Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
File:                     bJsrNyrAnSupJEghWppeH0zsS-g.mft (raw, json)
Hash identifier:          /tjHkvt+mzRZnYoWUGXozI8AJROYS4LkUlVMf6XY4z8=
Subject key identifier:   29:A1:39:5D:E7:F4:AF:84:0D:F0:8D:A1:3F:98:80:9B:6A:C5:6F:FD
Authority key identifier: 6C:9B:2B:37:2A:C0:9D:2B:A9:24:48:21:5A:9A:5E:1F:4C:EC:4B:E8
Certificate issuer:       /CN=F3676F2FAF/serialNumber=6C9B2B372AC09D2BA92448215A9A5E1F4CEC4BE8
Certificate serial:       05EC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
Manifest number:          05EA
Signing time:             Sun 25 Oct 2026 03:02:44 +0000
Manifest this update:     Sun 25 Oct 2026 03:02:43 +0000
Manifest next update:     Tue 27 Oct 2026 03:02:43 +0000
Files and hashes:         1: bJsrNyrAnSupJEghWppeH0zsS-g.crl (hash: sUqOohZ3ZmueDd4Kj7eOWAOwwdTK30jb4CvQdhwfch0=)
                          2: BCC0C0828A4E11F1AF8FB4D7CE1D38B0.roa (hash: jI/cKEdATEeH2PHfBDf2iu3vd6SLnRo4mjZ4eb8OCSA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 03:02:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1516 (0x5ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676F2FAF, serialNumber=6C9B2B372AC09D2BA92448215A9A5E1F4CEC4BE8
        Validity
            Not Before: Oct 25 03:02:43 2026 GMT
            Not After : Oct 27 03:02:43 2026 GMT
        Subject: CN=6add7154-0058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b6:ea:7a:71:59:f4:0a:d6:b4:e2:7f:34:88:
                    81:f9:15:a3:53:52:15:23:0d:a4:8f:53:95:09:dc:
                    b6:1c:39:92:8b:80:ae:2c:8d:cc:26:36:d9:d5:58:
                    b3:5f:5c:c3:f3:43:5f:dd:08:01:de:82:65:28:b5:
                    a4:b5:bb:11:c3:59:38:64:38:86:c1:b1:55:8e:c3:
                    db:fb:fb:ff:3b:da:c1:7b:47:fb:22:67:ac:0e:8d:
                    33:1f:b8:1b:9e:fe:c3:66:0c:b8:fa:a4:ba:da:66:
                    80:f5:9d:e1:3c:37:17:f2:8f:cf:0e:1c:11:47:28:
                    dd:df:33:30:1c:b4:22:dc:28:0b:45:3a:14:bc:74:
                    fd:f5:60:6a:d3:c6:7e:12:7f:3c:07:9f:20:64:ab:
                    2e:e0:0b:66:f0:c2:6a:75:9a:97:21:5c:26:b4:73:
                    e5:1b:67:7b:e6:a0:ac:f6:71:ee:92:d4:b3:95:04:
                    c3:95:5d:ab:19:8b:f0:f9:46:e7:22:2f:26:86:c7:
                    58:25:02:b2:2e:71:33:18:86:ae:ea:4e:3f:67:f3:
                    50:ef:58:4c:33:20:99:1a:d1:f5:f9:c2:67:bb:b4:
                    70:1d:be:bc:af:87:5d:3a:f3:d5:4f:0f:47:9f:a3:
                    1a:8d:63:e0:57:0a:45:c3:83:04:74:29:e3:25:55:
                    25:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A1:39:5D:E7:F4:AF:84:0D:F0:8D:A1:3F:98:80:9B:6A:C5:6F:FD
            X509v3 Authority Key Identifier:
                keyid:6C:9B:2B:37:2A:C0:9D:2B:A9:24:48:21:5A:9A:5E:1F:4C:EC:4B:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bJsrNyrAnSupJEghWppeH0zsS-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676F2F/53EB8D7C4BC211ED9C557CAAF1222468/bJsrNyrAnSupJEghWppeH0zsS-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:63:00:c0:af:8c:cb:93:26:73:ca:69:38:0c:f9:b0:dd:72:
         43:f8:49:2c:d2:f1:ce:b6:6f:73:41:ad:c5:75:f7:bd:1c:3a:
         9d:2e:36:cf:cd:7c:0e:7c:07:d2:18:1b:11:f1:b2:14:ae:ce:
         20:9d:fe:1c:e4:7c:53:52:2d:c2:33:a4:c4:ff:d9:1e:67:c3:
         35:6c:b7:e9:72:3d:ab:61:3c:dc:51:13:85:88:c7:3b:f3:60:
         58:f3:cf:a6:46:85:e6:15:ba:05:a9:4a:36:77:5b:51:91:fb:
         22:03:91:54:34:db:af:8a:15:7d:c9:b7:09:9d:b5:b8:7b:c6:
         09:c1:03:c5:4e:0d:76:77:08:c5:23:45:64:f7:74:0f:d3:00:
         8c:41:7e:81:fc:99:55:63:c3:66:3b:80:dd:b5:72:aa:1d:3c:
         54:a0:c2:c0:ee:ce:80:7e:48:16:6c:19:82:a5:df:1e:68:24:
         7a:24:9a:da:4a:b6:73:5f:2e:68:6c:b6:f3:61:8b:1a:f6:f5:
         df:e0:52:e7:87:f0:fc:83:ae:54:e6:42:3b:e6:48:4d:23:3c:
         46:bf:93:25:61:b6:36:fe:6f:78:93:06:eb:52:ce:b2:6b:dc:
         f3:67:9e:20:48:2d:b1:22:04:2b:17:04:f9:61:8e:76:d2:d8:
         58:f1:f2:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----