Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
File:                     z9HOEVgucPjVG3hwclwV72fgxlE.mft (raw, json)
Hash identifier:          Kp6iBYkZP7mQupVXxSL0XGEQy2uN6ljD6+Vb7t0AEzc=
Subject key identifier:   29:E6:51:39:F6:61:CA:6A:D4:A8:F3:DD:58:C2:04:CB:A0:ED:E5:42
Authority key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Certificate issuer:       /CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Certificate serial:       0FB4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
Manifest number:          0FB1
Signing time:             Sat 24 Oct 2026 01:00:40 +0000
Manifest this update:     Sat 24 Oct 2026 01:00:40 +0000
Manifest next update:     Mon 26 Oct 2026 01:00:40 +0000
Files and hashes:         1: z9HOEVgucPjVG3hwclwV72fgxlE.crl (hash: bAy6OqEeHpn0Qk0/E9kFqgFXFoiqSaIiy5eoRQAltuI=)
                          2: 44FF457CB46311E58407FA55F8AEA228.roa (hash: B9WSKZRqziRr6GOCV6BDWegKxCtGmeVw42cvf6ryK9U=)
                          3: A17B340AB46311E59241EB56F8AEA228.roa (hash: 7FwQeUfCbVL0Bd2EXyoVC5y/xe6Lbd8u11SpNh5f5zI=)
                          4: F0D40794B46211E5A330CA55F8AEA228.roa (hash: t2nsrO2U23DwtiWKoe3fqAaOO4rdHwgErkagqsJpKHc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4020 (0xfb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB4B4AF, serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
        Validity
            Not Before: Oct 24 01:00:40 2026 GMT
            Not After : Oct 26 01:00:40 2026 GMT
        Subject: CN=6adc0338-34c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1c:b2:7d:66:19:20:49:3c:8b:04:19:fc:3a:
                    2f:eb:0f:23:bc:94:10:43:4e:de:73:ae:73:57:2a:
                    95:c8:a6:48:1a:27:b4:13:24:ea:d5:bb:ae:63:9e:
                    1c:63:45:df:9d:33:75:9a:85:be:95:3a:56:2a:ee:
                    29:23:d6:8a:ca:81:09:a0:84:ab:4d:a9:a5:8d:85:
                    78:63:c1:a0:1a:63:ee:9d:0a:2a:50:b2:97:40:d2:
                    28:a6:f0:e4:4f:e9:6e:ee:11:dc:73:e1:75:41:2b:
                    5a:68:9f:46:5a:a5:40:ea:f9:b6:42:48:3a:47:13:
                    f8:b1:d9:3c:26:af:e9:ae:78:b4:75:43:a2:aa:5a:
                    87:45:81:66:95:8a:67:0d:04:95:78:fe:27:e5:a8:
                    a0:5d:4c:6e:f8:58:6c:d3:df:ad:53:9b:f4:5a:82:
                    80:ce:6e:7d:a3:46:21:c8:01:90:d5:d2:9a:9f:b6:
                    6d:87:52:3f:73:a5:ce:ba:93:cd:a4:82:a1:67:80:
                    e4:90:d8:bd:4e:e7:95:9e:1b:a0:39:bc:b5:6c:b0:
                    23:06:2c:39:46:2a:36:8e:dc:72:3a:54:61:37:a2:
                    aa:1a:29:dd:8e:f6:26:2e:15:05:6b:67:05:a2:c9:
                    ab:a1:86:59:42:4f:94:3d:90:9b:0c:e4:15:01:4a:
                    69:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:E6:51:39:F6:61:CA:6A:D4:A8:F3:DD:58:C2:04:CB:A0:ED:E5:42
            X509v3 Authority Key Identifier:
                keyid:CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:5a:ac:bf:de:75:e9:4c:05:84:d4:d8:60:09:9b:14:60:30:
         00:5b:43:35:aa:78:c0:b2:b7:58:d6:98:c9:4a:a5:2d:31:14:
         c5:cb:eb:4b:78:57:fc:5c:bf:38:9c:0d:4f:5d:73:9e:da:17:
         9c:df:d8:0d:52:f5:1f:8f:d2:e2:16:53:e6:ba:4c:74:a9:0a:
         95:b8:65:a6:c4:a8:ee:f7:e8:e1:ce:38:18:15:5f:84:6f:fc:
         91:51:1f:0f:86:7f:bb:83:e9:28:96:0b:19:bf:a2:40:44:33:
         d3:73:29:c1:50:8e:e6:4f:b1:f4:84:26:07:45:76:fa:47:4e:
         df:5c:65:64:6b:16:61:01:21:8e:bf:c8:93:af:25:19:bc:c3:
         6f:85:cf:80:f5:e2:88:b6:e5:48:68:18:6d:d9:63:0c:12:dd:
         84:02:fb:b0:23:97:8f:95:e2:d6:89:ab:fa:f7:e2:6f:4c:c1:
         65:7c:d6:d8:b9:67:38:12:f5:08:38:f1:a4:4f:59:10:31:d1:
         26:4c:41:5a:c4:28:e1:03:a4:d3:56:5e:d2:c3:71:41:f4:32:
         a0:ac:f3:81:9b:95:4a:ac:b7:b1:6f:f5:a3:c5:45:85:1a:f7:
         f5:f1:88:d8:6b:c6:b9:66:bb:2f:e4:10:c1:e3:6d:10:4d:c3:
         39:6c:cd:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----