Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
File:                     IPoazDHazMuDL9LUtfzXWC-kIsk.mft (raw, json)
Hash identifier:          QJ95fnQRjM+5mI/gCuHyIDAS2YDx87Fh91dci6Gqrb8=
Subject key identifier:   65:A6:AA:CA:6F:AC:FF:0A:3B:DD:C4:C2:8B:9E:F5:11:68:CE:A8:EF
Authority key identifier: 20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9
Certificate issuer:       /CN=F36B2CCCAF/serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
Certificate serial:       02D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
Manifest number:          02D1
Signing time:             Sat 24 Oct 2026 04:38:57 +0000
Manifest this update:     Sat 24 Oct 2026 04:38:56 +0000
Manifest next update:     Mon 26 Oct 2026 04:38:56 +0000
Files and hashes:         1: IPoazDHazMuDL9LUtfzXWC-kIsk.crl (hash: kVqxG3FN8iETNoaCARdYPA3bfCbmUjVonh/G23O63xk=)
                          2: 8327C434A35411EF974E14A1762E951A.roa (hash: TgV6J8OnLK9ODPkaOzrwonQ7ArSo3b7jgatmRvGo6BI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722 (0x2d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B2CCCAF, serialNumber=20FA1ACC31DACCCB832FD2D4B5FCD7582FA422C9
        Validity
            Not Before: Oct 24 04:38:56 2026 GMT
            Not After : Oct 26 04:38:56 2026 GMT
        Subject: CN=6adc3661-8d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:5d:73:47:a8:1b:fe:3b:f6:70:c0:c4:19:
                    35:01:17:85:26:ee:dc:68:80:bc:7b:85:eb:6a:c0:
                    88:e6:3a:ce:45:15:02:05:dc:02:6e:24:01:04:0d:
                    cd:cd:44:ad:c2:68:a4:3c:3d:b7:f7:54:f3:24:8b:
                    8c:fe:6b:6f:c3:3c:3e:32:ee:7f:1c:01:c1:cf:6a:
                    b9:d3:e9:c8:8b:88:0f:30:0d:31:11:72:6b:ef:61:
                    6f:69:f1:0d:a4:97:85:02:fb:f9:97:3b:00:05:24:
                    42:97:6d:01:f1:53:aa:1f:c1:fe:c9:d6:f4:3d:2a:
                    a3:49:14:bd:fa:e1:4c:55:d2:0c:61:81:40:85:05:
                    7d:b0:2b:0b:db:d0:67:3d:f8:64:70:23:fd:5c:c4:
                    88:ba:a4:3f:5a:06:a7:a7:59:ea:b8:84:10:7b:12:
                    81:3a:7f:65:04:d4:27:3c:b1:f3:97:dc:e6:05:db:
                    69:27:4f:d8:73:0b:74:c2:11:36:f0:cc:7d:07:eb:
                    f7:68:1b:42:8e:79:04:08:e0:49:3a:19:41:a2:45:
                    99:3a:e4:37:74:84:a1:bd:e0:93:ef:f8:75:53:1b:
                    13:8d:72:c5:f4:b7:01:f8:ef:28:a0:e3:d0:57:8d:
                    1c:5f:a3:0e:ed:7c:83:3f:b2:0c:71:78:b8:59:e7:
                    9b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A6:AA:CA:6F:AC:FF:0A:3B:DD:C4:C2:8B:9E:F5:11:68:CE:A8:EF
            X509v3 Authority Key Identifier:
                keyid:20:FA:1A:CC:31:DA:CC:CB:83:2F:D2:D4:B5:FC:D7:58:2F:A4:22:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IPoazDHazMuDL9LUtfzXWC-kIsk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B2CCC/62285B28A35311EF9929879A762E951A/IPoazDHazMuDL9LUtfzXWC-kIsk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:fb:b3:20:4a:63:44:47:19:59:8e:c4:58:5e:47:bb:58:be:
         50:e7:5d:32:3e:db:e9:a5:eb:be:c5:c5:c6:16:ea:94:8e:a4:
         bd:88:ce:a4:56:15:b0:fa:c8:60:2e:e1:56:0a:a9:d0:e1:27:
         0e:37:b8:e6:b5:2c:73:f3:87:63:9e:f7:2e:4d:b9:ea:2d:bd:
         ae:b5:a9:ea:e8:5d:d3:49:74:bf:e3:18:5b:1a:7f:b2:91:90:
         d5:27:b6:ca:68:eb:20:7b:62:47:98:a4:8f:21:9a:78:90:7c:
         b7:97:59:2c:d7:f8:5c:fa:18:7f:5b:71:a6:85:9a:c0:b3:db:
         8a:ff:e6:c7:93:63:61:3f:f4:34:87:fb:1d:8d:6b:8b:7d:60:
         57:ff:01:5b:5e:45:f4:2a:91:bf:0e:6e:b3:d8:d5:a3:71:40:
         09:78:6e:40:62:f7:89:7b:83:c4:ea:5c:29:2c:5a:90:db:21:
         ad:03:b5:6f:9e:02:d8:56:82:de:d7:a4:fa:b0:d8:b0:00:1e:
         dc:cf:af:66:e1:8f:ec:6d:97:5b:22:f6:70:1b:5f:71:48:db:
         43:f7:63:bd:08:0d:98:6c:59:6e:79:49:83:27:eb:1b:31:f8:
         82:1f:6f:fa:71:8b:ed:a3:74:d3:34:fb:f2:3b:78:be:46:e3:
         13:5d:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----