Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
File:                     Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft (raw, json)
Hash identifier:          dTi7Nu+cubk0aiT7ZgxN33KJks5FO41qxfFY+TJsYec=
Subject key identifier:   18:D0:5D:E7:DB:60:31:4F:D2:E9:94:D3:63:E2:15:68:71:BF:F6:3F
Authority key identifier: 42:D8:5C:6F:E4:3C:DD:D9:C3:42:A9:91:23:93:9E:F6:D1:0B:96:61
Certificate issuer:       /CN=F36B95DEAF/serialNumber=42D85C6FE43CDDD9C342A99123939EF6D10B9661
Certificate serial:       0931
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
Manifest number:          092D
Signing time:             Wed 28 Oct 2026 01:52:06 +0000
Manifest this update:     Wed 28 Oct 2026 01:52:05 +0000
Manifest next update:     Fri 30 Oct 2026 01:52:05 +0000
Files and hashes:         1: Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl (hash: dSnO2Iaci638t72OKSCYkb24Of0ixO+3xubxzDiET0U=)
                          2: 45832B683A1811F0A5162699DAE4EC9C.roa (hash: bH1V9seBQy1bZT+/9CsQ550EAlVYbRUIjhOsEaER3S4=)
                          3: 5FD871EACA5F11EA8E777586F8AEA228.roa (hash: EtblfigLNGF6wfw5nHmJIbAVHju/Amjjjou8s+nuYu4=)
                          4: 9A1972CECA5E11EAA7968D85F8AEA228.roa (hash: o/3b7bz/I2GIF7K8ptLx/xwnuWsVO1fKO4zNdB3TrJA=)
                          5: 3B0F41F6119A11EE83C1C7674AD9E6FC.roa (hash: Akb8hG2TQ9VVrsrKElxgh/Wgpez3UXugTuk8ANcj3VE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2353 (0x931)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B95DEAF, serialNumber=42D85C6FE43CDDD9C342A99123939EF6D10B9661
        Validity
            Not Before: Oct 28 01:52:05 2026 GMT
            Not After : Oct 30 01:52:05 2026 GMT
        Subject: CN=6ae15546-a013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:03:62:7e:bd:2b:cd:c5:0e:26:1e:dc:b3:ed:
                    b5:b3:6d:73:64:51:a3:6e:97:55:be:f7:7a:a7:04:
                    8f:d0:da:03:4f:8f:f8:53:8a:59:12:98:b2:f5:1e:
                    51:bf:57:2b:56:a2:64:13:fa:35:59:d2:44:dc:1c:
                    c7:17:78:32:21:66:70:d9:14:92:02:af:a9:3a:92:
                    fc:33:1e:ef:34:17:a1:f7:f5:56:0f:bb:3d:d5:a5:
                    6e:fc:dd:ae:bb:92:25:d3:86:e0:89:b9:b4:04:a9:
                    81:1c:a0:f6:f6:6c:92:69:cb:1c:b8:58:28:fd:b5:
                    d2:bc:0a:1d:d2:30:fb:b3:6f:ab:25:41:69:11:d5:
                    c4:20:34:9f:25:57:47:bc:1b:ca:10:0d:f2:a9:f4:
                    04:ab:ed:12:0d:dc:82:3d:ce:c3:08:7e:25:24:c3:
                    a8:9d:89:d3:3f:3e:57:08:b9:7e:b5:f6:e8:e0:54:
                    be:ae:af:22:a2:05:3d:bf:7e:90:65:3a:c0:a4:3b:
                    49:25:f5:5a:84:5a:f1:39:36:79:4e:e6:08:f5:f5:
                    1e:28:f4:7e:42:0f:a4:1f:0c:45:dc:a0:69:3b:78:
                    83:00:1c:82:54:f9:32:f6:1a:55:b5:ef:d3:cc:63:
                    2b:2c:b4:9f:09:c5:de:15:b5:65:67:2b:0c:36:ec:
                    f0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:D0:5D:E7:DB:60:31:4F:D2:E9:94:D3:63:E2:15:68:71:BF:F6:3F
            X509v3 Authority Key Identifier:
                keyid:42:D8:5C:6F:E4:3C:DD:D9:C3:42:A9:91:23:93:9E:F6:D1:0B:96:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qthcb-Q83dnDQqmRI5Oe9tELlmE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B95DE/0142933CCA5E11EAAA82C884F8AEA228/Qthcb-Q83dnDQqmRI5Oe9tELlmE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:a7:ac:64:1c:f0:93:db:15:5c:04:57:45:1e:f1:5b:99:e5:
         bb:1f:bd:80:32:98:0a:1a:cd:8e:3b:4e:0b:6e:5f:33:a0:a6:
         80:c0:6b:87:36:6c:03:38:74:b1:6f:b7:03:ba:68:f3:9a:05:
         2e:ce:2e:d6:a3:47:b7:87:60:bb:59:80:81:f5:4d:fa:29:53:
         b0:8c:1c:0a:c8:88:b6:9d:56:0b:75:65:b0:da:bc:88:fc:93:
         38:ed:ca:fe:36:af:c9:7a:e4:27:40:e1:7d:a9:db:32:24:9c:
         7d:33:3a:ce:21:66:47:44:0a:e1:85:e2:13:ff:35:8e:f8:ab:
         55:d5:59:06:a4:47:2b:ac:50:d3:b5:5d:6f:1d:68:85:30:f8:
         d8:0f:2f:7b:c1:4d:4e:ff:61:06:8d:e5:0d:6c:b6:c6:4c:51:
         a4:b9:20:a8:6e:67:94:28:89:93:48:19:37:cc:95:78:88:ca:
         d0:58:e0:a6:fc:9a:79:d9:bd:ba:26:6c:6e:40:95:05:9b:df:
         ac:b0:65:c6:1d:da:ad:11:21:19:bf:7c:b0:7f:97:07:f1:7a:
         29:15:f1:1f:91:27:d8:c7:72:89:80:3e:4a:9d:c5:3a:8b:cc:
         af:04:b4:fc:cc:3b:b8:cc:07:c2:25:48:b5:71:8a:ad:f3:74:
         e8:b7:1a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----