Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
File:                     RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft (raw, json)
Hash identifier:          70qqwOEu71AU7N3f9glIFhGF/cv3wTOXT0NPV3vMWRQ=
Subject key identifier:   2B:2A:03:31:DC:EA:DF:AC:D6:5C:C0:AE:C9:61:0E:1A:1B:EC:2B:A2
Authority key identifier: 46:56:97:35:11:59:D1:41:E5:49:2F:8D:DC:00:11:71:F6:D1:E5:F2
Certificate issuer:       /CN=F36AA372AF/serialNumber=465697351159D141E5492F8DDC001171F6D1E5F2
Certificate serial:       0165
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
Manifest number:          0163
Signing time:             Sun 25 Oct 2026 05:14:04 +0000
Manifest this update:     Sun 25 Oct 2026 05:14:04 +0000
Manifest next update:     Tue 27 Oct 2026 05:14:04 +0000
Files and hashes:         1: RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl (hash: KR3d4FqmFISZTl4aJ5txV+qecGJKR3pIyx+43/Rn28w=)
                          2: 5771723CBFCC11F0B32C4386DAE4EC9C.roa (hash: GFNOWIn+BnzxN06/P09ij0NnM/A7yIAgr7oflS33glE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA372AF, serialNumber=465697351159D141E5492F8DDC001171F6D1E5F2
        Validity
            Not Before: Oct 25 05:14:04 2026 GMT
            Not After : Oct 27 05:14:04 2026 GMT
        Subject: CN=6add901c-cd89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:68:84:57:79:33:fc:1d:1b:21:14:30:67:a7:
                    60:27:8d:78:37:4f:99:dd:94:61:93:01:66:ab:3e:
                    52:a8:bb:c7:35:d5:bc:9a:43:32:e3:49:a9:8c:39:
                    be:c2:9e:5d:a5:d0:83:3e:70:cb:fd:43:75:22:dd:
                    46:66:3d:98:10:fd:01:de:b8:71:11:c9:6a:5d:98:
                    fd:bd:c9:5f:d0:95:ae:db:6c:05:63:ef:e7:02:74:
                    25:d6:a4:1f:7c:47:ad:7c:5b:b5:4f:31:00:f0:99:
                    84:f6:a1:19:d2:16:63:ea:85:73:98:b5:4b:f6:ad:
                    13:a1:a5:08:b7:19:c4:d9:83:62:44:ac:37:b2:5d:
                    c1:fc:60:fe:3e:46:92:ff:94:09:d5:6e:77:db:8f:
                    5a:8c:a1:62:fc:f5:6e:60:0e:4a:91:7e:fb:3f:ca:
                    7d:88:ea:82:24:5a:56:79:85:db:03:e0:47:db:1e:
                    c1:6e:3e:ce:e8:33:4e:c8:a9:66:ad:7d:97:00:7f:
                    be:eb:a6:aa:18:31:a4:a7:7e:66:24:4a:42:a3:3c:
                    da:43:4a:5d:90:b6:53:84:c6:75:65:d4:94:ed:f6:
                    c4:24:48:9c:3d:12:96:39:c1:49:2b:57:ef:f7:a0:
                    e2:d4:3d:d7:5c:39:e1:75:4f:f1:6d:64:13:c2:5a:
                    21:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2A:03:31:DC:EA:DF:AC:D6:5C:C0:AE:C9:61:0E:1A:1B:EC:2B:A2
            X509v3 Authority Key Identifier:
                keyid:46:56:97:35:11:59:D1:41:E5:49:2F:8D:DC:00:11:71:F6:D1:E5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:17:b2:b9:a1:41:db:77:b1:68:45:53:c3:c1:05:01:3c:b6:
         dd:1d:8a:b0:63:e3:a2:e6:39:d1:1d:cd:4f:d9:97:33:ce:71:
         aa:b7:6d:ac:12:32:1b:4b:b6:5e:8c:f2:26:8b:2b:c3:2d:55:
         bf:03:1f:c2:1e:ab:ed:7f:39:f1:77:c2:fe:09:d0:24:26:43:
         e0:f8:fa:24:ee:52:d1:ea:69:0c:1f:93:e3:d2:e9:ae:2a:65:
         c6:63:fe:05:b5:6d:32:ba:1a:d5:fe:53:1b:c2:c7:49:63:f2:
         73:91:af:d6:b0:76:15:9f:04:19:10:3d:ca:c2:c7:40:10:8f:
         34:cb:ca:1f:63:f8:bb:8a:84:a5:14:c7:d0:7f:8e:3e:1b:29:
         bc:3e:dd:19:01:34:38:27:ec:3d:77:09:df:7d:87:49:46:33:
         c9:af:29:65:e7:2c:16:97:ea:7d:a5:76:bf:3f:15:7e:fc:73:
         53:f9:88:4f:14:9d:8d:00:20:bc:bb:1e:10:e6:6f:ea:29:d4:
         b4:3c:c9:d9:85:d1:fd:22:ff:48:08:72:5c:8f:22:54:2a:be:
         a1:f3:58:ee:28:12:f9:b0:14:f4:41:af:b9:ea:e4:47:63:95:
         6b:86:81:f0:f5:f5:61:8a:52:6a:6c:5c:ca:bf:da:2d:0e:0a:
         1d:8c:00:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----