Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
File:                     hHYz30sJnBpSITpyTYxq0rIkb1U.mft (raw, json)
Hash identifier:          IkhLljmTP7dwYkZLbyYkV+xnrWf0iZbsyiUQlyA8+jA=
Subject key identifier:   2A:90:43:64:3F:D2:AA:EE:23:CB:AF:9A:5C:27:E2:C3:DF:4E:48:59
Authority key identifier: 84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55
Certificate issuer:       /CN=F369A086AF/serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
Certificate serial:       0538
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
Manifest number:          0537
Signing time:             Mon 26 Oct 2026 03:22:09 +0000
Manifest this update:     Mon 26 Oct 2026 03:22:08 +0000
Manifest next update:     Wed 28 Oct 2026 03:22:08 +0000
Files and hashes:         1: hHYz30sJnBpSITpyTYxq0rIkb1U.crl (hash: qjuN1laLhT6CgZkAoT3qgzZ58EM309Yd0oO0x9H3qqY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:22:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1336 (0x538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A086AF, serialNumber=847633DF4B099C1A52213A724D8C6AD2B2246F55
        Validity
            Not Before: Oct 26 03:22:08 2026 GMT
            Not After : Oct 28 03:22:08 2026 GMT
        Subject: CN=6adec761-1be9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:34:4d:05:7d:fe:f0:c4:3f:7b:40:0e:a8:7d:
                    96:b9:f1:d6:e7:a5:5d:84:2f:77:32:b3:1a:60:d1:
                    c8:c8:fe:4a:da:46:24:5a:3b:0b:27:34:8c:7d:20:
                    84:2b:b3:06:ae:81:f7:94:84:ff:4a:42:05:c6:74:
                    c5:b5:99:89:59:f9:e2:00:c0:4a:10:3b:3e:94:27:
                    8c:4c:b1:e5:27:a1:22:18:ca:0f:e0:55:a8:bb:7a:
                    12:46:ec:0e:e5:76:4b:a8:cb:cd:44:8c:27:46:96:
                    c7:64:2d:e1:54:7a:52:49:38:32:d3:78:e2:d9:1c:
                    05:2b:2d:f2:d8:d6:15:43:5a:3a:1c:42:12:6d:08:
                    2f:31:2c:17:75:49:88:23:ec:55:67:34:97:92:8f:
                    ba:e7:2f:ef:5c:05:76:94:b4:3e:89:e9:b3:e9:c8:
                    23:3d:b6:72:0b:2c:94:ee:c1:d3:86:6e:2d:ca:43:
                    f0:c4:b3:a9:d2:25:b5:33:bf:d5:41:56:fc:41:13:
                    59:c5:e2:48:92:2b:64:d0:e4:4f:50:87:0f:f0:74:
                    ac:16:d5:96:23:16:e2:bf:1e:64:ec:4e:7f:67:ef:
                    95:cf:a7:db:6d:ba:27:f5:24:a5:07:a5:c7:85:49:
                    97:41:03:bf:42:d0:12:6c:74:b6:1f:06:bb:98:9c:
                    43:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:90:43:64:3F:D2:AA:EE:23:CB:AF:9A:5C:27:E2:C3:DF:4E:48:59
            X509v3 Authority Key Identifier:
                keyid:84:76:33:DF:4B:09:9C:1A:52:21:3A:72:4D:8C:6A:D2:B2:24:6F:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hHYz30sJnBpSITpyTYxq0rIkb1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A086/297D7F7CD2D211ED95103DE0F1222468/hHYz30sJnBpSITpyTYxq0rIkb1U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:77:1b:f1:9b:90:cc:76:f7:83:ac:a6:54:f8:9e:3d:70:62:
         13:be:b5:68:f7:f2:3c:d4:7d:43:35:6c:e0:8b:88:23:e5:a8:
         6a:ad:f0:53:76:16:a4:fd:8f:89:95:66:a5:70:d2:bc:98:50:
         ef:66:a3:6e:a4:91:47:d5:13:55:a8:f2:6f:e8:e0:01:83:cf:
         97:e8:6a:cb:cb:59:eb:cd:67:c9:b4:38:ae:ce:f6:8a:de:29:
         5c:31:96:d3:3b:15:f5:52:51:60:dc:1f:7b:55:54:f4:39:b1:
         48:ce:65:a7:10:ca:33:03:b0:84:2e:5c:bb:27:5a:d4:2f:5b:
         03:e8:c3:bd:ac:db:66:09:03:9e:ef:51:b6:17:68:b0:88:af:
         8b:9c:f9:5a:1c:9c:e9:c5:f6:0d:1f:73:9e:29:22:c5:e2:a6:
         37:43:41:f9:47:9f:8e:cf:24:07:c4:dc:84:11:9d:a7:89:dd:
         1d:e4:f0:e9:4c:a0:50:62:06:89:55:fa:64:43:e2:c4:2b:07:
         33:8d:2e:cc:de:3c:b0:b6:f9:38:d4:ab:e6:5f:a8:70:a9:c3:
         30:08:71:6b:36:eb:12:c9:15:45:1b:d6:25:0b:24:7d:d2:5e:
         de:1a:5e:43:f4:c1:70:64:a8:86:0b:b8:c1:aa:2c:e1:3f:8e:
         d8:9c:a3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----