Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
File:                     B0Bo8Lwdf2xlr15SAuIhENaFelk.mft (raw, json)
Hash identifier:          zK3NljPNPn3SwhJ7nFUaglIbEAiZzjRqt+bAgkkAyXQ=
Subject key identifier:   A3:DF:87:20:6D:6B:A2:B0:E5:5D:2F:E1:7E:BD:28:9B:2D:88:D1:EB
Authority key identifier: 07:40:68:F0:BC:1D:7F:6C:65:AF:5E:52:02:E2:21:10:D6:85:7A:59
Certificate issuer:       /CN=F368D59FAF/serialNumber=074068F0BC1D7F6C65AF5E5202E22110D6857A59
Certificate serial:       CD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
Manifest number:          CC
Signing time:             Sun 25 Oct 2026 05:31:45 +0000
Manifest this update:     Sun 25 Oct 2026 05:31:44 +0000
Manifest next update:     Tue 27 Oct 2026 05:31:44 +0000
Files and hashes:         1: B0Bo8Lwdf2xlr15SAuIhENaFelk.crl (hash: qZQlrU+a3tPVznZYg8+hLPjhSNbmiTH6llW717oxvVg=)
                          2: CDA23108324A11F1B60EAEB9DAE4EC9C.roa (hash: cE1RonJWQjRj/5iPA//z9En6WXcsSeuTNBdrevPeLx8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D59FAF, serialNumber=074068F0BC1D7F6C65AF5E5202E22110D6857A59
        Validity
            Not Before: Oct 25 05:31:44 2026 GMT
            Not After : Oct 27 05:31:44 2026 GMT
        Subject: CN=6add9441-bf41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:89:0a:33:fd:91:7d:ac:ba:86:ce:c9:71:ef:
                    d3:ad:56:29:b7:69:0b:f8:a3:b1:98:bf:d9:97:40:
                    8c:73:2e:f7:e7:49:7b:57:4e:e3:cd:34:b1:3c:71:
                    a9:53:a5:94:e1:a1:22:08:71:31:be:19:33:4e:46:
                    c6:e7:07:08:8e:04:51:2a:07:43:aa:31:73:f4:f8:
                    04:fe:32:fd:cc:08:f6:b5:8d:32:df:55:52:45:0b:
                    54:4a:dd:f2:df:71:58:62:bd:86:dd:78:cd:d7:21:
                    c6:73:30:c8:69:f2:0f:34:8a:57:ee:1d:91:3a:ec:
                    31:25:b3:8c:7a:06:6b:e4:f9:cd:d9:3b:e1:21:2d:
                    88:9a:35:71:43:76:ab:53:d4:a5:b6:ee:34:60:ba:
                    15:5e:a4:72:e5:a6:03:26:fb:6a:b7:b0:3e:50:1e:
                    cb:f6:bb:f4:bc:ec:c6:d7:b2:3d:96:92:9b:37:6c:
                    0e:04:06:5b:f1:9e:33:51:50:60:fb:19:5c:68:fa:
                    ea:86:ea:3f:13:cf:59:01:eb:38:af:4b:36:47:a2:
                    d0:fb:36:00:2f:2b:4d:d7:ba:96:09:df:6a:5e:ee:
                    b0:43:d2:bf:93:f4:35:aa:23:a8:b6:9f:54:fc:05:
                    92:1b:15:83:ce:ca:c5:2d:f2:2e:53:79:d3:62:55:
                    e4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:DF:87:20:6D:6B:A2:B0:E5:5D:2F:E1:7E:BD:28:9B:2D:88:D1:EB
            X509v3 Authority Key Identifier:
                keyid:07:40:68:F0:BC:1D:7F:6C:65:AF:5E:52:02:E2:21:10:D6:85:7A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B0Bo8Lwdf2xlr15SAuIhENaFelk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D59F/CF10B148324211F18586228DDAE4EC9C/B0Bo8Lwdf2xlr15SAuIhENaFelk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ae:c7:8c:5d:19:9c:57:c3:b8:ce:e1:56:6f:ea:58:74:66:
         42:64:93:0a:ca:45:14:a5:95:27:21:b2:ec:9c:59:54:e5:66:
         90:be:0b:d6:04:b9:c6:8a:ca:c7:ce:97:23:06:65:58:5e:1e:
         a5:0d:b2:8e:b4:24:54:dd:98:9e:93:fc:ba:2b:dc:ec:77:98:
         f9:ff:f0:4c:16:95:fe:fb:c6:bb:f3:b1:79:5a:cc:0b:72:de:
         8e:a5:f4:93:60:2a:2d:3f:38:f2:9a:89:5a:a9:39:5d:e0:cd:
         23:7a:ab:13:e6:05:aa:24:6f:72:03:bc:75:d8:27:e9:f5:de:
         dc:c8:bd:31:a9:fc:44:66:98:09:6b:29:e5:4c:74:b6:35:69:
         c0:ba:b8:f3:c0:90:0d:1e:16:df:44:07:43:8b:9a:0e:17:bc:
         41:97:eb:31:3c:a8:c0:8d:c3:56:78:69:57:c2:f3:20:1f:46:
         9b:64:8d:1b:0e:a7:c5:39:88:af:c6:18:d5:d5:a7:7f:0b:93:
         fe:ee:89:db:02:40:98:38:d1:51:dc:12:93:15:3e:9a:c0:b6:
         53:58:29:53:59:33:52:bb:70:e5:0c:91:4e:7c:77:82:1a:dc:
         c2:49:da:16:cd:d7:ca:38:75:39:d5:6b:1f:3e:7c:39:b9:7c:
         22:cc:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----