Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
File:                     aMXkutXc1WSiVidTyay2Mr0ky1A.mft (raw, json)
Hash identifier:          smKHc/rbNRJgHJVrO2h9XWIHL3ufmTX/hJk4SzOmesM=
Subject key identifier:   9B:86:25:0F:C3:9A:23:20:09:7B:A1:BF:F7:58:07:64:09:BF:CF:0B
Authority key identifier: 68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50
Certificate issuer:       /CN=F36DE46FAF/serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
Certificate serial:       0AA2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
Manifest number:          0A8C
Signing time:             Sun 25 Oct 2026 01:35:55 +0000
Manifest this update:     Sun 25 Oct 2026 01:35:55 +0000
Manifest next update:     Tue 27 Oct 2026 01:35:55 +0000
Files and hashes:         1: aMXkutXc1WSiVidTyay2Mr0ky1A.crl (hash: EkZmLREDc1+KIXB+0sGMj2mp0Y40r4oMxC67Ob9fros=)
                          2: 1397539A963311F1A5208F14CF1D38B0.roa (hash: Gbi1goqcteUHX94qentDkP1O0M2WUDxVYrOT+NrVjjw=)
                          3: 67CF4D4AC47A11EBAC1DCB2EF8AEA228.roa (hash: itFkoyhCFbkxoKe/6GZZJKhOYtJVGG20wDDeoMWtUpQ=)
                          4: 85592F58963311F1B268D616CF1D38B0.roa (hash: Lk9JNobEcQHSRvY8pP8rMGRN1zf55/NF3Nzph9wLwIs=)
                          5: 0668CDBA8ECF11EA92325F27F8AEA228.roa (hash: obmP99ZP4gHqQi9QCtzWh7Wc0rtLRTLbw4IjE5aS9HE=)
                          6: FD29A9F4963311F1B706DB1ACF1D38B0.roa (hash: Z7GYp8epv0CEFILt1d/4UHNDuxGxepIuoxMbBAe1vOQ=)
                          7: 6BE894F8963511F1AF34D2A4CE1D38B0.roa (hash: anJyhoGPfEPmHSCk6Uj9kNHFO5xjL9ibh1PSnUDx+Rk=)
                          8: 2A0AF02ED8D711EB93E56C7BF8AEA228.roa (hash: ZQ6oLNCOYoaY+3u19bx5mMnPdr11GM9m4rQK5cGUyGQ=)
                          9: 59AB9F46ACB311EA94FB7A5CF8AEA228.roa (hash: M7zBdV0WcI6PFd9tLd94yJGWhV8lnlP02DcFXSG5pCM=)
                          10: 77F17762ACB511EAB011A45EF8AEA228.roa (hash: 1/STozfAIpnz6GETEBd4lb3u077CE2WkxWA/E9NUlaI=)
                          11: 83CC39468F0011EA98508558F8AEA228.roa (hash: L5ieRjYiG1OFGX8hr9WtcOwJsazJ2sf4i+jmqBumzYY=)
                          12: 4D5B7DFA9A9911EAB460C75DF8AEA228.roa (hash: 08HHiOipKJGcq74gZtGxaBA7hKxLZk9ttDnVaGPnEtA=)
                          13: 8F0844CA963411F18267A01ECF1D38B0.roa (hash: nXi6wVCyaY1MaG1oBTjHxjTNa553jbzQFSran1dNAs4=)
                          14: 4F75903E8F9B11EAB3F92A79F8AEA228.roa (hash: 4DXiHxGSCbsyOMNhnwXSRwIzqtdpPeRGAU+Vq8d2Sbo=)
                          15: BC497164BFC211EB9C90B47DF8AEA228.roa (hash: vShLouUDMlMysq5av2KQKsWgiT2JaBcuHkhVOPxBIWk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 01:35:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2722 (0xaa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DE46FAF, serialNumber=68C5E4BAD5DCD564A2562753C9ACB632BD24CB50
