Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
File:                     zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft (raw, json)
Hash identifier:          b7wszOJiPt9SWQJG5RUaGZkxJzwZIQv4smdXJu49MfY=
Subject key identifier:   A4:B5:99:14:2E:7D:9C:72:C8:F3:74:69:37:E9:B1:76:D7:A0:84:D9
Authority key identifier: CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4
Certificate issuer:       /CN=F36C3DC5AF/serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
Certificate serial:       089F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
Manifest number:          089E
Signing time:             Tue 27 Oct 2026 01:56:07 +0000
Manifest this update:     Tue 27 Oct 2026 01:56:06 +0000
Manifest next update:     Thu 29 Oct 2026 01:56:06 +0000
Files and hashes:         1: zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl (hash: RjLITj+I6YbuzwBZInhAt7k+0Nba7PAhUN9rCobV9Yw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 01:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2207 (0x89f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3DC5AF, serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
        Validity
            Not Before: Oct 27 01:56:06 2026 GMT
            Not After : Oct 29 01:56:06 2026 GMT
        Subject: CN=6ae004b7-3884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:c0:91:a6:b1:32:24:82:39:aa:61:09:6c:
                    bc:df:73:9b:d5:5c:93:bb:11:21:be:52:5e:c9:df:
                    7c:04:f0:f2:b4:32:ae:90:03:99:d5:38:53:22:61:
                    ee:6d:d7:15:3a:e4:35:b0:d5:86:d1:aa:97:ef:ef:
                    2f:95:ee:9e:24:ba:4c:09:16:e7:cd:09:a1:5d:92:
                    a4:ea:49:70:9e:39:86:71:c3:e5:70:e4:9c:fe:2a:
                    49:de:32:45:ba:dc:9d:62:36:90:ef:c6:47:5d:27:
                    7e:3d:2b:4b:64:b5:a9:4f:16:53:fb:06:b4:5e:81:
                    09:07:f9:20:9d:3d:0d:b3:b4:ae:0c:22:63:e1:d0:
                    fb:5c:76:fb:6f:55:98:2d:d8:c5:84:61:da:ff:16:
                    46:16:46:33:f0:1e:19:f9:20:8f:bf:f4:47:0f:5d:
                    fc:c9:e0:a1:be:80:6b:78:b0:83:4e:36:0c:49:d1:
                    92:aa:62:31:1b:ca:63:f2:28:69:57:45:12:f7:69:
                    f4:8f:1a:8e:ad:7a:03:15:90:ba:5c:ca:71:2b:2c:
                    e8:84:81:26:d1:b6:b7:e4:8f:6d:a6:5b:bb:c9:7b:
                    a7:85:4f:c0:7e:c2:5c:90:23:7f:38:4e:53:d7:e4:
                    58:34:3e:9a:82:3a:6d:3d:e3:2b:e3:db:cd:a0:08:
                    61:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B5:99:14:2E:7D:9C:72:C8:F3:74:69:37:E9:B1:76:D7:A0:84:D9
            X509v3 Authority Key Identifier:
                keyid:CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:8d:16:e7:1c:9c:6d:01:1e:b1:1b:51:44:fa:e8:f4:bd:2a:
         d5:aa:29:6e:8d:5c:aa:56:61:80:51:0a:10:4e:f4:ea:96:dd:
         f8:3a:ba:5f:b2:f1:bb:5f:cc:cd:c9:96:f8:9f:ca:4e:e8:08:
         71:48:00:d3:31:71:d9:c0:1a:0e:5d:20:1d:fa:5a:96:47:62:
         6f:ac:3f:c4:f4:65:94:59:82:4a:dc:be:b1:95:98:5a:5c:7b:
         8e:9c:7d:d7:bc:07:a1:44:d7:11:e2:48:76:14:21:c5:a5:f1:
         26:70:31:c6:9f:6a:12:42:65:04:0e:25:d1:42:72:5b:be:cf:
         a1:20:6a:c4:dc:bd:ed:fd:ea:c8:1d:e8:19:57:b6:12:24:b0:
         5c:54:e9:93:55:e2:15:9c:5b:4b:f5:74:3b:98:65:d8:3f:44:
         24:48:78:57:63:d7:b9:b0:f4:c9:f3:97:60:bd:6f:94:b1:54:
         99:cc:48:70:2e:ae:75:5d:09:af:fc:d1:cb:7f:6f:40:02:d1:
         4b:02:bb:7b:78:22:ab:4e:21:42:54:fd:dc:c2:01:65:e0:55:
         a9:c9:c1:95:5d:60:0b:49:ba:69:cf:52:cb:11:91:bf:f1:93:
         0b:7a:92:50:d4:7d:53:bf:5e:bf:10:47:6b:01:d1:41:be:69:
         8a:ab:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----