Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
File:                     ffDZZHEjlpmcF8_uBLpMLB39GqE.mft (raw, json)
Hash identifier:          csKuXQn83GhPCwhmgsvuhCsFROdtZn2mtHOh0fFpPcY=
Subject key identifier:   71:64:DB:33:E4:7F:19:21:A4:CC:E3:EB:F2:B6:3B:34:7A:D2:8B:EB
Authority key identifier: 7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1
Certificate issuer:       /CN=F36D03D3AF/serialNumber=7DF0D964712396999C17CFEE04BA4C2C1DFD1AA1
Certificate serial:       0410
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
Manifest number:          040F
Signing time:             Sun 25 Oct 2026 03:56:29 +0000
Manifest this update:     Sun 25 Oct 2026 03:56:28 +0000
Manifest next update:     Tue 27 Oct 2026 03:56:28 +0000
Files and hashes:         1: ffDZZHEjlpmcF8_uBLpMLB39GqE.crl (hash: /Iq0aLxMBtvu5j4JIJougc+153xOpGnusqHLvn1+nFo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1040 (0x410)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D03D3AF, serialNumber=7DF0D964712396999C17CFEE04BA4C2C1DFD1AA1
        Validity
            Not Before: Oct 25 03:56:28 2026 GMT
            Not After : Oct 27 03:56:28 2026 GMT
        Subject: CN=6add7ded-0e6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:34:dd:35:23:3d:9c:7a:e2:55:96:74:2b:
                    62:9e:57:9e:48:85:68:2d:84:6f:ed:77:ef:60:b0:
                    96:ed:e6:0b:a0:c7:95:3d:fa:d1:78:93:0d:8f:85:
                    2a:eb:f2:6a:43:6b:3f:b9:25:96:d4:9a:5e:03:2c:
                    a6:4c:0c:61:f6:e4:2b:f8:17:a6:c9:8f:af:21:7d:
                    9c:ea:29:6b:04:2c:ed:3a:6f:1a:ef:bf:38:f0:b8:
                    3a:60:fc:b5:ec:f6:8c:e9:77:67:9f:9b:72:02:38:
                    0a:8e:32:2f:23:13:2a:de:6c:93:58:c2:a4:6d:15:
                    0a:0f:b7:4f:c4:99:8d:d5:d2:32:33:e4:80:41:eb:
                    8c:fd:2d:9b:4b:39:ad:ae:eb:8c:35:23:0f:64:59:
                    60:0f:b4:84:5d:c3:24:fb:e7:a7:d1:7b:17:6b:29:
                    28:0d:e3:a2:30:d2:96:f7:09:f3:3d:0f:15:ea:89:
                    18:c7:37:ea:7e:76:90:f1:02:3e:5a:6e:ad:d0:df:
                    13:5f:9a:7b:2d:49:0c:bb:30:87:2f:73:a0:de:5f:
                    0a:d7:50:a1:35:4f:ba:79:1b:39:b4:c5:f3:5d:67:
                    74:c0:5c:95:06:ff:1f:9d:9e:a9:83:cc:af:e6:ca:
                    0f:4c:f1:6e:57:66:e5:5b:e7:11:1c:d2:2c:95:a1:
                    bd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:64:DB:33:E4:7F:19:21:A4:CC:E3:EB:F2:B6:3B:34:7A:D2:8B:EB
            X509v3 Authority Key Identifier:
                keyid:7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:62:e6:ab:7d:11:e1:54:8f:c7:0e:f9:b3:6c:43:e8:ae:df:
         01:0d:17:7b:04:6a:06:af:e1:56:0f:96:cd:c8:52:99:c6:b4:
         34:af:ef:84:e9:f3:d2:29:ae:3d:54:f4:b6:0c:38:0b:4a:d0:
         78:c2:64:fd:cf:e2:98:65:b2:79:58:b3:1f:6d:40:59:13:9b:
         e5:51:ad:86:15:f8:52:cc:c2:77:21:eb:28:06:35:23:27:83:
         db:0c:ad:cf:e2:ad:a2:07:5c:dc:ff:6e:fd:de:70:da:07:c8:
         8c:20:6e:df:5a:97:aa:9c:d6:cf:4f:4a:d6:c0:ef:37:36:38:
         00:4e:58:58:e1:06:21:c1:02:aa:59:75:2d:2a:b1:12:c6:5d:
         0c:50:96:86:66:f8:6e:7c:7f:81:16:fb:c2:e7:47:45:ed:9f:
         8e:b9:35:fc:58:61:dd:b6:94:db:cc:b5:a5:32:32:8e:4c:c0:
         f7:82:69:eb:ff:8f:ba:41:c1:21:0b:2f:d6:4f:32:1a:67:30:
         b2:f8:11:c9:98:2d:75:fc:8e:80:fe:65:4d:d2:d4:c8:9d:fa:
         cd:6d:dc:bb:d3:f7:89:b4:de:a7:d5:11:b1:81:d0:03:a5:23:
         ef:81:e8:44:79:65:d4:2e:0d:f7:c8:b6:f6:d8:df:67:47:22:
         d2:82:de:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----