Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
File:                     s14-lHqUdaFnx9_wp9CQLIZFgy0.mft (raw, json)
Hash identifier:          AaIP8jxziJHfyiK5R+gHFjO1gV5GjEGGZknVebdvLBQ=
Subject key identifier:   B3:10:2F:03:93:1C:B2:50:C4:EA:C2:7A:3A:52:93:34:48:47:EC:6D
Authority key identifier: B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D
Certificate issuer:       /CN=F36B6ED4AF/serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
Certificate serial:       01BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
Manifest number:          01BA
Signing time:             Sun 18 Oct 2026 05:02:33 +0000
Manifest this update:     Sun 18 Oct 2026 05:02:32 +0000
Manifest next update:     Tue 20 Oct 2026 05:02:32 +0000
Files and hashes:         1: s14-lHqUdaFnx9_wp9CQLIZFgy0.crl (hash: UY0Kpl3FpVrevaob8vZIrGhC00vZhuks8UqEs+owIcU=)
                          2: D8A71DD2749111F1802E4BF8CE1D38B0.roa (hash: JTzpFHYOsn2jAqwAVCYXPu+sTMxl0KhIneHn4a+QTiE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 20 Oct 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 444 (0x1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B6ED4AF, serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
        Validity
            Not Before: Oct 18 05:02:32 2026 GMT
            Not After : Oct 20 05:02:32 2026 GMT
        Subject: CN=6ad452e8-c499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:86:83:9c:95:de:ad:bb:f9:33:c1:b4:78:b3:
                    70:55:3b:8c:c6:06:d0:2a:97:1e:4a:53:36:47:9f:
                    45:ee:88:c4:8c:fe:79:47:c2:5f:f7:af:1b:d9:63:
                    bd:fa:d8:2e:92:83:aa:38:9b:93:16:2e:13:1e:c6:
                    94:9c:d0:91:d4:b6:7a:44:80:f4:81:00:44:73:46:
                    ff:76:df:9b:29:cc:4d:76:b5:34:42:5e:d2:ac:a8:
                    22:bc:20:29:14:76:6e:cd:c5:9b:80:85:b8:0a:2e:
                    e1:95:50:fe:25:f7:51:15:3f:be:9f:1c:d7:81:d4:
                    8b:42:b8:0f:06:7f:67:df:cc:87:5d:e9:a8:6a:4a:
                    d0:b8:e9:c1:45:82:9d:54:3d:36:ac:3a:df:87:f9:
                    d5:db:b0:d5:55:3c:f8:50:1c:df:10:b7:a0:c3:dc:
                    f3:a5:cb:83:f2:15:65:7f:1d:d3:db:67:7a:a4:03:
                    51:aa:93:3c:34:32:67:b1:f8:0a:4b:dd:c4:f9:33:
                    31:b3:f6:b2:ce:92:0b:62:d8:11:5f:66:38:e4:f2:
                    bd:fc:c6:0f:55:38:98:ca:d9:cc:8c:09:96:fd:47:
                    a0:e1:81:fa:01:e1:f6:b8:d6:95:ff:14:0e:67:97:
                    ce:ab:6b:3f:3f:79:db:11:8a:79:f8:f1:b6:0b:c5:
                    32:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:10:2F:03:93:1C:B2:50:C4:EA:C2:7A:3A:52:93:34:48:47:EC:6D
            X509v3 Authority Key Identifier:
                keyid:B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:84:9b:e4:50:ca:46:0c:13:94:09:80:f4:98:43:48:31:21:
         a4:f8:63:2b:3f:2d:b5:6d:95:f5:40:0c:05:54:56:59:9b:9c:
         2c:1d:d8:85:c6:f8:94:4d:35:df:78:e8:41:a6:04:09:7e:17:
         46:46:f1:69:0a:58:42:08:78:df:4e:45:a9:ae:62:ab:60:97:
         8c:3e:4f:0f:92:c7:a6:c3:ab:51:f2:f2:65:0d:b7:27:75:47:
         77:62:10:3c:76:4e:df:25:63:06:8e:b6:95:77:27:fd:fb:3c:
         1a:1c:26:21:98:a3:9a:cb:03:e0:e8:d2:4d:76:59:a2:c8:89:
         d4:90:fd:8d:5b:78:ff:4a:68:28:b0:66:99:3f:ee:91:0d:19:
         e1:d3:90:33:04:90:9e:cb:3a:90:98:c5:4e:5a:06:a7:b5:d5:
         f8:97:36:a0:e2:4d:49:49:b8:7b:09:39:8f:79:e8:b4:60:37:
         28:bf:82:cb:c0:e4:ab:a2:21:d6:95:be:7c:06:67:2f:47:79:
         86:65:8a:dc:ee:60:c7:d2:c2:a1:46:1d:4a:77:7a:f2:92:56:
         67:15:a8:9d:bd:fb:02:c0:f7:47:ab:b7:ee:d7:cb:dd:50:10:
         66:93:5d:42:ea:a0:06:fd:a1:26:40:d4:99:74:1e:b6:9b:d1:
         5f:bb:97:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----