Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
File:                     Y8NA4QrXVoDHqjzdANvkjX1BneY.mft (raw, json)
Hash identifier:          1aBfGfUN/qtEKaFsltiEnS9U0PJUia69VZGI0c/QyfM=
Subject key identifier:   DE:5A:59:1F:4D:E9:CC:1A:30:C4:67:37:C9:12:46:85:6F:3E:FB:41
Authority key identifier: 63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6
Certificate issuer:       /CN=F36CA1C4AF/serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
Certificate serial:       07AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
Manifest number:          07A7
Signing time:             Sun 25 Oct 2026 02:19:18 +0000
Manifest this update:     Sun 25 Oct 2026 02:19:17 +0000
Manifest next update:     Tue 27 Oct 2026 02:19:17 +0000
Files and hashes:         1: Y8NA4QrXVoDHqjzdANvkjX1BneY.crl (hash: qUqlhdJDWxRYkcu0Mc4zWFIF8j1GzVt4Hh8D4kcjxGc=)
                          2: 12FA27E489D811F19701BFF4CE1D38B0.roa (hash: LY+NWD1EssK+6oNG5KycNAcxR9ZpdqwYoH7grfnnA3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1962 (0x7aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CA1C4AF, serialNumber=63C340E10AD75680C7AA3CDD00DBE48D7D419DE6
        Validity
            Not Before: Oct 25 02:19:17 2026 GMT
            Not After : Oct 27 02:19:17 2026 GMT
        Subject: CN=6add6726-2f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:24:5c:ad:40:e5:e8:1a:b9:26:2d:63:4c:53:
                    fa:de:a9:04:39:52:f5:09:42:e4:78:cb:3b:50:ff:
                    88:4e:35:34:8a:e2:3c:13:13:96:94:60:33:89:c3:
                    56:01:fc:7d:65:3c:4a:fb:97:e5:78:f8:76:41:f7:
                    64:cc:d0:24:ba:27:ae:d2:d4:f2:18:98:93:88:89:
                    fa:78:10:93:1a:bc:1f:10:20:8e:9f:7e:63:4c:e7:
                    60:1b:61:eb:a4:a6:91:fe:e6:ed:ec:57:30:9b:49:
                    23:7a:09:11:25:fa:6b:8a:cb:b8:1f:f8:85:c2:eb:
                    4f:55:61:b3:f2:68:38:5b:4b:af:a9:c1:df:ef:27:
                    61:d3:df:a7:31:e2:52:71:37:39:48:3a:d5:af:b3:
                    4c:93:1d:23:b9:47:7e:d1:71:8d:0a:4d:a8:9d:84:
                    a9:d2:b1:b9:30:5e:b6:55:18:a8:2e:b9:b2:26:4c:
                    23:a4:7e:ad:32:4e:70:db:eb:e4:ab:41:98:6a:00:
                    15:5b:7f:2d:46:66:74:51:8a:77:f7:75:73:62:48:
                    d8:8e:3d:f6:08:32:a3:eb:89:26:89:16:a0:58:39:
                    ad:7d:92:4a:7e:ec:b0:5c:f9:f6:8a:ca:ea:d1:0f:
                    c6:c3:aa:11:b2:aa:ea:6d:90:c2:1a:75:0d:92:64:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5A:59:1F:4D:E9:CC:1A:30:C4:67:37:C9:12:46:85:6F:3E:FB:41
            X509v3 Authority Key Identifier:
                keyid:63:C3:40:E1:0A:D7:56:80:C7:AA:3C:DD:00:DB:E4:8D:7D:41:9D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y8NA4QrXVoDHqjzdANvkjX1BneY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CA1C4/17267A9AF42B11EB91881E34D8A014CE/Y8NA4QrXVoDHqjzdANvkjX1BneY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:90:a8:34:83:23:92:a4:c1:42:dd:22:4d:93:03:3b:59:d5:
         5c:05:8d:30:a4:7c:79:9f:12:ba:5c:18:dd:31:c8:8d:f2:f6:
         41:f8:c7:f2:74:b6:a1:14:b6:7a:2e:a4:b3:62:9b:eb:98:40:
         f6:fe:dd:94:f9:c2:3d:c0:41:f7:bb:16:f0:d9:f7:5e:2f:97:
         2e:9e:87:94:c9:1a:77:45:cb:00:61:44:08:f2:e7:3b:49:33:
         55:bf:59:19:5f:e7:45:ef:91:0e:2b:43:87:7f:7c:56:3b:88:
         0a:e2:80:6a:6d:28:6e:dc:29:23:82:af:7b:85:b8:69:89:42:
         64:7d:c4:5d:23:01:7d:4b:21:ee:e7:46:26:8e:22:80:99:6b:
         3a:1f:01:bd:d9:f0:5d:27:8a:33:a3:aa:a6:ea:f2:da:6f:17:
         da:f9:e7:b9:ea:8e:6f:b4:f6:40:f8:7f:6f:29:17:9b:d0:69:
         68:70:76:56:b7:99:66:c2:c2:7f:12:95:43:68:e9:b7:5f:e4:
         95:7d:49:97:d0:4b:52:cc:00:19:86:c5:fb:69:52:a8:07:72:
         85:01:e3:2b:7e:90:60:7a:c5:40:69:f9:15:9b:13:f9:ae:b4:
         da:8b:92:d3:38:e1:29:11:a5:7d:ca:4f:74:3c:c9:c2:36:37:
         db:68:72:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----