Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
File:                     wDEb4pGTolThzVxYy7dlalArlVo.mft (raw, json)
Hash identifier:          HVkPlk0+RIu3rZ/f4eS+0KoU8uevxkX47xTwBW/aNVQ=
Subject key identifier:   A8:D3:CE:0A:57:E7:03:7E:D3:6A:D7:3D:7C:15:17:1B:BD:09:9A:8A
Authority key identifier: C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A
Certificate issuer:       /CN=F36C2FCAAF/serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
Certificate serial:       018D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
Manifest number:          018D
Signing time:             Tue 27 Oct 2026 05:09:40 +0000
Manifest this update:     Tue 27 Oct 2026 05:09:40 +0000
Manifest next update:     Thu 29 Oct 2026 05:09:40 +0000
Files and hashes:         1: wDEb4pGTolThzVxYy7dlalArlVo.crl (hash: fMHjWZ+ASap4amn9sqPaW58hMu1LRLr56bFjm9AsMjw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 05:09:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 397 (0x18d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2FCAAF, serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
        Validity
            Not Before: Oct 27 05:09:40 2026 GMT
            Not After : Oct 29 05:09:40 2026 GMT
        Subject: CN=6ae03214-b38d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f0:5f:a2:58:78:10:4c:69:b5:a1:8f:d4:4f:
                    b0:49:f3:c3:d8:d7:fd:66:cf:73:02:1d:ef:4e:37:
                    63:4b:7c:31:c4:a7:38:cb:04:db:59:27:e1:c5:fa:
                    13:63:bc:ce:86:f6:0f:09:f7:c2:7e:e4:66:8b:6f:
                    10:ed:dd:dc:bb:9c:01:c7:ba:29:f3:88:62:0c:a5:
                    2e:a4:55:1e:bb:60:c1:52:09:bc:03:80:df:a4:6e:
                    e4:f8:4f:0a:72:d5:6f:f0:3f:70:b3:92:b6:71:40:
                    23:9a:e1:fe:cb:d6:a0:d5:1b:3a:b6:1c:2f:05:ef:
                    aa:2c:0c:30:e7:ed:ea:dc:6c:cd:07:d6:0b:91:1a:
                    93:3f:f0:42:f3:a0:3d:90:f5:ff:22:0e:a0:17:5f:
                    e2:f8:c7:93:f0:f2:b2:94:13:0f:83:b2:f8:b4:07:
                    d7:5f:d0:cb:d5:c2:e3:78:40:a0:9d:55:dd:f3:9a:
                    61:89:1e:29:45:35:93:ca:6c:45:97:35:fd:4d:2e:
                    ee:14:61:f1:b6:f8:50:97:0d:cc:35:35:b3:03:b7:
                    05:51:96:01:5a:64:d7:f6:3c:9c:26:65:86:43:06:
                    7c:01:ca:84:ca:d2:c3:6e:62:be:ec:4b:1f:98:6d:
                    41:68:e0:1b:44:32:80:65:f4:cf:58:b7:ba:6d:8a:
                    84:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D3:CE:0A:57:E7:03:7E:D3:6A:D7:3D:7C:15:17:1B:BD:09:9A:8A
            X509v3 Authority Key Identifier:
                keyid:C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:bf:0a:33:a0:c0:b5:44:1d:ba:4f:a5:59:d3:eb:95:4b:72:
         65:cc:b1:45:96:39:34:2b:93:e1:6b:05:d6:8c:7a:7f:3f:cf:
         c4:f3:a1:f3:fd:80:9e:a4:54:4c:bd:c0:22:71:96:f6:80:f4:
         9a:7c:57:1b:2c:18:1b:a6:8c:0a:00:b8:f8:1a:8d:48:43:08:
         0d:f4:78:7b:c4:41:9c:a2:6e:2a:d6:c6:b5:47:46:83:8f:dc:
         29:6d:e6:b2:2c:c5:63:e1:d6:fa:7a:4f:2e:24:7a:f0:2a:7a:
         4e:12:91:04:e4:ea:06:74:bf:e0:12:28:ef:0b:b3:33:34:1d:
         8c:cd:c0:c6:64:af:d1:98:84:28:0c:7e:8d:a5:af:85:a0:b7:
         7b:94:aa:d4:1a:03:b0:4c:78:eb:39:d1:42:8a:65:f5:6d:d5:
         8e:1f:e4:9c:12:13:42:08:61:ce:91:81:13:a8:61:51:c0:f8:
         97:7e:c7:00:27:d5:10:09:5f:9f:8b:d0:1d:d0:33:97:91:ff:
         a9:d9:8c:c1:c9:94:47:e5:c7:60:35:0b:f4:c5:10:77:0b:83:
         2a:3c:dd:49:8a:27:65:d2:41:57:b1:51:3a:4e:da:ac:c2:95:
         e9:bf:82:cc:e9:ae:99:24:cd:c0:f3:c9:c4:1c:77:4c:34:7f:
         84:2b:a4:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----