:0F:B6:BB
Certificate issuer:       /CN=F36709EDAF/serialNumber=6F22BBC87A0F084A04E488AE91F46EC88A0FB6BB
Certificate serial:       041D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/byK7yHoPCEoE5IiukfRuyIoPtrs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.mft
Manifest number:          041A
Signing time:             Sun 25 Oct 2026 03:55:53 +0000
Manifest this update:     Sun 25 Oct 2026 03:55:53 +0000
Manifest next update:     Tue 27 Oct 2026 03:55:53 +0000
Files and hashes:         1: byK7yHoPCEoE5IiukfRuyIoPtrs.crl (hash: w+3qmN371JO+C79s9vtblrnaeThOBmV4Q2eJQoltaSU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/byK7yHoPCEoE5IiukfRuyIoPtrs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 03:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1053 (0x41d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36709EDAF, serialNumber=6F22BBC87A0F084A04E488AE91F46EC88A0FB6BB
        Validity
            Not Before: Oct 25 03:55:53 2026 GMT
            Not After : Oct 27 03:55:53 2026 GMT
        Subject: CN=6add7dc9-48f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:b5:3d:59:66:93:e7:be:9e:b3:88:40:04:
                    b1:6a:e3:05:05:72:b5:5e:5f:a2:37:69:10:e1:8a:
                    53:5c:3c:6b:40:41:7f:61:ef:aa:29:1d:cd:71:2d:
                    b1:45:b9:e9:cc:24:21:17:8c:ed:88:4a:5d:df:d0:
                    94:f7:8c:db:c5:83:bb:83:0f:6d:64:c0:5f:02:9b:
                    f2:15:ed:de:43:18:2d:bf:b6:fc:a6:91:3d:b8:a9:
                    97:eb:fe:db:58:ab:32:ed:70:c1:d8:be:fb:10:16:
                    24:5b:33:33:8a:51:7b:fc:36:8d:cc:55:ce:9d:65:
                    ea:41:6d:ea:72:53:57:d0:3d:bb:af:eb:6b:54:5c:
                    19:fd:2a:d0:d6:ed:ce:3b:3d:83:8f:76:ab:e6:41:
                    29:e1:a5:7f:99:71:a4:6e:98:26:fd:92:14:b5:93:
                    45:f1:53:b7:ad:8b:86:54:f3:ad:e7:97:e3:df:cc:
                    16:62:b3:c9:a9:fa:0d:26:99:54:67:9b:a1:ed:76:
                    bb:ce:84:4e:8b:40:9a:ad:bc:6e:e7:3d:c7:c0:df:
                    62:1f:9e:b0:d3:d7:cb:2b:f6:f0:7e:1b:a8:87:8a:
                    99:0b:55:d8:40:61:c6:d0:3c:32:28:da:d2:9f:e0:
                    51:26:a1:6c:c5:fe:6d:20:46:fd:dc:77:58:7b:2b:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:3F:D2:7C:D5:92:FE:70:89:BF:0E:F0:04:EA:92:DC:74:82:28:59
            X509v3 Authority Key Identifier:
                keyid:6F:22:BB:C8:7A:0F:08:4A:04:E4:88:AE:91:F4:6E:C8:8A:0F:B6:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/byK7yHoPCEoE5IiukfRuyIoPtrs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36709ED/978FB7C6A97011EEB936A996775412E6/byK7yHoPCEoE5IiukfRuyIoPtrs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:87:b2:f6:a3:b9:65:e1:0c:54:60:04:d1:d2:7b:58:5f:25:
         e8:39:32:84:81:f9:7e:31:0b:97:c2:5b:58:85:9f:19:f5:8b:
         07:6a:da:19:de:48:7c:b2:15:c3:8b:a5:4d:c5:c4:df:c2:0b:
         fd:27:b5:21:6f:fc:f7:4c:87:f7:ec:e1:35:d7:27:89:bb:43:
         b1:9e:c0:8c:b6:80:3f:d2:1c:be:91:6e:cb:34:23:8d:fa:5c:
         d2:b9:e2:60:61:8a:14:bf:d2:e3:42:5a:7e:ed:72:c0:d2:c7:
         20:fa:fd:ee:40:83:f6:43:42:9d:35:55:c5:e5:4a:12:0d:ee:
         6c:94:bb:f9:e3:0a:6c:56:0d:44:a1:54:12:de:18:97:7b:79:
         a4:0b:19:61:2d:9f:52:73:57:02:c2:53:31:35:ad:df:c0:2d:
         04:89:e4:e3:ce:3a:13:da:6f:39:47:94:cd:85:45:ef:24:bf:
         bd:18:1a:e3:56:0c:f8:f5:8d:78:d9:80:3d:6c:16:13:4b:9a:
         5e:f9:e6:3c:de:e8:8f:a8:77:c4:d7:5d:d6:df:a9:d2:08:96:
         e0:aa:07:17:7e:67:be:f4:76:57:9c:f5:82:e0:a3:34:e4:f2:
         9f:13:6b:51:ee:91:57:df:7e:3d:f0:62:c7:a7:cc:12:5c:54:
         b2:03:2a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----