Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
File:                     SJIyUipHGpLr60FtxMHfpUo9NAA.mft (raw, json)
Hash identifier:          YcYCFnMJTndZ8rqMt2qY+kMh5bDz/h2y+sefneYwMns=
Subject key identifier:   16:1A:13:CA:1E:8D:51:78:B9:D5:FB:28:B7:01:7B:A2:9C:A4:59:60
Authority key identifier: 48:92:32:52:2A:47:1A:92:EB:EB:41:6D:C4:C1:DF:A5:4A:3D:34:00
Certificate issuer:       /CN=F368F7EAAF/serialNumber=489232522A471A92EBEB416DC4C1DFA54A3D3400
Certificate serial:       01DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SJIyUipHGpLr60FtxMHfpUo9NAA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
Manifest number:          01DA
Signing time:             Sun 25 Oct 2026 05:00:04 +0000
Manifest this update:     Sun 25 Oct 2026 05:00:04 +0000
Manifest next update:     Tue 27 Oct 2026 05:00:04 +0000
Files and hashes:         1: SJIyUipHGpLr60FtxMHfpUo9NAA.crl (hash: tEguwuZcS5Hf05TQFldKUbNLgD442HpNn53dNckQC84=)
                          2: 3D3E113460A111F0BC66BDB5DAE4EC9C.roa (hash: Yz2LgMo8/maeZeqiFDXEgU1Kho0yd40MGr9r17BWqfM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SJIyUipHGpLr60FtxMHfpUo9NAA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:00:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F7EAAF, serialNumber=489232522A471A92EBEB416DC4C1DFA54A3D3400
        Validity
            Not Before: Oct 25 05:00:04 2026 GMT
            Not After : Oct 27 05:00:04 2026 GMT
        Subject: CN=6add8cd4-53df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:85:ac:c5:a2:f6:f7:33:b3:6e:f1:af:1e:
                    57:06:71:d7:f6:de:f3:9c:2b:2e:ba:55:a9:7e:8a:
                    30:6d:f1:d2:03:54:50:7b:22:e1:7f:df:77:77:7d:
                    4b:10:bf:a6:f1:ee:20:8b:ea:d3:9f:52:c1:85:57:
                    4e:a8:e1:7d:f3:c3:d0:8a:04:b6:36:d4:15:a3:8a:
                    7e:b3:04:17:52:0e:9c:49:bd:4f:a5:37:83:4a:45:
                    8e:49:5b:25:6f:32:8d:4c:19:cf:1c:0d:ba:6b:59:
                    4d:61:d3:dc:5e:9a:02:ac:32:11:ce:35:07:5a:e2:
                    fb:73:66:4d:b0:97:6c:59:3f:24:06:1f:1c:fa:ed:
                    d0:41:51:17:e9:9b:e8:78:5b:39:c6:9a:66:7d:18:
                    68:b8:d6:67:f0:60:30:d5:84:9f:61:8d:45:22:ae:
                    b8:bf:c7:29:3c:9e:2c:48:7c:19:29:6a:8a:48:f7:
                    c6:a9:4e:71:d9:66:25:e9:66:88:d4:5c:94:de:f0:
                    c0:74:af:5f:43:2e:28:08:a0:89:91:0e:c4:b8:5b:
                    bd:fe:bc:0e:7d:df:df:10:df:df:59:04:8d:76:ba:
                    6e:61:34:48:5c:fd:88:19:69:bb:25:2a:de:aa:e2:
                    ca:1c:2a:a0:bd:d1:72:ff:7c:c0:d6:55:52:bd:fa:
                    df:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:1A:13:CA:1E:8D:51:78:B9:D5:FB:28:B7:01:7B:A2:9C:A4:59:60
            X509v3 Authority Key Identifier:
                keyid:48:92:32:52:2A:47:1A:92:EB:EB:41:6D:C4:C1:DF:A5:4A:3D:34:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SJIyUipHGpLr60FtxMHfpUo9NAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F7EA/F3FB7788609F11F0941B10ADDAE4EC9C/SJIyUipHGpLr60FtxMHfpUo9NAA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f3:41:64:7e:e5:32:12:53:0d:40:c3:91:67:06:e8:5c:db:
         46:a0:c7:77:20:fd:4f:9f:40:c6:4c:05:db:3a:e1:0d:08:4a:
         4f:ba:6e:a6:42:d3:64:c7:6c:8c:38:d6:d1:01:16:c6:a1:24:
         dc:7f:9d:d0:de:7a:c5:4c:61:fc:50:a1:0b:a4:12:a9:58:15:
         d0:a6:b0:c9:1f:fe:c1:6a:f3:ba:0f:49:e2:2b:9f:bf:e9:22:
         0f:a2:b9:48:40:39:62:b0:6d:85:f4:eb:f1:17:30:1d:9e:b8:
         d0:26:06:6c:ba:60:30:33:98:c2:8c:67:03:06:fd:2a:31:7a:
         8f:a3:6c:49:ae:de:86:94:d1:58:24:5e:2b:89:00:c6:2b:68:
         8a:6a:cf:62:ab:87:0a:3b:0a:b6:b7:8a:90:eb:f1:70:b8:20:
         f4:0e:ce:a2:f4:19:6d:8d:fb:8e:45:46:33:b5:15:d6:41:fb:
         cd:29:b7:0e:ff:79:c5:02:bf:d3:39:0e:19:78:7c:2b:1f:90:
         8b:ee:95:69:5a:88:76:a5:07:eb:96:dc:0f:b6:fc:bc:39:4a:
         51:ec:fb:12:4b:19:25:ec:ab:76:a1:5b:97:f4:52:cc:5e:ac:
         b8:df:83:e0:69:f9:ec:b3:b9:dc:1e:af:6d:80:7b:13:93:e0:
         49:88:55:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----