        Validity
            Not Before: Oct 25 01:35:55 2026 GMT
            Not After : Oct 27 01:35:55 2026 GMT
        Subject: CN=6add5cfb-9e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e3:9c:55:10:a6:62:1a:f3:36:31:cd:8a:18:
                    4e:53:b5:a6:ee:03:74:56:c0:dd:4e:fa:e2:07:bf:
                    32:d9:1a:25:bb:70:d9:3f:31:2c:9e:00:e8:16:46:
                    bc:f0:64:0f:49:9e:a3:14:7b:6d:bc:78:b9:04:54:
                    a8:35:42:af:f5:22:c8:9a:26:98:9d:5c:df:ea:63:
                    2b:87:5d:73:0e:7d:54:d6:be:cb:cf:2d:16:26:64:
                    18:21:b1:24:be:42:a6:d5:68:03:15:ab:84:83:58:
                    0d:90:a6:cb:ec:e4:85:ca:50:64:25:29:2a:0b:ec:
                    98:b3:0a:cb:e9:88:be:cb:4e:61:fe:8a:c2:82:79:
                    11:03:54:36:8b:25:91:e3:5e:6c:ff:e2:62:82:d0:
                    37:fd:54:4b:78:df:78:48:49:9a:44:51:95:45:84:
                    c2:7a:71:d4:25:de:ca:d2:7e:f2:92:b6:a8:7a:f4:
                    30:11:a5:6d:49:42:0e:f9:ee:92:95:8d:68:22:0b:
                    45:1c:49:70:be:07:fb:1c:a3:83:ff:c6:32:0b:4c:
                    4a:3f:83:e2:0f:6c:e2:cd:ca:34:8d:43:34:62:91:
                    11:60:a2:32:80:3a:08:d6:85:8c:ce:0f:74:1e:1e:
                    ff:85:0b:35:3b:b4:02:7f:c0:fd:f0:52:91:2d:c9:
                    16:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:86:25:0F:C3:9A:23:20:09:7B:A1:BF:F7:58:07:64:09:BF:CF:0B
            X509v3 Authority Key Identifier:
                keyid:68:C5:E4:BA:D5:DC:D5:64:A2:56:27:53:C9:AC:B6:32:BD:24:CB:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aMXkutXc1WSiVidTyay2Mr0ky1A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DE46F/EB4934CCD5FE11E99528193BF8AEA228/aMXkutXc1WSiVidTyay2Mr0ky1A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:fc:91:fd:82:0f:5a:6a:06:e9:09:3d:0a:49:34:f9:4a:a8:
         09:a2:c7:36:39:4c:a3:41:75:ee:a5:5b:17:77:6d:58:1c:c0:
         4a:23:16:1f:0a:28:73:9b:e1:fe:8a:c7:8f:6b:4a:e8:85:e1:
         a5:c8:82:c5:d1:9d:ba:d6:e9:b7:19:c7:d6:d9:06:f0:7f:05:
         99:42:67:02:77:25:e4:a5:2e:5f:34:26:b7:4b:9f:9d:02:67:
         7e:db:96:7c:0a:94:62:d1:8b:55:83:d6:84:e8:94:e4:3f:f9:
         81:6a:77:39:3a:22:e3:4d:61:b5:d0:b5:8e:d2:bf:18:c4:93:
         b4:dd:6b:71:31:e6:de:c0:c7:f6:da:f6:c1:8f:11:31:66:fd:
         04:67:f7:9a:e3:d2:d2:b6:c1:64:e2:d9:98:32:2e:b8:99:01:
         c6:ed:41:a5:ec:3f:d7:ce:68:41:0e:0a:ab:1f:23:2e:6f:19:
         bd:f5:00:83:54:5c:b0:55:9f:fc:8e:ea:e8:09:fa:6b:69:dc:
         e8:6f:ad:1c:fd:cf:ac:5d:ef:db:dd:76:13:5d:d2:eb:36:77:
         3c:b8:8d:5e:f9:90:a1:e3:6c:6e:96:b4:a7:63:c8:de:a1:3b:
         82:26:62:d5:6a:68:4c:e3:0e:af:94:d2:88:af:96:6b:e0:26:
         5d:a7:cc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----