Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
File:                     fzc4orKLb6wO4WjazaECCZH2Xv8.mft (raw, json)
Hash identifier:          qG88jF56UvPEyJ+0EFNSqQPfZElCXWPRse6NawSdp7M=
Subject key identifier:   6D:42:CE:6A:01:04:CA:86:FB:A6:AA:CE:A4:B6:61:A3:31:81:12:F1
Authority key identifier: 7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF
Certificate issuer:       /CN=F36CAD03AF/serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
Certificate serial:       04DE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
Manifest number:          04D6
Signing time:             Mon 26 Oct 2026 03:34:33 +0000
Manifest this update:     Mon 26 Oct 2026 03:34:32 +0000
Manifest next update:     Wed 28 Oct 2026 03:34:32 +0000
Files and hashes:         1: fzc4orKLb6wO4WjazaECCZH2Xv8.crl (hash: 2tyXGCBCppHCL+0YcQG2uzJeZLX4CCzFcrf4JnB0XHY=)
                          2: 5201D7B49AA211F0847D9CEFDAE4EC9C.roa (hash: vv3TG7X10dkDewJJBWp8gsrO41Ats4FLyzxkghQmX3s=)
                          3: 2A2938409AA211F0AC8E98EDDAE4EC9C.roa (hash: qOE+EV84QYKmUD93zBU7aMqugV0LjUqZj/XSzGnEmpw=)
                          4: FB21D3049AA111F0A09833EDDAE4EC9C.roa (hash: 2qR4wjqNuC0TKOwbykEt6Pca7LKb2L8DNkEqc+08Jrw=)
                          5: AFDCE496DD6A11EFB91A764C762E951A.roa (hash: LUqMxb0MwGP6MZT9i0MH7OuuoSQyIJFrnjoWDAeBNXw=)
                          6: 5101379C1F4311EE8FC7B9634AD9E6FC.roa (hash: 9vRfRWcOnYof6Mu0ENqhdmmo04buF4ccumW7t2r2a0A=)
                          7: 85AD2BD69AA211F0A03B72F1DAE4EC9C.roa (hash: kobMuaQNgwzOY1HkqprMAm4bLPBawaJ7hSf0Z9cXUEE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1246 (0x4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CAD03AF, serialNumber=7F3738A2B28B6FAC0EE168DACDA1020991F65EFF
        Validity
            Not Before: Oct 26 03:34:32 2026 GMT
            Not After : Oct 28 03:34:32 2026 GMT
        Subject: CN=6adeca49-b873
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:51:9b:64:5b:b9:1e:dc:c2:6e:af:a9:ee:26:
                    23:c5:26:86:6f:4d:21:04:82:d1:c7:75:6c:47:c2:
                    25:c0:fb:f8:d9:e3:db:95:f0:5d:ce:b0:1b:64:79:
                    61:6b:06:8a:77:bb:67:d9:85:e6:92:50:81:83:c8:
                    6e:3f:ef:8e:4d:f7:84:9b:29:ad:d2:22:6d:43:15:
                    b4:a9:4c:99:99:0a:c0:2c:d9:8b:26:d7:29:56:76:
                    a1:cc:4d:dc:d6:dc:52:00:94:5f:d9:5b:7a:21:5b:
                    3d:26:e3:72:3c:7c:64:5b:75:05:b0:d1:a8:fb:03:
                    30:c1:51:0a:58:f8:1e:0a:9f:dc:9a:ff:92:13:e1:
                    52:36:10:24:d5:bf:79:3b:89:78:8c:c8:88:85:28:
                    b4:97:c1:b4:2a:28:ec:bf:e2:f4:60:5e:55:1a:69:
                    cb:fe:9d:59:8b:13:54:c3:b3:b9:8b:35:14:62:2f:
                    5c:84:c6:f7:24:2c:1c:fc:e7:83:3b:27:e7:10:b3:
                    20:7a:23:dd:4b:bb:f5:57:c5:51:3a:94:d2:56:43:
                    49:8d:db:11:83:9d:d6:8e:bd:26:bc:f3:aa:33:1e:
                    1d:13:01:a5:d0:53:40:71:4d:f3:fa:b1:d7:18:8e:
                    b5:a9:38:96:c7:d4:a0:12:d3:f9:4e:6f:d0:9f:b8:
                    ea:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:42:CE:6A:01:04:CA:86:FB:A6:AA:CE:A4:B6:61:A3:31:81:12:F1
            X509v3 Authority Key Identifier:
                keyid:7F:37:38:A2:B2:8B:6F:AC:0E:E1:68:DA:CD:A1:02:09:91:F6:5E:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fzc4orKLb6wO4WjazaECCZH2Xv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CAD03/90CF9CCA1F4211EEB18184614AD9E6FC/fzc4orKLb6wO4WjazaECCZH2Xv8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:84:67:43:da:a4:b2:d0:40:a5:aa:f4:ef:3d:2a:b9:4b:d3:
         bf:01:e0:c1:93:1f:dc:c4:66:00:7d:f1:40:d4:d2:81:0a:7a:
         99:11:bf:2c:0e:f4:88:5d:ec:f6:c8:c4:bb:a9:5d:c0:57:cb:
         93:1f:d4:67:b9:e1:93:10:5f:4c:74:27:34:04:44:0c:cb:92:
         ee:8f:84:5b:f7:1f:7d:ec:0c:c4:81:e9:b3:cd:cf:85:3c:a4:
         df:4b:da:1c:03:63:39:6e:7f:37:c4:02:a0:74:21:26:98:2a:
         8f:cf:c4:f0:36:d7:d2:40:09:1c:10:19:bd:36:f6:0a:a7:4f:
         54:c7:5b:da:f4:c9:28:5c:51:4c:1d:36:5a:c3:d4:30:fd:7a:
         92:fa:c2:af:bd:fd:d5:b1:06:d8:4c:29:38:f0:04:0a:3a:64:
         fe:80:aa:4f:b6:27:45:bc:87:58:fc:27:71:9b:45:5f:ed:e1:
         d4:06:a5:cf:43:d9:3a:f6:20:55:db:6b:22:ed:15:b7:90:02:
         2a:c4:8e:e3:f8:b7:43:15:74:3e:42:0f:91:53:7b:ac:f2:ad:
         d3:06:f9:c9:46:07:4a:9f:5f:68:b0:88:fc:d6:38:bf:c7:58:
         62:4c:d3:c0:93:f2:f2:bd:ed:3d:db:03:47:8c:d2:68:9b:33:
         62:95:aa:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----