Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
File:                     BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft (raw, json)
Hash identifier:          UBwx8o3wauhRm6bHaPq6AZvxaAXNrW8feU/KZqfAGyw=
Subject key identifier:   40:E5:1B:C1:91:85:48:35:07:E6:71:FE:8C:E9:55:E8:F0:1A:59:CC
Authority key identifier: 04:5B:52:50:43:CB:43:EE:AB:DA:7F:24:63:7F:40:40:89:19:B6:F5
Certificate issuer:       /CN=F36C72A2AF/serialNumber=045B525043CB43EEABDA7F24637F40408919B6F5
Certificate serial:       0136
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
Manifest number:          0135
Signing time:             Sun 25 Oct 2026 05:19:58 +0000
Manifest this update:     Sun 25 Oct 2026 05:19:57 +0000
Manifest next update:     Tue 27 Oct 2026 05:19:57 +0000
Files and hashes:         1: BFtSUEPLQ-6r2n8kY39AQIkZtvU.crl (hash: s6Vfypy84Vt/F0upbPZnOd+X5n1CZ3RU/+GGqnZsetI=)
                          2: 8EAA7E36DFD611F0BA2968D3DAE4EC9C.roa (hash: mhjtBp/gVSpcPcvCT9mQUfotVZ3SIRjPfe6SWCs+5dE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:19:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C72A2AF, serialNumber=045B525043CB43EEABDA7F24637F40408919B6F5
        Validity
            Not Before: Oct 25 05:19:57 2026 GMT
            Not After : Oct 27 05:19:57 2026 GMT
        Subject: CN=6add917e-c559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e5:e1:0d:ca:df:47:b8:5e:8f:41:04:31:fc:
                    5c:28:fe:a9:4c:66:7f:8f:cc:cb:10:79:e3:d4:5b:
                    cd:d9:fc:d2:e4:c6:bf:90:2c:f3:32:3f:19:a8:25:
                    c8:13:94:43:e3:b5:d2:41:b2:f5:39:a1:35:78:3f:
                    35:a1:e4:f4:a9:30:24:0a:38:05:30:11:07:43:54:
                    c1:8f:db:91:bf:2f:d8:f1:38:23:2c:dd:48:97:c0:
                    df:8f:33:bb:71:e9:82:92:a3:3b:5b:1c:3a:6c:2b:
                    93:7c:21:5c:46:af:d8:72:28:df:6e:b9:f4:8c:c0:
                    5b:54:5c:e8:83:b1:87:10:34:59:c4:fa:c2:d9:17:
                    81:a7:85:0a:63:60:3e:0e:29:48:1c:7e:21:ea:44:
                    8a:ae:c8:35:a0:5b:ad:3d:3b:9b:63:95:1f:56:e5:
                    9b:21:e8:a6:f0:a4:36:55:b6:a7:2c:8a:4c:af:f5:
                    e3:1a:4b:0d:36:05:b5:38:07:23:d4:f8:54:07:17:
                    55:7a:a5:9f:d3:ef:f6:2b:94:5e:58:58:10:3d:59:
                    67:a6:fe:22:ba:10:f1:0e:d8:9a:62:a3:51:c3:e3:
                    02:a1:d3:d6:83:54:f6:9d:ff:89:57:68:58:40:c9:
                    a4:45:07:82:1a:1a:89:83:ec:85:c8:79:dc:dc:55:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E5:1B:C1:91:85:48:35:07:E6:71:FE:8C:E9:55:E8:F0:1A:59:CC
            X509v3 Authority Key Identifier:
                keyid:04:5B:52:50:43:CB:43:EE:AB:DA:7F:24:63:7F:40:40:89:19:B6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:51:24:f2:ab:69:88:2e:d0:4d:30:56:fd:49:45:58:6d:93:
         14:99:d3:94:c2:3e:21:0e:fb:50:b4:05:c7:40:ee:3a:7d:0c:
         d7:a9:8d:61:cf:ab:84:5a:fa:cf:70:77:28:d8:3c:f9:b8:fa:
         fb:ea:cc:42:93:85:63:54:44:bb:8b:81:ac:c8:4a:12:91:59:
         49:eb:2d:7c:b3:c1:f6:de:b5:60:ed:54:be:2a:82:1e:8e:6f:
         19:99:03:50:a6:6c:21:10:90:12:e8:66:cf:72:90:04:04:14:
         bd:1d:b4:64:ff:01:68:cc:d4:0a:32:d1:54:95:bb:68:b1:2d:
         e7:cc:6b:65:9a:fd:f0:36:03:fa:02:69:53:f6:d4:d9:22:ae:
         2e:8c:f3:18:5b:48:b2:e3:99:00:88:c8:c0:91:3c:3d:62:7d:
         bf:36:25:98:63:63:79:da:bd:64:f7:2c:c3:01:3a:e9:5f:71:
         66:c2:1b:e3:5a:22:6e:32:c0:79:8e:5e:87:52:e3:d5:3f:05:
         aa:f5:fe:80:14:e8:51:d6:a7:0b:02:8e:70:19:d2:53:5d:f9:
         3f:b5:97:68:d8:4f:7d:1a:6f:e2:4a:cf:82:56:26:52:76:71:
         54:9a:28:22:7e:cd:bd:bd:55:a6:67:84:8c:83:82:90:0c:f2:
         bd:07:72:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----