Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.mft
File:                     lxWomCIk5V6mKKnmhSkjWEy0wSs.mft (raw, json)
Hash identifier:          yYdnKMIkySgBVvDr6cnKXX7UbJoH9JYh/yFXJmN2ZQw=
Subject key identifier:   E3:BF:72:9C:83:79:D6:49:E3:DB:E5:41:69:16:1B:6D:CA:6F:77:66
Authority key identifier: 97:15:A8:98:22:24:E5:5E:A6:28:A9:E6:85:29:23:58:4C:B4:C1:2B
Certificate issuer:       /CN=F367B915AF/serialNumber=9715A8982224E55EA628A9E6852923584CB4C12B
Certificate serial:       0863
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lxWomCIk5V6mKKnmhSkjWEy0wSs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.mft
Manifest number:          0863
Signing time:             Sun 25 Oct 2026 01:55:30 +0000
Manifest this update:     Sun 25 Oct 2026 01:55:29 +0000
Manifest next update:     Tue 27 Oct 2026 01:55:29 +0000
Files and hashes:         1: lxWomCIk5V6mKKnmhSkjWEy0wSs.crl (hash: 3IYdiTBjBcxTUDDckBhbnVMKhXDSltjsV8MB6p+pInE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lxWomCIk5V6mKKnmhSkjWEy0wSs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 01:55:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147 (0x863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B915AF, serialNumber=9715A8982224E55EA628A9E6852923584CB4C12B
        Validity
            Not Before: Oct 25 01:55:29 2026 GMT
            Not After : Oct 27 01:55:29 2026 GMT
        Subject: CN=6add6192-4068
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:7b:03:c8:f8:09:1d:bd:59:72:f9:45:3f:
                    7d:6b:84:fb:30:e3:04:c7:9b:bd:d8:a4:18:45:10:
                    d3:30:83:70:10:dc:8a:63:9b:3f:65:bb:42:7e:83:
                    28:dd:ae:3a:29:48:12:1a:1a:af:14:88:60:c7:d1:
                    95:18:a8:ca:bd:4e:87:4e:e2:f4:8f:51:80:25:1a:
                    47:f3:82:6d:b1:37:d8:85:ac:73:d4:31:bb:9f:d8:
                    63:7c:38:d6:f6:6c:6c:b6:ad:2d:17:0e:42:a2:2a:
                    d1:07:2b:2c:54:39:04:de:ed:b6:92:b6:45:a6:3e:
                    01:92:35:86:bb:58:d4:aa:f8:12:d0:24:8d:34:94:
                    ca:48:2b:5b:4e:65:80:08:2c:f3:c6:2a:b2:71:44:
                    85:bf:9e:9e:04:b7:3e:af:3b:71:02:44:9c:a0:35:
                    c5:8a:72:96:38:e1:d0:df:fa:b2:cb:44:62:60:aa:
                    ed:43:07:74:dd:ab:9e:c2:2b:93:10:28:ad:39:31:
                    8e:c5:16:7f:1f:28:80:ea:a6:08:02:22:73:9f:71:
                    0f:43:7d:2e:bd:cb:01:ca:98:cb:07:3f:9b:14:6c:
                    86:ed:bf:42:4d:83:85:90:40:ce:46:e6:c8:34:0f:
                    2d:8d:8a:bd:bb:a6:e3:da:50:3d:98:38:37:ec:85:
                    53:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:BF:72:9C:83:79:D6:49:E3:DB:E5:41:69:16:1B:6D:CA:6F:77:66
            X509v3 Authority Key Identifier:
                keyid:97:15:A8:98:22:24:E5:5E:A6:28:A9:E6:85:29:23:58:4C:B4:C1:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lxWomCIk5V6mKKnmhSkjWEy0wSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B915/F5E67D585EFC11EBACFB2081F8AEA228/lxWomCIk5V6mKKnmhSkjWEy0wSs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:90:d9:66:33:5a:6b:62:15:45:82:15:34:06:34:cb:b2:b9:
         4c:a2:a3:09:d7:9b:90:fd:fa:90:c6:c4:c5:bc:da:47:fe:70:
         c6:40:6d:d9:a5:d0:93:b6:5b:f6:90:3c:e1:fe:d4:01:7e:97:
         f0:17:f0:e9:ad:6f:bc:8e:7e:7e:7b:89:dc:9e:1f:bc:78:89:
         27:ab:d7:ef:db:d4:df:74:88:4a:2f:f7:39:38:59:eb:8c:50:
         a2:39:3b:6c:5d:ab:53:e7:6a:6c:1c:8b:4d:96:a0:a7:2c:28:
         b8:a7:16:78:4c:f8:75:7a:8a:a3:b9:9f:ba:35:27:68:a7:a6:
         2b:51:c7:a7:fa:76:ba:56:3c:1d:6d:4d:a7:b1:85:4a:31:f2:
         e7:a0:ca:c1:63:7a:37:67:17:64:d1:4d:e7:c8:14:1a:58:a8:
         23:07:a6:4d:a3:99:49:64:56:0c:2b:10:0a:2a:85:66:f9:b2:
         1a:8b:9c:4b:f5:74:14:dc:03:92:e7:1c:9e:a6:bf:2d:0c:35:
         5c:50:6d:cf:60:6f:af:35:b6:3b:ca:ee:97:9c:8c:e1:4e:2a:
         69:6c:af:92:b9:30:03:03:f7:42:bf:b5:69:59:0a:38:ef:e1:
         81:db:89:08:21:3a:57:06:bc:7b:f0:05:bd:4a:66:b2:5f:a6:
         75:bf:ca:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----