Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File:                     7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier:          fy09r9PvetIQEkoH/hHLLMCDTVJb75TXVVHm7i+ndEI=
Subject key identifier:   94:56:9E:CA:C6:BE:E8:88:75:39:53:09:AE:77:1C:4E:F1:5C:61:49
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer:       /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial:       03B6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number:          03AF
Signing time:             Sat 24 Oct 2026 04:09:46 +0000
Manifest this update:     Sat 24 Oct 2026 04:09:45 +0000
Manifest next update:     Mon 26 Oct 2026 04:09:45 +0000
Files and hashes:         1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: 1qrL4K95SIT6uIbocJ2pYI+/Q00MWrWXJaQFm69x0RM=)
                          2: 0C6F6F06922F11F1B1D1BBC6CE1D38B0.roa (hash: GruJ7hwNmWDVt7uOFkMKZme53jzFS9pAeNoMWiD5IDw=)
                          3: BC30116296F211F18CC449A8CE1D38B0.roa (hash: ORQ7n3coekVtJLCpiwAISUj5z1s9Sm9EXvcBSK7c524=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 950 (0x3b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
        Validity
            Not Before: Oct 24 04:09:45 2026 GMT
            Not After : Oct 26 04:09:45 2026 GMT
        Subject: CN=6adc2f8a-4453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:47:9a:c3:2a:fe:f9:9e:cf:4e:6e:df:fe:
                    7b:2a:96:9a:ad:59:20:19:97:a1:43:8d:5b:be:09:
                    0e:ae:ab:46:e7:89:60:8c:03:a8:f2:08:67:0b:65:
                    13:3a:c7:60:60:00:10:cf:2e:ec:f3:c3:94:85:da:
                    e0:68:9b:fa:4d:0e:c2:e2:a0:64:bc:08:d9:1b:0a:
                    00:bd:13:26:2b:32:3d:ab:3b:e3:2a:a6:c4:bf:8a:
                    20:48:9f:86:fa:6f:47:79:a0:73:29:84:15:12:ba:
                    97:1a:43:2b:7a:b5:4a:99:c4:8d:54:a8:00:d7:fb:
                    73:b3:e9:d6:1f:90:50:b9:f0:4d:91:97:18:cc:0a:
                    35:09:e9:f3:de:65:a4:94:45:17:18:eb:41:5d:e4:
                    ee:0a:e8:c7:a7:51:bf:6a:09:c2:89:70:3a:f4:1b:
                    e6:86:25:c2:1d:f7:85:da:9b:d8:1c:26:5b:da:64:
                    11:06:c8:dc:22:06:23:c2:f8:50:b2:59:d7:03:2c:
                    e4:3b:33:60:25:7f:36:53:ba:d2:6f:b7:f5:bc:01:
                    a7:29:47:7c:4f:d9:99:93:9d:31:47:1f:ea:a9:ce:
                    d8:de:2c:e6:37:c6:81:58:c7:b4:33:33:b6:e6:c3:
                    e6:ff:1d:f5:f2:c4:a3:57:d4:1b:b7:64:d2:2a:72:
                    52:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:56:9E:CA:C6:BE:E8:88:75:39:53:09:AE:77:1C:4E:F1:5C:61:49
            X509v3 Authority Key Identifier:
                keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:b8:9e:9d:f8:6a:e1:a0:a2:6f:ca:2b:e3:b9:21:6c:2a:a6:
         0f:bf:01:45:c9:ac:7f:50:ff:f0:c3:cc:af:f1:32:77:84:bd:
         0c:68:0e:74:6c:2d:65:03:fb:01:02:27:51:96:c6:16:00:ea:
         a5:00:06:68:67:43:b6:14:36:54:2d:82:d8:59:f4:86:96:63:
         9d:00:34:95:5a:70:69:07:eb:71:c3:2b:bb:4a:b7:ae:0d:53:
         c1:02:5e:77:61:1c:60:99:b6:07:6b:b3:03:04:bb:a9:03:df:
         9c:dc:bc:12:7c:75:4e:5c:d0:43:51:c5:f9:2c:f4:0c:f4:08:
         e8:97:33:41:f1:40:d6:5e:00:16:ab:63:44:7d:fc:58:bd:a3:
         4a:42:b8:b1:a3:14:c3:29:5d:bb:cc:fd:25:b6:41:3e:80:14:
         3c:ec:04:14:b4:a6:54:e0:89:4b:55:1a:7a:15:bd:7c:d4:16:
         76:05:04:26:c0:f6:ae:22:47:26:cf:a0:10:cf:7e:69:fc:1b:
         8a:7e:46:93:57:2a:3c:66:38:04:3f:cb:ae:b0:dc:bd:7e:e2:
         6b:ec:64:7c:79:df:10:81:ca:75:47:36:c2:ef:46:6a:65:d0:
         66:e6:d8:e1:26:be:22:e2:97:81:0b:44:ad:6a:f9:46:82:dc:
         dc:b8:a0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----