Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File:                     CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier:          rKvQR2ACy/kDBIPYmvMFl43rZVI/j5ipq2mMHFxKGAk=
Subject key identifier:   95:AF:74:F9:5F:66:34:87:E3:8C:BC:31:32:3C:65:45:E3:24:21:47
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer:       /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial:       03B7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number:          03B1
Signing time:             Tue 27 Oct 2026 04:08:01 +0000
Manifest this update:     Tue 27 Oct 2026 04:08:00 +0000
Manifest next update:     Thu 29 Oct 2026 04:08:00 +0000
Files and hashes:         1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: lCT00UWviJbrhlBVDUNl3EwLFwco3U87HhiMFlqnRlI=)
                          2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
                          3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
                          4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
                          5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 951 (0x3b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
        Validity
            Not Before: Oct 27 04:08:00 2026 GMT
            Not After : Oct 29 04:08:00 2026 GMT
        Subject: CN=6ae023a1-040d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ed:2e:60:71:10:da:47:f4:89:f0:6d:69:48:
                    a2:c2:18:23:c5:9e:c2:3c:f3:5b:9e:cc:70:a4:6d:
                    f9:13:c8:e7:c3:b7:64:99:f5:63:ef:91:0b:80:6b:
                    21:4c:40:11:f8:b1:e8:9f:04:42:8f:ed:0a:31:6a:
                    fb:13:29:ed:c2:b2:2d:1e:41:9e:d8:38:cd:ef:03:
                    c9:92:91:38:03:3e:62:c3:c3:e6:52:6b:9f:31:da:
                    02:2b:69:eb:18:70:8b:40:d9:d3:bd:62:e5:4d:0d:
                    1a:fa:7d:65:01:38:fd:8c:59:cf:38:c0:b1:d3:28:
                    f3:1a:88:9f:d6:35:26:a3:6b:0d:1d:32:5c:04:b6:
                    d2:66:8c:ea:4f:65:39:8b:dc:6a:6b:1e:54:96:61:
                    71:da:76:f5:3e:41:d4:e5:bf:36:e3:f0:4c:e2:32:
                    08:67:df:9c:ed:69:22:d4:2c:c9:28:1d:6c:a5:5d:
                    7c:16:75:d1:0d:08:11:bb:c6:53:c6:cd:be:d8:e5:
                    f9:bb:ec:39:ec:10:e2:3d:5c:13:21:66:6f:cc:a6:
                    8f:f2:06:a2:fb:64:f2:e3:7b:9b:12:c1:d9:f7:00:
                    c5:15:f6:7a:c3:d1:f8:c6:40:02:72:f9:95:99:9b:
                    cf:99:7e:2a:4f:0b:16:f4:4e:0d:37:6e:19:98:48:
                    eb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AF:74:F9:5F:66:34:87:E3:8C:BC:31:32:3C:65:45:E3:24:21:47
            X509v3 Authority Key Identifier:
                keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:7d:e6:2a:9c:50:e8:af:97:fc:74:57:e7:b6:05:77:ac:d0:
         03:22:f8:31:10:67:e1:4f:46:1b:98:d2:3d:08:b6:89:ba:14:
         90:f2:80:e4:96:ec:95:00:aa:be:df:d3:df:8d:17:a5:50:11:
         7a:06:92:3d:93:46:9c:6c:a7:4c:c3:67:7e:5c:85:28:62:c0:
         2f:b8:47:c2:6f:74:15:49:c7:dd:46:e4:7d:d7:6e:37:4f:3a:
         9c:a1:98:c7:a3:c2:aa:72:7e:89:52:f5:07:c9:68:1a:10:5a:
         b6:25:39:34:73:89:d9:76:a2:3b:26:aa:5b:e3:f9:49:00:da:
         6e:c6:bf:93:71:f6:73:f4:55:1b:2c:4d:b9:67:02:08:1e:42:
         9e:0a:af:36:8d:58:c0:04:1c:f1:69:4c:91:22:2b:7f:ee:74:
         d3:3d:50:e4:1d:90:ac:9b:5e:2c:1a:75:e8:68:84:30:b4:be:
         03:d7:54:79:43:2e:72:a8:44:f8:9d:39:c7:37:00:c6:9d:5b:
         26:dc:fc:a7:cb:7e:6d:71:d1:ca:ed:2c:f9:e2:6d:cc:21:ee:
         b8:9c:4f:e8:c8:c8:50:1d:b7:72:bb:ca:da:16:4b:99:5b:56:
         aa:d4:a5:e9:47:68:11:05:fc:51:13:ea:25:c2:14:0a:c5:4d:
         48:c2:24:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----