Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
File:                     XY4nZDYESZrfo7elNFeDrRLbr_M.mft (raw, json)
Hash identifier:          XjruIzrgeaIvnLrzKWTgtrn1lTA7Q1EBHCDsawPefLI=
Subject key identifier:   EC:9C:DB:26:5F:CE:CD:F1:BA:1E:00:6B:8F:51:AA:C6:AA:31:E1:69
Authority key identifier: 5D:8E:27:64:36:04:49:9A:DF:A3:B7:A5:34:57:83:AD:12:DB:AF:F3
Certificate issuer:       /CN=F369B304AF/serialNumber=5D8E27643604499ADFA3B7A5345783AD12DBAFF3
Certificate serial:       0128
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
Manifest number:          0127
Signing time:             Mon 26 Oct 2026 05:23:19 +0000
Manifest this update:     Mon 26 Oct 2026 05:23:18 +0000
Manifest next update:     Wed 28 Oct 2026 05:23:18 +0000
Files and hashes:         1: XY4nZDYESZrfo7elNFeDrRLbr_M.crl (hash: /zyW/RUk6WP+/452d9DSx2O/qTqvXEqnEd0Y8p2wS78=)
                          2: 6940FEB07FA711F1B3D47110CF1D38B0.roa (hash: wxbOmuOUCEqbkjwrgojW0bKcYQ5TMR+fX4e4p9xnvNg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 296 (0x128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B304AF, serialNumber=5D8E27643604499ADFA3B7A5345783AD12DBAFF3
        Validity
            Not Before: Oct 26 05:23:18 2026 GMT
            Not After : Oct 28 05:23:18 2026 GMT
        Subject: CN=6adee3c7-6546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:96:0f:a6:3a:37:87:a8:ae:d9:b4:c9:1e:5d:
                    04:da:62:b6:9f:30:ee:12:a4:d7:7c:e7:20:53:0b:
                    0a:f9:97:54:64:e5:4f:9b:e4:3f:8f:b0:08:8f:82:
                    68:c3:ce:01:b7:10:7f:c6:55:f5:a8:53:e2:76:96:
                    86:5e:3c:ab:6f:90:5d:40:3c:3f:ad:04:13:a4:9f:
                    d8:2e:b6:b0:37:ce:03:9e:3d:ad:ff:71:6d:bf:15:
                    17:d1:87:d2:d2:86:34:e6:2c:41:a7:11:3f:dc:4f:
                    8a:30:8c:36:62:b5:c9:3e:27:00:ee:88:f1:a8:fe:
                    7b:66:6f:a9:80:00:cd:7b:e6:50:d4:86:fb:7b:6b:
                    66:f9:5d:a6:8a:57:27:78:33:9f:cf:3b:16:4f:d9:
                    e3:b3:c7:52:bf:3d:81:42:7e:52:d9:12:d7:ca:f5:
                    20:21:53:68:f0:6d:7c:e1:0b:42:2b:ea:c5:d1:f8:
                    99:f5:40:04:0e:c1:b6:68:b7:90:ee:75:07:08:d2:
                    dc:cd:d8:43:97:81:6b:50:c5:93:4d:b8:83:5b:02:
                    63:28:f6:12:76:71:20:68:05:65:01:59:af:17:e3:
                    54:44:3a:b2:8a:4f:a5:36:f2:23:66:50:c4:ef:3e:
                    f4:25:a7:1a:b5:c9:b2:4e:b7:d8:3b:81:eb:d1:a7:
                    2e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:9C:DB:26:5F:CE:CD:F1:BA:1E:00:6B:8F:51:AA:C6:AA:31:E1:69
            X509v3 Authority Key Identifier:
                keyid:5D:8E:27:64:36:04:49:9A:DF:A3:B7:A5:34:57:83:AD:12:DB:AF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XY4nZDYESZrfo7elNFeDrRLbr_M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B304/B98A352CEC1211F0ABA757A0DAE4EC9C/XY4nZDYESZrfo7elNFeDrRLbr_M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:f1:9b:87:3c:58:0d:df:f8:95:d1:28:c2:30:54:c6:f1:e4:
         d6:e3:36:5f:70:a1:36:69:93:c5:35:bc:8a:a6:2c:48:56:77:
         52:cd:19:73:45:88:8a:38:5d:e4:25:e8:9b:5e:12:7f:09:d0:
         36:a8:8b:1c:48:88:6f:89:9f:f9:87:76:89:e2:75:b6:de:0f:
         1a:e7:c8:a7:a6:8c:14:90:1e:68:7a:a3:50:46:71:94:ee:cc:
         e7:14:a7:e8:d6:ed:1d:c1:41:8b:95:9b:e0:8e:be:9b:06:29:
         e1:d0:04:25:fa:23:b1:af:b4:b2:9e:64:a9:2e:77:45:57:5a:
         54:89:43:de:21:b4:0b:27:60:9b:b5:4a:b2:c9:27:a5:cd:39:
         77:69:2d:a8:aa:27:89:d2:31:b4:3c:c9:44:df:c9:49:38:68:
         7f:be:1a:2e:8a:2c:20:1a:e2:38:9c:df:f9:b7:dd:58:32:06:
         10:21:30:49:a1:47:08:52:a8:96:43:a9:bd:ea:e3:45:57:12:
         de:87:4c:d5:8e:b5:63:52:7c:12:e4:b5:3b:cf:46:29:98:3b:
         9e:a4:52:47:ba:67:da:48:12:7c:89:e9:81:7d:4b:c6:58:1d:
         76:24:f0:7a:27:65:b3:ba:99:a6:a4:30:bb:80:c0:b5:db:eb:
         3d:05:f6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----