Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
File:                     165kWvnltuIirj4ZQpl0u9hlaUE.mft (raw, json)
Hash identifier:          I11WUpsVJuHYkmQRUZNbA/cZ3cDjsF/8xRgoFjncP6A=
Subject key identifier:   15:60:89:85:08:90:B1:9A:46:97:D1:B9:A0:56:AE:CA:EF:B9:E4:25
Authority key identifier: D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41
Certificate issuer:       /CN=F36A9688AF/serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
Certificate serial:       0795
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
Manifest number:          0793
Signing time:             Sat 24 Oct 2026 02:21:14 +0000
Manifest this update:     Sat 24 Oct 2026 02:21:13 +0000
Manifest next update:     Mon 26 Oct 2026 02:21:13 +0000
Files and hashes:         1: 165kWvnltuIirj4ZQpl0u9hlaUE.crl (hash: m6a8NSIFePKZyV8+e7PQuHB9YZTpqcl/yeYc8+L0xq0=)
                          2: 944BDCAA1C3E11F19E04AAF5DAE4EC9C.roa (hash: /Spr3dkWLzeHjhA4/jneuEhVkXk19YABMTLgIxm7Vko=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 02:21:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1941 (0x795)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9688AF, serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
        Validity
            Not Before: Oct 24 02:21:13 2026 GMT
            Not After : Oct 26 02:21:13 2026 GMT
        Subject: CN=6adc161a-93c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4c:7f:dd:aa:ed:c6:70:38:35:2d:3f:0e:8f:
                    ad:69:f9:a6:67:75:78:01:70:d3:42:1c:45:2b:ce:
                    9d:d5:e1:9b:bb:42:dc:8f:48:28:c6:a2:1b:e5:ad:
                    31:20:fd:9a:4f:c4:ca:31:57:08:6b:01:9d:62:c1:
                    01:dc:89:58:3d:8e:82:80:99:ff:f8:59:c8:88:bd:
                    08:e7:0e:4b:f5:51:19:2b:f4:e8:5c:1a:5d:c0:6b:
                    6a:3d:cf:de:0e:b3:7b:4f:7c:7f:a6:83:26:a5:0b:
                    2b:16:7c:c1:16:c5:20:2a:75:3b:98:5a:79:d3:19:
                    a8:98:78:e0:44:ed:65:99:b4:b0:a2:7c:71:13:8d:
                    6a:0e:c3:c6:96:3c:95:ed:cc:9c:f0:31:9f:56:19:
                    7b:06:d2:c7:5b:96:b8:c4:9f:46:8b:e0:c3:37:5b:
                    8d:2f:34:48:9c:08:f7:a9:05:c0:5a:07:a2:28:72:
                    6b:a6:22:6c:9e:af:36:08:44:77:9d:65:69:16:b0:
                    91:69:dd:5c:48:76:81:a5:ea:4e:d3:a0:9d:16:78:
                    68:5e:07:35:4b:b5:6d:a4:78:c6:e7:5c:ce:00:e5:
                    72:55:ec:11:82:ac:08:30:ed:59:42:e6:81:3f:7a:
                    07:45:14:73:e8:4d:c3:d4:50:9b:7b:f4:bd:02:7f:
                    e7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:60:89:85:08:90:B1:9A:46:97:D1:B9:A0:56:AE:CA:EF:B9:E4:25
            X509v3 Authority Key Identifier:
                keyid:D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:2f:a8:0a:cf:f0:74:74:02:98:69:45:70:54:e7:cc:80:c8:
         c3:ba:43:9f:d1:c6:37:c2:a7:4c:1e:d9:0f:d8:56:8b:29:f9:
         c4:31:11:94:63:9f:1c:62:5a:68:7c:3d:ec:c1:8c:cd:ad:01:
         8c:fa:e5:2f:e7:1a:f2:6c:de:56:81:2c:ab:a7:e2:9c:56:74:
         3c:49:e7:99:83:2c:d8:bd:bc:f3:a0:20:df:4b:a0:85:11:3a:
         67:9b:1d:98:54:14:45:1c:98:f1:52:16:ba:46:6b:a5:d9:98:
         91:2a:40:20:c2:8e:ee:34:10:c4:64:98:85:a3:b4:bc:60:fb:
         4a:2b:3f:83:a1:f9:ae:7f:02:ef:3c:56:b8:b5:aa:27:99:f2:
         fd:e0:65:b1:89:3e:e7:5d:9b:db:59:83:b3:d3:10:7a:39:f9:
         9f:c9:77:d8:18:bc:03:0c:2c:13:de:46:e6:ff:64:82:dc:7c:
         61:58:85:6b:b5:76:73:a8:1e:2f:67:7e:88:b4:1b:0a:06:0e:
         7a:29:f6:b8:54:5b:41:c4:e1:e0:b6:90:3c:a4:32:26:da:d7:
         43:91:a2:c5:d1:5e:2a:ac:7f:3e:3f:04:18:03:1e:b0:f2:85:
         0d:1e:01:ad:4c:6c:01:85:97:50:8b:ec:d2:be:96:d8:62:0d:
         b5:f0:68:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----