Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
File:                     cDnVox_x8yuxXUeMEJeGl7YiJlc.mft (raw, json)
Hash identifier:          2JblYTxSfn5vbgiO1pUfqUlH0pYezEJfHkpp0DSa5y4=
Subject key identifier:   64:B5:9E:C6:03:5A:42:03:37:3E:F1:29:9B:16:47:8B:0A:F4:46:83
Authority key identifier: 70:39:D5:A3:1F:F1:F3:2B:B1:5D:47:8C:10:97:86:97:B6:22:26:57
Certificate issuer:       /CN=F369A625AF/serialNumber=7039D5A31FF1F32BB15D478C10978697B6222657
Certificate serial:       0AD5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
Manifest number:          0AD3
Signing time:             Wed 14 Oct 2026 01:20:30 +0000
Manifest this update:     Wed 14 Oct 2026 01:20:29 +0000
Manifest next update:     Fri 16 Oct 2026 01:20:29 +0000
Files and hashes:         1: cDnVox_x8yuxXUeMEJeGl7YiJlc.crl (hash: ClfKA7dafv43K0NtUObg8E9vfTxSR3RWJ4pRgD+FnaQ=)
                          2: CFA5E174833711F0BAF820C0DAE4EC9C.roa (hash: 9LdX+6QJPzq+X9+Y9bU9wVAbIwwdt9RF0GdlBwu/DxU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 01:20:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2773 (0xad5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369A625AF, serialNumber=7039D5A31FF1F32BB15D478C10978697B6222657
        Validity
            Not Before: Oct 14 01:20:29 2026 GMT
            Not After : Oct 16 01:20:29 2026 GMT
        Subject: CN=6aced8de-49b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:62:36:44:13:43:8d:40:01:37:ef:38:67:7f:
                    96:82:82:3e:dc:4b:45:28:2c:92:42:a9:8b:3a:96:
                    d7:ff:32:01:f7:3e:bc:80:56:97:57:0e:dc:e5:d5:
                    6c:fe:ab:ff:f7:4b:c6:b4:2d:1b:9e:aa:6b:be:e6:
                    51:64:e9:54:76:2f:c0:ec:c3:7b:18:dd:93:a9:af:
                    a8:d3:16:29:b3:cb:ac:b1:24:6f:fa:a1:3c:be:7a:
                    ec:06:41:c3:7d:22:fb:52:8c:26:7b:fa:29:9c:4d:
                    b3:ca:40:48:9d:2f:62:b5:d9:4e:ae:ec:d9:26:1d:
                    68:91:52:b0:79:1b:b2:d6:86:20:02:c3:c7:e0:fe:
                    ed:c1:7e:5d:ce:4e:8a:e5:ed:52:f2:5a:f4:a8:d5:
                    5b:ca:ec:8b:cc:91:42:f2:38:ff:5b:48:de:df:67:
                    55:74:09:12:b7:f7:1a:c4:49:ce:e8:70:dc:1c:16:
                    31:cd:cf:ac:7d:fd:1e:55:f9:e0:a3:82:fe:30:e8:
                    60:d1:7c:23:59:d1:50:e4:ab:f9:62:20:5f:f6:a1:
                    08:a9:de:6f:63:66:74:a6:02:31:64:a4:10:cd:77:
                    8f:46:e7:a0:1e:d3:75:24:ed:a2:d4:db:4a:50:71:
                    7e:71:55:f0:de:d8:67:6d:69:6b:71:65:bc:20:57:
                    f2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:B5:9E:C6:03:5A:42:03:37:3E:F1:29:9B:16:47:8B:0A:F4:46:83
            X509v3 Authority Key Identifier:
                keyid:70:39:D5:A3:1F:F1:F3:2B:B1:5D:47:8C:10:97:86:97:B6:22:26:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cDnVox_x8yuxXUeMEJeGl7YiJlc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369A625/8A38274078B811E98298434FF8AEA228/cDnVox_x8yuxXUeMEJeGl7YiJlc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:29:2b:57:27:fe:48:6f:5c:56:cd:0f:73:c5:c0:a4:95:ed:
         b4:ca:bb:8b:70:7e:50:22:09:e8:a4:ab:fa:32:c1:5b:e7:e5:
         67:6c:a6:66:f5:38:31:f0:49:9f:47:b2:aa:e8:3c:79:42:65:
         28:3f:ee:25:23:a9:92:b8:63:66:81:11:16:53:31:ad:98:65:
         a4:c2:a9:0f:ad:00:41:46:27:98:8c:27:34:64:9e:d4:7c:21:
         5f:9c:fc:d3:7d:01:c2:f6:b1:8e:3c:ee:aa:53:90:2f:7e:60:
         94:fb:1e:56:42:02:eb:9a:b6:bd:39:d7:70:29:85:b3:95:20:
         15:f6:b9:a7:4d:be:06:9c:e1:94:ef:7f:6c:75:98:a6:85:3f:
         58:26:64:64:14:9e:4b:72:a7:73:00:84:52:b4:ea:29:58:a0:
         1f:b7:02:3f:40:d4:2b:12:fd:d2:fc:77:c5:c7:05:5d:02:98:
         c4:7e:8e:0a:dd:1f:63:e9:5b:2d:a6:64:3a:75:80:77:eb:62:
         46:83:f4:15:64:ed:95:f9:ce:3a:0b:7f:72:82:5e:91:f0:d2:
         a8:ad:2b:e2:66:2f:fb:fe:53:62:1f:1a:9d:a2:b3:a7:e0:6f:
         a3:0e:97:42:52:2c:69:be:18:02:99:5a:99:92:2d:50:bc:6a:
         9f:54:41:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----