Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
File:                     hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft (raw, json)
Hash identifier:          kIYalqm7DlUTGc1Gj8HQwa+csXSXCaICfzyuuVPGqQw=
Subject key identifier:   D3:E0:64:1E:FE:93:4A:D9:44:04:BF:F1:05:D1:B7:25:5A:46:C2:CD
Authority key identifier: 86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5
Certificate issuer:       /CN=F36D8D30AF/serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
Certificate serial:       0570
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
Manifest number:          056F
Signing time:             Sun 25 Oct 2026 03:14:36 +0000
Manifest this update:     Sun 25 Oct 2026 03:14:35 +0000
Manifest next update:     Tue 27 Oct 2026 03:14:35 +0000
Files and hashes:         1: hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl (hash: fM2E7NZbdj5WPmYpuOSXT4bHxOkRO8if3Kd9ErAiLj8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1392 (0x570)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8D30AF, serialNumber=86964448775B2F8F86359D54168E220C1E871BF5
        Validity
            Not Before: Oct 25 03:14:35 2026 GMT
            Not After : Oct 27 03:14:35 2026 GMT
        Subject: CN=6add741c-3e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:87:d5:c1:81:0e:9a:e8:55:fe:ba:48:14:44:
                    df:17:fc:4a:47:cd:b1:f5:72:95:37:a2:20:14:da:
                    ac:c9:a1:1d:c1:5c:ea:a0:df:8d:0f:43:bc:b9:6f:
                    e9:b1:a1:e3:69:4d:8d:fd:eb:ee:b7:22:13:ea:a3:
                    74:6f:3c:d6:cd:6b:ca:75:b5:c0:62:3e:cc:d2:b6:
                    33:a3:1a:1f:61:89:b4:3b:86:9d:c2:25:a0:1c:4b:
                    e5:aa:78:1d:ec:13:42:7b:47:d0:2c:43:2e:da:c6:
                    5f:e5:4c:3e:4a:69:92:90:83:a9:06:43:79:27:3f:
                    f8:c9:6f:df:8b:b2:81:13:c6:48:ea:33:2b:9c:86:
                    b1:33:47:5d:57:90:40:75:04:a4:fd:e2:93:44:37:
                    24:30:ef:c2:cf:da:55:49:b2:51:cd:74:34:73:d0:
                    72:8c:d8:14:e5:d8:ac:f8:00:03:65:76:2b:f7:19:
                    1d:b8:eb:99:a7:4d:ad:33:81:79:aa:72:ce:91:36:
                    71:73:36:24:ae:1e:bf:31:89:a1:d1:6c:08:05:3f:
                    0a:b3:3c:7c:b4:15:a5:a7:de:d4:de:0f:33:e3:30:
                    02:7d:88:c9:73:b2:c2:4c:1a:1b:41:84:9c:50:e9:
                    38:ce:2f:23:b6:17:8d:c4:06:fe:36:d4:eb:d5:77:
                    cf:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:E0:64:1E:FE:93:4A:D9:44:04:BF:F1:05:D1:B7:25:5A:46:C2:CD
            X509v3 Authority Key Identifier:
                keyid:86:96:44:48:77:5B:2F:8F:86:35:9D:54:16:8E:22:0C:1E:87:1B:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hpZESHdbL4-GNZ1UFo4iDB6HG_U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8D30/5697D44CA6B011ED847B379DF1222468/hpZESHdbL4-GNZ1UFo4iDB6HG_U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:5d:a5:3f:b9:14:f8:4a:f6:43:69:90:c8:ec:f2:94:92:f3:
         a9:b7:26:57:0f:0a:46:19:3f:ec:09:87:1f:7a:9e:9b:34:58:
         f5:c9:98:e6:d2:fb:27:ac:bd:1c:22:1e:69:2e:3e:ad:a3:96:
         fe:ac:6b:3a:d6:b0:63:49:b8:47:b3:a7:45:96:5c:35:e1:a4:
         10:85:4b:ff:0a:66:4a:54:19:ea:e1:bc:1c:af:56:3d:85:d9:
         49:6b:d1:59:13:7a:0a:17:23:fc:9d:f8:84:4c:91:85:cc:5c:
         05:fe:e0:b0:30:b7:41:56:94:fc:3d:14:14:ef:ec:cf:16:fc:
         32:34:71:a0:03:c6:46:a7:50:80:5d:c3:1f:e2:ea:0a:86:09:
         a9:63:73:af:74:c6:84:e1:2d:08:b6:f5:e4:0d:4e:1d:3a:6c:
         ea:cb:62:ac:00:de:b5:12:9a:5a:6f:45:72:10:d0:2a:d7:2b:
         92:8b:dc:cd:90:f1:96:73:56:fc:81:55:82:49:1b:ec:e1:56:
         f3:46:95:aa:6a:ff:d0:dd:3a:75:18:66:ed:f9:c1:d8:70:f8:
         a9:fb:72:9e:f3:72:02:bd:72:3d:21:d7:45:22:f4:7b:7c:f5:
         37:8a:0b:1d:26:c5:27:6f:31:1f:be:b2:39:ae:24:b9:87:52:
         99:00:31:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----