Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
File:                     yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft (raw, json)
Hash identifier:          1qTrAxXA63fN+cN91y6bdy3YL85UD6Mm4nDBG+Nny2Q=
Subject key identifier:   9B:24:DE:A7:50:AE:8C:1E:78:44:75:50:D6:DC:7A:D6:6D:CD:93:0A
Authority key identifier: C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9
Certificate issuer:       /CN=F36C5C48AF/serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
Certificate serial:       020B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
Manifest number:          020A
Signing time:             Sun 25 Oct 2026 04:54:02 +0000
Manifest this update:     Sun 25 Oct 2026 04:54:02 +0000
Manifest next update:     Tue 27 Oct 2026 04:54:02 +0000
Files and hashes:         1: yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl (hash: L5JBDloj5ZlkNRAmv2Hl7uQmtHOtBFT/CQGUAMHnqTE=)
                          2: 7810FC3C3C6511F09E134B93DAE4EC9C.roa (hash: f1/GvpZGuXTR7gHR1RFHDPtCJrb5runsWbtXK95Q83A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 523 (0x20b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C5C48AF, serialNumber=C83FD0E15D143C37F9947497CF866F8FAE7470B9
        Validity
            Not Before: Oct 25 04:54:02 2026 GMT
            Not After : Oct 27 04:54:02 2026 GMT
        Subject: CN=6add8b6a-118f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:39:0f:3d:c4:ff:2d:4d:5b:d8:03:62:8d:6d:
                    87:6b:e7:5b:0e:35:0f:22:ec:53:6c:fc:86:96:22:
                    ea:14:90:79:16:5e:d8:12:9b:9f:25:33:08:0f:fc:
                    2d:e4:a9:72:1f:f3:ba:a2:b8:e6:e3:5e:82:af:c6:
                    a0:c6:19:14:48:ca:fd:20:65:e8:76:09:58:a0:a7:
                    64:42:bc:e2:eb:14:0a:92:64:a1:dc:8a:b9:f2:00:
                    68:31:a0:91:c7:40:2b:71:57:ea:9a:24:20:e4:23:
                    81:43:c8:6c:e7:72:b4:85:38:ed:96:66:7b:35:e3:
                    e8:08:11:d1:70:56:09:bb:00:a9:55:3a:f3:2c:f8:
                    b2:e5:10:dc:71:86:e7:25:0c:e7:c0:52:79:58:16:
                    0a:44:b4:cc:37:8a:e2:1f:d1:4e:3c:a2:64:f2:58:
                    4a:fc:99:92:3d:1d:1f:f5:af:ce:f7:5b:05:c3:cc:
                    4a:7a:de:f1:14:4a:9b:53:64:26:f0:b1:31:ce:5d:
                    01:89:53:19:d4:35:ec:a4:a8:e1:3d:d8:27:c9:51:
                    79:2c:79:5b:4c:f5:43:90:4d:0b:40:ab:fd:df:60:
                    a6:8b:51:ec:5e:3c:00:13:35:02:1a:ee:9b:ec:cd:
                    6a:98:02:d1:f9:88:74:12:4f:e0:b4:f8:93:04:6b:
                    f0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:24:DE:A7:50:AE:8C:1E:78:44:75:50:D6:DC:7A:D6:6D:CD:93:0A
            X509v3 Authority Key Identifier:
                keyid:C8:3F:D0:E1:5D:14:3C:37:F9:94:74:97:CF:86:6F:8F:AE:74:70:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yD_Q4V0UPDf5lHSXz4Zvj650cLk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C5C48/902C8B843C6411F0ADBE878DDAE4EC9C/yD_Q4V0UPDf5lHSXz4Zvj650cLk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:22:27:ab:3b:9e:de:bf:29:9c:3f:7e:47:20:e9:65:f7:f6:
         14:5a:46:1e:6c:b3:3d:e1:22:46:b5:86:6b:af:56:ea:ea:d2:
         c2:45:d6:a7:8a:9d:f0:f9:6e:22:4c:d7:68:cc:c2:da:92:20:
         64:1f:b4:86:a3:da:08:ef:de:67:40:61:97:8a:89:68:ff:d7:
         25:da:a7:42:d7:a5:f1:81:e5:8d:47:43:68:5c:e6:64:10:25:
         79:43:98:23:93:d5:7f:8f:de:eb:ba:a6:80:81:1c:e2:28:3b:
         17:47:d4:e9:fd:5a:1f:5b:7f:db:b7:09:60:3a:a2:76:37:6e:
         8f:c5:87:6b:e3:08:5e:21:16:96:44:b0:19:60:3c:e1:a7:5a:
         ec:bf:bd:16:5a:a0:d5:1e:48:37:ca:89:66:7b:52:4e:f7:12:
         71:b3:8c:7d:75:84:f4:26:77:f7:dc:92:ea:eb:c6:c2:ff:c0:
         7a:c4:06:3b:45:a2:41:01:54:91:7a:f4:44:25:f9:08:fa:f8:
         84:17:5b:37:c9:8c:45:4c:f6:71:ce:1a:2d:ea:2f:b9:5d:d0:
         e2:fd:ae:dc:83:f5:6e:dd:ef:3b:89:d6:79:86:14:f1:e7:6d:
         bf:0e:88:b5:70:cf:9f:c3:db:16:a7:f5:8e:c6:f8:d7:69:53:
         7c:55:86:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----