Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
File:                     Ob52uHZXsJfc7qO0DURSok5WA4I.mft (raw, json)
Hash identifier:          x8KNdWI7JOd02QkrArly/eZv9ZI/1rxkyzYPhzmZ7DA=
Subject key identifier:   52:18:F2:53:28:98:36:B0:43:5A:C6:0D:DE:7A:FE:77:21:CB:B8:3F
Authority key identifier: 39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82
Certificate issuer:       /CN=F3688321AF/serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
Certificate serial:       0397
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
Manifest number:          0396
Signing time:             Mon 26 Oct 2026 04:13:17 +0000
Manifest this update:     Mon 26 Oct 2026 04:13:15 +0000
Manifest next update:     Wed 28 Oct 2026 04:13:15 +0000
Files and hashes:         1: Ob52uHZXsJfc7qO0DURSok5WA4I.crl (hash: vQlKzsjI/uLlU0K7IY4EscTeX+pwzMRClgXR1NuZqFw=)
                          2: BCE5E01A0DFF11EFA7C0A7F8007001B1.roa (hash: m39T3fuh7q5xXJaI34cgegPgwSRYyjf0xq3cmG1FBwE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 919 (0x397)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688321AF, serialNumber=39BE76B87657B097DCEEA3B40D4452A24E560382
        Validity
            Not Before: Oct 26 04:13:15 2026 GMT
            Not After : Oct 28 04:13:15 2026 GMT
        Subject: CN=6aded35d-f5a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:b2:62:b8:fd:92:e6:79:36:5d:67:97:2f:43:
                    5e:98:e9:40:fb:50:e8:41:5f:c4:41:f0:67:9d:c4:
                    27:c6:2b:6b:3e:1a:47:83:94:cc:d1:5e:68:97:3f:
                    5d:4c:a9:00:0a:9b:4f:6b:1f:e1:42:95:dd:94:d7:
                    42:fb:da:46:16:7e:eb:57:c7:d7:81:c3:76:76:f1:
                    67:b1:a9:a2:71:95:be:b6:4d:12:f1:3d:18:6b:dd:
                    25:ef:7d:e6:7f:cd:04:16:41:e4:0e:8d:3d:fc:07:
                    73:62:c4:c2:17:cc:f8:c3:2b:4f:1c:a6:ba:62:53:
                    0e:55:4c:1c:6a:2e:98:1e:31:87:be:7a:78:ce:84:
                    05:19:26:08:6d:57:24:67:5e:4e:c8:67:5a:cc:f3:
                    92:4d:0d:9b:16:22:0f:3c:9e:04:73:94:a8:73:a5:
                    51:b5:9c:22:61:72:10:f0:1f:ee:1f:e7:9f:3a:70:
                    78:c0:ce:3a:4d:1f:4b:a6:28:00:c1:19:4c:7a:3c:
                    4d:47:91:c0:75:23:4e:83:f2:3b:c5:cf:b4:49:87:
                    e6:ba:26:f9:08:ac:34:89:5b:5f:31:98:b0:f1:76:
                    72:21:76:41:64:1a:97:5c:14:83:f7:a7:33:5e:25:
                    01:b5:2b:42:d6:dd:3c:b9:08:54:2e:2a:3c:dd:ca:
                    95:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:18:F2:53:28:98:36:B0:43:5A:C6:0D:DE:7A:FE:77:21:CB:B8:3F
            X509v3 Authority Key Identifier:
                keyid:39:BE:76:B8:76:57:B0:97:DC:EE:A3:B4:0D:44:52:A2:4E:56:03:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ob52uHZXsJfc7qO0DURSok5WA4I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688321/894DD8A00DFC11EF94AA185B017001B1/Ob52uHZXsJfc7qO0DURSok5WA4I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:16:0b:9a:47:2d:d4:8a:35:25:5b:6a:d8:ff:7c:30:ea:8d:
         1e:6d:75:e2:b3:bd:84:1c:53:47:5e:9b:03:48:f3:20:30:55:
         10:0c:5e:c9:8b:95:a1:40:ad:66:81:e9:73:61:23:00:d3:5d:
         70:1c:07:0d:aa:8d:64:9a:cf:3c:c9:93:15:79:6e:49:ed:23:
         74:8d:24:43:96:8d:e5:d2:9d:1c:9d:35:13:eb:7a:d2:f7:c5:
         e4:39:99:56:ea:2c:30:b7:86:1e:af:b9:74:59:13:98:87:90:
         27:37:13:29:90:e6:2e:f2:35:c4:3f:55:6d:48:e6:8d:7d:29:
         3d:df:4a:2a:85:34:43:4c:f4:66:bd:27:24:d4:5e:18:a0:64:
         90:1a:e6:88:60:8d:31:f6:23:dc:2c:8e:29:46:fb:82:3c:e0:
         0f:ef:88:f2:af:fe:ab:8c:69:cf:45:8a:b2:f5:be:99:1b:f9:
         cb:c2:3e:bf:1d:1d:0d:3e:40:56:e9:1d:af:89:47:24:19:db:
         71:0f:13:b3:fc:19:0d:c6:12:c6:ce:16:fa:90:17:85:5d:da:
         2d:04:1f:2b:2a:75:c1:09:58:bd:ce:6f:35:28:75:83:78:0e:
         0a:93:5a:18:2b:af:81:5f:22:da:8e:68:2b:ab:35:0a:cf:f7:
         ad:f2:6d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----