Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
File:                     G-LsVuSB2cQGqMGrnFIvumhbdwk.mft (raw, json)
Hash identifier:          Mej05MKIG7qfQuSyX57l0eRdq41s4R8g1/V5w6HGmEI=
Subject key identifier:   DC:B4:E2:2D:03:0D:DB:B4:3E:25:8C:D6:33:39:2C:29:49:FA:1D:56
Authority key identifier: 1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09
Certificate issuer:       /CN=F36C8DB2AF/serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
Certificate serial:       0BB4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
Manifest number:          0BAF
Signing time:             Sun 25 Oct 2026 01:15:56 +0000
Manifest this update:     Sun 25 Oct 2026 01:15:56 +0000
Manifest next update:     Tue 27 Oct 2026 01:15:56 +0000
Files and hashes:         1: G-LsVuSB2cQGqMGrnFIvumhbdwk.crl (hash: kUhSDZeFGapO/V0eSjT59FM70sTWXscIlWbChvVKr4k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2996 (0xbb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C8DB2AF, serialNumber=1BE2EC56E481D9C406A8C1AB9C522FBA685B7709
        Validity
            Not Before: Oct 25 01:15:56 2026 GMT
            Not After : Oct 27 01:15:56 2026 GMT
        Subject: CN=6add584c-d6f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b6:39:de:5f:2a:0d:12:b3:44:c9:a0:1e:1d:
                    81:3a:61:41:36:2a:62:23:84:f2:44:f1:6a:ca:88:
                    59:ef:fd:47:e0:0d:92:34:69:99:49:32:ba:33:46:
                    0d:c5:a7:d5:c4:4c:2c:3f:0d:b4:ef:a5:67:90:68:
                    4d:3d:b5:3a:a6:eb:7a:d7:15:e4:24:3a:26:9e:a6:
                    53:c6:6a:0c:ff:6b:cb:90:db:0f:23:d7:cd:38:ea:
                    b3:94:f8:6d:15:b7:89:05:16:af:7b:fb:0b:ac:9a:
                    29:a1:44:17:53:6b:ce:7f:fe:de:b5:77:21:95:f5:
                    b5:eb:c0:82:df:ec:53:49:29:81:3c:28:5f:74:ba:
                    22:3b:12:e4:96:b9:09:74:aa:92:87:ae:f0:52:1d:
                    db:30:9f:c2:58:5d:00:5d:08:de:1c:cb:1c:d7:f4:
                    42:1c:f0:36:71:ed:c1:5a:91:1d:94:f8:dd:2c:20:
                    d7:ee:50:9c:d0:eb:d2:28:6b:8c:f9:00:04:f1:98:
                    15:64:a6:35:9b:72:45:33:a8:98:bc:f2:4e:c5:8f:
                    8b:18:c7:a3:2d:90:cd:ce:cb:e0:5e:1b:22:85:85:
                    2a:52:27:bb:b8:4c:a0:57:dd:b7:b7:1d:47:94:f6:
                    ef:59:2e:2e:21:48:cc:7c:1b:cc:d0:ac:81:b2:4f:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:E2:2D:03:0D:DB:B4:3E:25:8C:D6:33:39:2C:29:49:FA:1D:56
            X509v3 Authority Key Identifier:
                keyid:1B:E2:EC:56:E4:81:D9:C4:06:A8:C1:AB:9C:52:2F:BA:68:5B:77:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/G-LsVuSB2cQGqMGrnFIvumhbdwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C8DB2/FEFAB188DC4111E8AF4EAF55F8AEA228/G-LsVuSB2cQGqMGrnFIvumhbdwk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ca:e1:81:54:2e:2a:41:90:17:59:8b:e7:e9:02:e3:3e:17:
         f8:50:9c:32:77:26:36:36:fb:af:cd:c8:f0:90:d6:aa:7d:a0:
         ac:30:7a:6d:0c:8d:45:03:98:d4:e3:68:f6:cf:a6:fa:c8:f8:
         64:b6:b9:a2:c8:c8:23:56:49:05:67:95:17:ab:cf:70:eb:6b:
         ce:b8:ee:f1:79:60:82:28:b5:5f:1d:90:1e:ee:9d:17:5c:30:
         ba:97:91:c3:73:92:31:0d:66:83:72:0f:d2:0d:80:cd:9c:de:
         a4:95:8b:4d:8d:84:bb:44:ad:77:f3:20:dd:bb:f6:da:29:62:
         4e:20:3e:4f:a6:65:fe:1b:de:0c:6f:a0:b4:39:33:14:cd:20:
         65:24:7f:23:26:0a:1c:d5:ff:7c:ad:e9:68:41:08:26:dd:1f:
         f4:43:c4:e2:22:2f:fe:71:27:d0:54:2a:51:53:5d:8e:81:bc:
         47:8a:1a:e9:25:60:94:ff:1d:c7:c6:69:6b:38:d0:78:92:ff:
         1c:c8:36:6d:b7:d9:ae:18:75:83:56:ca:26:70:60:28:c8:65:
         f2:87:e4:9c:1b:ef:7c:39:c9:ec:cf:37:bc:22:ab:d1:46:ab:
         e1:3c:9d:3f:14:cc:ba:ad:5b:d2:15:c9:0c:42:cf:59:35:5c:
         f9:6b:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----