Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
File:                     ksDdANVwLjkO0njypv3Heeq3uoo.mft (raw, json)
Hash identifier:          bBfQl3UEU/39IbttatNOf3JQHXSypXVSJ7frlFFdx/Q=
Subject key identifier:   02:DD:F9:EC:DF:68:33:91:22:1A:3D:AA:1B:76:24:7E:0B:3D:BE:70
Authority key identifier: 92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A
Certificate issuer:       /CN=F36DF2C0AF/serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
Certificate serial:       0333
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
Manifest number:          0332
Signing time:             Mon 26 Oct 2026 04:25:51 +0000
Manifest this update:     Mon 26 Oct 2026 04:25:51 +0000
Manifest next update:     Wed 28 Oct 2026 04:25:51 +0000
Files and hashes:         1: ksDdANVwLjkO0njypv3Heeq3uoo.crl (hash: RU2hMSdwGczyD3OQ0vtNGWpyi8AyYWa07TinQk0z5gM=)
                          2: 66FDD6885A0A11EFBC9CDBA8762E951A.roa (hash: aVnUgk3NY8yjcG/DFLWQpoxsTPLV3bCNwJvFvS9FExw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:25:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 819 (0x333)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DF2C0AF, serialNumber=92C0DD00D5702E390ED278F2A6FDC779EAB7BA8A
        Validity
            Not Before: Oct 26 04:25:51 2026 GMT
            Not After : Oct 28 04:25:51 2026 GMT
        Subject: CN=6aded64f-6a90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:1d:8c:71:2d:c4:f8:9e:31:11:dd:22:b4:cd:
                    65:c4:45:35:68:bf:2d:c7:39:37:3a:32:16:02:97:
                    87:dc:84:0b:05:a5:45:d5:60:e6:3e:b5:31:a7:1b:
                    4c:6e:65:6b:cf:73:80:6e:c5:af:1b:0b:31:cd:e8:
                    2d:88:40:93:27:03:db:e8:95:65:89:9b:d3:9a:75:
                    6d:4b:e1:ad:59:d8:83:10:e7:80:a0:03:c4:1f:5c:
                    67:06:e5:68:08:3d:04:e3:06:7f:98:cd:92:3e:4e:
                    f5:40:0a:b8:88:2b:ba:36:4d:89:39:cd:09:cd:bf:
                    42:b1:da:7b:a0:d0:9f:15:4b:15:ce:ed:ad:8a:eb:
                    20:b2:0c:9b:68:92:0c:6f:11:91:b0:fd:e7:e5:4f:
                    5d:db:95:fe:a6:e5:84:a8:d0:4f:4c:60:9a:92:70:
                    66:79:56:63:fa:36:f4:94:9d:d8:1f:91:d2:df:75:
                    2e:c6:32:2c:92:c2:73:61:dd:eb:99:2f:34:2f:82:
                    bc:12:94:de:aa:c8:79:0b:46:18:3c:28:6e:50:2d:
                    05:d3:c2:17:ab:67:74:22:d3:8d:fb:64:86:68:c6:
                    e9:54:6c:3e:a0:64:70:81:cc:02:cc:c4:d9:e5:d3:
                    29:55:4a:2a:1c:81:9b:9f:72:7a:89:8f:17:7b:7e:
                    37:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:DD:F9:EC:DF:68:33:91:22:1A:3D:AA:1B:76:24:7E:0B:3D:BE:70
            X509v3 Authority Key Identifier:
                keyid:92:C0:DD:00:D5:70:2E:39:0E:D2:78:F2:A6:FD:C7:79:EA:B7:BA:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksDdANVwLjkO0njypv3Heeq3uoo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DF2C0/D50D7F0E5A0311EFABD2477A762E951A/ksDdANVwLjkO0njypv3Heeq3uoo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:9f:ea:e3:76:7c:af:25:38:c8:07:6b:bd:35:24:fb:ea:bc:
         e4:c7:72:02:51:30:b8:a9:d3:77:6e:bc:4e:da:f7:99:b0:35:
         9e:34:ae:c2:ec:44:16:5c:68:58:33:52:7d:b4:5b:2d:27:8c:
         bd:1a:c7:f4:d7:ee:31:eb:d7:ac:fc:31:2b:6b:a1:98:eb:e8:
         90:ef:18:ab:84:a5:34:03:a9:13:77:05:34:a9:da:8a:2c:5a:
         1b:32:62:53:42:10:8e:23:88:00:55:8e:d8:24:b6:46:7e:99:
         8f:a3:41:0b:62:b5:b8:45:3b:e1:42:2b:29:a5:cf:bd:63:c5:
         cc:8d:97:de:4c:f9:8f:67:3a:fa:21:c3:d9:1a:78:a3:68:0b:
         9a:86:7e:88:7c:26:c6:11:41:d2:50:50:5d:0a:c6:1b:43:b1:
         bb:a3:f9:31:9b:84:81:8a:98:62:5e:b7:cd:a1:68:83:8e:40:
         1b:8e:d7:56:c6:6a:17:fe:df:80:67:65:6d:16:a3:65:7c:32:
         93:d7:db:b5:32:15:fb:8c:3e:ca:35:db:17:63:4c:8e:22:c5:
         69:ea:6c:c8:93:97:11:fc:82:ce:f0:65:7c:46:24:2d:1d:c5:
         9b:cd:46:d9:5a:e2:ab:0d:57:da:32:7f:ac:2e:7f:6b:85:52:
         25:bb:39:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----