Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
File:                     sOM0w8FyGlubyhiSUD6QUkaIKTo.mft (raw, json)
Hash identifier:          f3Muw9CIOeU+onwuCzff7Khg9s1yVsmpO1n6tVXlgiQ=
Subject key identifier:   03:F3:4D:CD:B6:58:F6:65:91:0F:43:B6:B8:CD:1F:DF:5A:67:DC:05
Authority key identifier: B0:E3:34:C3:C1:72:1A:5B:9B:CA:18:92:50:3E:90:52:46:88:29:3A
Certificate issuer:       /CN=F36B4C8AAF/serialNumber=B0E334C3C1721A5B9BCA1892503E90524688293A
Certificate serial:       0155
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
Manifest number:          0152
Signing time:             Sun 25 Oct 2026 05:16:52 +0000
Manifest this update:     Sun 25 Oct 2026 05:16:52 +0000
Manifest next update:     Tue 27 Oct 2026 05:16:52 +0000
Files and hashes:         1: sOM0w8FyGlubyhiSUD6QUkaIKTo.crl (hash: J/9O5yfJ1elnREyWbaYksqw1ugshQ9fh86+d6b4MgLg=)
                          2: A4A4E4084D5211F188138C06CF1D38B0.roa (hash: gD7Kk/4a3hegKXdJuc7Q/pHLiQqWezxiBlrC81KKIrQ=)
                          3: 4A0CDA10CC3C11F094748AE7DAE4EC9C.roa (hash: uoTxni0vC5SEB/kG6P4nz0RjmOt92nw/J4LO6zq7Ppg=)
                          4: AEBE6DA6CC3D11F0A0E3F5EFDAE4EC9C.roa (hash: IO+N7lJMSFwuh89yHL6Fm/wq2e70cnS2owajXPspnmI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4C8AAF, serialNumber=B0E334C3C1721A5B9BCA1892503E90524688293A
        Validity
            Not Before: Oct 25 05:16:52 2026 GMT
            Not After : Oct 27 05:16:52 2026 GMT
        Subject: CN=6add90c4-9e25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7c:c4:03:9e:81:ce:63:06:a9:67:e9:03:55:
                    11:b5:17:10:87:65:ea:1f:94:f5:5a:c4:18:0a:06:
                    55:8a:09:a2:0f:72:9a:da:f5:b1:3f:3e:b9:d9:4e:
                    93:34:67:25:bc:d1:48:8f:02:47:b6:8b:54:b2:eb:
                    b4:6a:eb:6d:eb:26:d4:99:b2:c4:48:26:e0:0f:01:
                    c8:15:34:86:90:a6:0f:00:b1:d2:43:42:af:08:91:
                    4e:e0:f2:20:58:de:1c:52:b9:0d:61:5e:44:bc:bc:
                    4e:6b:f0:cc:b3:da:9b:3b:06:0e:b9:5e:3d:81:bc:
                    20:38:1a:c5:b2:1f:d5:49:cf:08:31:eb:e0:b5:87:
                    03:b8:24:dd:0a:0f:ff:e9:98:a4:a1:c9:7f:b1:1f:
                    bb:9e:64:f6:8d:0a:08:63:e4:41:d4:cb:63:01:69:
                    98:18:93:11:e7:a5:3c:01:f8:8a:22:da:09:17:f1:
                    7d:2b:7a:ff:13:d4:1f:88:a8:72:66:4f:03:fc:14:
                    68:82:2f:34:7d:71:2f:c9:51:ca:d0:d3:6d:17:d6:
                    d4:7c:8a:7b:69:16:90:d1:4d:8f:5d:6d:ce:cd:16:
                    06:35:52:a2:7c:54:f6:80:3b:09:7d:be:b1:7a:1e:
                    f0:2c:92:de:02:cf:d6:dd:15:41:d6:dc:c2:3b:24:
                    24:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F3:4D:CD:B6:58:F6:65:91:0F:43:B6:B8:CD:1F:DF:5A:67:DC:05
            X509v3 Authority Key Identifier:
                keyid:B0:E3:34:C3:C1:72:1A:5B:9B:CA:18:92:50:3E:90:52:46:88:29:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sOM0w8FyGlubyhiSUD6QUkaIKTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4C8A/8F7B80A2CC3B11F09E4F4EE3DAE4EC9C/sOM0w8FyGlubyhiSUD6QUkaIKTo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d3:60:53:4c:84:9d:57:42:cf:d4:9a:fa:d6:0b:f1:30:a5:
         f9:e1:eb:f2:3a:4f:85:7d:47:46:d3:bb:92:dc:f5:78:d4:4b:
         b6:8e:20:5e:dd:02:97:7b:42:eb:b0:56:7a:2e:0d:a3:72:62:
         4f:2c:bb:58:91:08:ad:29:f5:ef:11:1e:49:58:8d:13:ac:5b:
         7d:3d:1b:f9:3e:83:9e:15:f8:80:25:f4:4e:92:5f:16:05:32:
         bc:49:78:8c:9c:78:f2:7b:dd:39:d4:eb:b1:a5:c7:31:a4:9d:
         8d:bf:cd:81:2a:5e:04:39:d6:ea:55:a7:ae:3c:07:bd:87:eb:
         46:86:34:5a:70:d7:34:e4:91:af:84:5c:9d:32:e9:e8:e7:a7:
         1b:66:c2:fa:63:e5:d1:09:12:dd:4b:c7:c7:49:9b:65:96:12:
         37:d1:be:c4:2c:39:f9:63:c4:b3:0d:f6:41:47:d6:24:b4:ea:
         3f:18:ca:82:a0:ac:3a:12:07:f3:4a:d6:be:d5:d1:2a:75:19:
         39:cc:79:3b:ae:58:51:fb:ca:66:d2:7f:f7:66:5a:f9:c0:7e:
         12:7c:0e:4e:99:52:41:e0:d1:1a:49:49:dd:b3:e6:55:df:d6:
         09:da:e7:39:21:22:8c:91:e5:e0:c6:42:6b:c7:b1:2e:75:d7:
         b4:57:f7:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----