Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
File:                     kFAlcktjykllnsFAWPqwwTHFDp8.mft (raw, json)
Hash identifier:          gzALfMPWal8yE4XYJI6nOSd2okkxwNlOJ7lAWOLB1+A=
Subject key identifier:   D7:73:95:50:20:77:50:D5:CB:61:3C:D4:43:3C:FF:92:60:B4:ED:BC
Authority key identifier: 90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F
Certificate issuer:       /CN=F367CC68AF/serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
Certificate serial:       015D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
Manifest number:          0152
Signing time:             Sun 25 Oct 2026 05:18:08 +0000
Manifest this update:     Sun 25 Oct 2026 05:18:07 +0000
Manifest next update:     Tue 27 Oct 2026 05:18:07 +0000
Files and hashes:         1: kFAlcktjykllnsFAWPqwwTHFDp8.crl (hash: L3skJPRDKPXJb5+nGE4QPG9y6+5X9ZIq43VPGwHr6dk=)
                          2: 65FE1EFAD60F11F0B34D61F1DAE4EC9C.roa (hash: mHmRtPN3nZyRtaKXk1NyFAMoXJCcMKBcFKPMe58mtiY=)
                          3: 7FC14BC8D60F11F0939384F1DAE4EC9C.roa (hash: UWIFnq0Lrxsq+X5E3Jj5o9t7xwd79DXmyhte1Zg7m98=)
                          4: 5F36C9FED43A11F087C1DB7BDAE4EC9C.roa (hash: 4Qs9L5d+Awp2J42sO92B4p+sTgRxFXnSs6/Y3boWpeI=)
                          5: 12BB6CB0D61011F080EE71F5DAE4EC9C.roa (hash: jieQwbNjbO9s2qsCMK6/pp01R2MtwreNxzIjr89AhWs=)
                          6: A77BACE0D60E11F0A525F0ECDAE4EC9C.roa (hash: WTe1kO+YXrIxbOoIVpdaqpCDc9gvbrr/Ve7XA6zdn5w=)
                          7: C09D7446D60F11F0929B8FF3DAE4EC9C.roa (hash: jxUAEr+gL2A5pYodyrShkYHLF8BEr2fg48HKO/LfZok=)
                          8: F20A2EE8D60F11F0A4B15CF5DAE4EC9C.roa (hash: OwRd4G+mOpbXOMIkBo/pXf/BF2+Cvu67XOd6VreanjU=)
                          9: 295EF6E4D61011F099E8CAF5DAE4EC9C.roa (hash: rYes370ZUBvIJkRR4ObdZvVs20GYj/AIYKpkc3M+O8c=)
                          10: 462E5B98D61011F09797F9F5DAE4EC9C.roa (hash: OuOErrsFiqhdqJPzGVtN61HMOsmFGKM1fy11PY2D+1E=)
                          11: A814A5BED61111F0B21B3C80DAE4EC9C.roa (hash: awM7RQaOv0f+MQEh7zrBLEQLCpOGervbj3ug5CYTW4A=)
                          12: 9ED17FD8D60F11F0907EC1F1DAE4EC9C.roa (hash: PlomXlfc2/H7NcFtazpjEv+QjpLM7jasTSrZvSQvHKQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367CC68AF, serialNumber=905025724B63CA49659EC14058FAB0C131C50E9F
        Validity
            Not Before: Oct 25 05:18:07 2026 GMT
            Not After : Oct 27 05:18:07 2026 GMT
        Subject: CN=6add9110-0f82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f5:2f:57:b3:be:1d:db:cb:77:2d:82:58:08:
                    76:ff:42:2f:07:9b:d0:27:72:f6:b0:0c:90:c6:54:
                    6e:9f:42:6f:85:51:67:ca:65:8c:d9:75:f8:06:43:
                    02:e7:50:f5:86:39:98:83:32:86:6e:cd:3b:38:7e:
                    c4:2e:b6:e2:dd:75:61:41:ee:3a:33:ee:83:71:23:
                    54:cc:c2:3f:c3:65:61:b4:9c:ac:c2:48:af:47:17:
                    be:87:0b:16:45:88:45:be:42:1c:4f:09:55:0b:a2:
                    8e:28:70:b8:ab:a7:5a:8d:a4:55:3c:51:c1:69:4c:
                    f3:33:ca:a2:06:c2:67:5f:ba:db:4a:3a:de:d9:3e:
                    bd:51:5c:14:5a:8a:d6:c9:25:82:0f:4f:ab:13:b3:
                    4b:7d:13:f4:fe:7c:4a:03:4b:1e:7c:0c:57:b8:f5:
                    42:de:f8:2f:b7:00:45:5c:66:1a:c9:44:a2:f5:44:
                    f6:3f:69:d9:06:0f:1f:4a:81:23:bb:20:37:e3:d3:
                    dd:61:a9:d8:e3:26:8a:89:bf:90:ee:63:71:68:90:
                    00:53:b2:27:33:b5:af:31:bf:a1:9c:5c:eb:d6:2c:
                    ef:c3:e1:43:12:c6:4e:0b:26:dd:bb:6a:c8:91:00:
                    bc:50:ab:5f:e8:44:62:cd:51:de:49:30:24:2c:29:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:73:95:50:20:77:50:D5:CB:61:3C:D4:43:3C:FF:92:60:B4:ED:BC
            X509v3 Authority Key Identifier:
                keyid:90:50:25:72:4B:63:CA:49:65:9E:C1:40:58:FA:B0:C1:31:C5:0E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kFAlcktjykllnsFAWPqwwTHFDp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367CC68/527491FCD35D11F085817997DAE4EC9C/kFAlcktjykllnsFAWPqwwTHFDp8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:59:89:5f:fc:24:60:a3:52:41:b7:e1:ec:5f:0c:0e:9f:3a:
         ce:26:7f:f0:88:44:15:fe:93:81:64:c9:f7:f4:21:58:6b:08:
         8a:ee:ee:f4:06:fb:cc:96:cf:78:d0:23:cc:b1:3b:6b:dd:78:
         28:ff:09:fe:4e:22:6b:a3:00:e0:86:69:73:86:a4:c1:dd:3e:
         77:66:06:e0:ca:06:2f:ab:98:f1:f4:62:cb:20:69:64:d3:1c:
         4e:67:27:4c:0d:0b:a3:ac:13:bc:1b:a9:25:c1:cc:be:70:96:
         29:3b:dc:a9:a6:e7:fa:56:c0:6e:fb:b7:4d:c3:d7:0a:e2:c5:
         2c:e8:f3:87:3d:33:66:c7:39:e7:bf:5a:6d:14:a4:27:08:26:
         c5:c6:d5:f0:1e:14:9a:9a:28:93:01:74:78:55:24:6d:b8:ef:
         ef:0a:55:48:80:53:e9:5f:2c:c5:f9:1d:b2:33:77:59:05:78:
         c9:ea:1b:14:9a:3e:52:07:8f:e8:99:d6:28:20:46:5f:ac:85:
         bb:7e:18:2a:a7:4b:bd:37:1a:d7:5c:1c:45:d3:77:de:b4:5b:
         d2:0e:e1:a7:f9:46:6c:75:21:26:29:a4:c9:9d:9b:c7:ea:cf:
         bf:c7:60:2c:00:fa:9e:98:7c:23:ef:99:6f:33:e3:ed:ac:18:
         72:2b:d8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----