Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
File:                     hOOlVdJh3TLxBhVGYpV82qCdDQY.mft (raw, json)
Hash identifier:          tM6YTk1aikuEeSsoUJDyD2Ql8n721TlNMaEISm/73hw=
Subject key identifier:   5F:7A:D3:0E:1D:5A:81:D5:0C:92:B7:C2:E8:D2:59:73:EC:92:61:3A
Authority key identifier: 84:E3:A5:55:D2:61:DD:32:F1:06:15:46:62:95:7C:DA:A0:9D:0D:06
Certificate issuer:       /CN=F36E05BFAF/serialNumber=84E3A555D261DD32F106154662957CDAA09D0D06
Certificate serial:       AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
Manifest number:          AD
Signing time:             Mon 26 Oct 2026 05:39:26 +0000
Manifest this update:     Mon 26 Oct 2026 05:39:26 +0000
Manifest next update:     Wed 28 Oct 2026 05:39:26 +0000
Files and hashes:         1: hOOlVdJh3TLxBhVGYpV82qCdDQY.crl (hash: Q9hTYGl1WvrtKMOyEwcBlbvOFENmeRhIsee8oLyhW28=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 05:39:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E05BFAF, serialNumber=84E3A555D261DD32F106154662957CDAA09D0D06
        Validity
            Not Before: Oct 26 05:39:26 2026 GMT
            Not After : Oct 28 05:39:26 2026 GMT
        Subject: CN=6adee78e-34a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a2:c9:ee:68:15:00:16:b9:fb:3d:b9:3f:cb:
                    b1:59:ef:35:ba:17:68:50:16:d6:bb:b9:0f:97:e9:
                    f3:8c:e5:09:4b:f3:98:c3:bc:17:cf:4e:d0:b8:b9:
                    23:65:98:8b:a6:19:eb:68:c9:2c:89:88:5a:5f:e3:
                    48:14:18:b7:b6:e3:11:8d:39:44:7b:de:bc:19:13:
                    27:3e:0b:da:d5:a2:34:3a:20:b9:c0:c4:bb:84:ad:
                    f9:94:a0:e0:02:5a:1e:ac:2e:bb:53:0b:06:f8:d5:
                    cd:dc:b2:be:31:3e:88:d7:7d:32:23:2b:b7:04:81:
                    59:8f:ef:70:c6:80:f5:25:42:af:e5:35:35:c0:b6:
                    ef:14:dd:1f:71:97:01:de:b7:82:c1:6d:3e:d6:30:
                    1a:05:fd:94:96:cf:f1:09:ad:ee:f8:9c:a9:41:09:
                    53:4f:73:ea:ca:bb:44:eb:01:5a:4b:8f:4d:80:46:
                    7a:f9:0c:d3:63:59:e2:ae:9c:61:77:fd:2a:db:51:
                    1f:ed:79:8c:51:1c:4f:3f:50:21:c1:37:f0:fc:43:
                    b2:83:8b:65:17:87:7c:c1:db:5e:47:69:97:d6:07:
                    3f:c2:ae:7e:02:74:19:dc:d5:d0:a7:09:7a:e3:ff:
                    2d:c0:be:93:4d:8d:1e:bf:87:57:11:6b:f2:9b:d6:
                    fe:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:7A:D3:0E:1D:5A:81:D5:0C:92:B7:C2:E8:D2:59:73:EC:92:61:3A
            X509v3 Authority Key Identifier:
                keyid:84:E3:A5:55:D2:61:DD:32:F1:06:15:46:62:95:7C:DA:A0:9D:0D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:85:65:49:a1:3e:00:e6:03:df:a0:d1:d1:b1:82:08:7d:7a:
         e6:cb:6b:71:06:8f:48:6e:5a:37:33:80:7e:5f:e0:e8:da:46:
         1a:06:a1:f7:2e:53:69:52:76:ac:2d:a4:d4:cc:6e:02:34:55:
         e9:d7:4b:6c:a6:d5:0e:89:ff:e3:37:02:ad:cf:c7:e7:54:35:
         0d:10:26:8f:aa:1d:ed:ee:0f:1d:5b:aa:44:ce:07:7c:63:04:
         d1:0b:aa:be:4b:ce:87:49:f4:44:11:91:82:eb:8a:31:1e:f8:
         b2:7e:58:14:60:cc:84:f2:46:3b:5f:07:80:3c:d2:4c:27:a5:
         6c:7b:ba:38:3a:d5:1b:97:01:25:59:b0:41:fc:e6:86:5f:ee:
         89:b8:6d:74:5f:72:f2:7e:21:db:07:db:e3:a9:00:17:37:3e:
         49:3f:41:29:bd:1e:23:e0:cf:97:eb:40:84:ad:e5:9b:3e:7f:
         c4:c4:05:cf:c6:ec:d7:12:8c:b6:9e:31:45:58:3a:da:94:7b:
         59:48:15:84:7c:c6:e5:b2:c1:44:eb:6a:c6:cb:c1:5e:4f:ec:
         fe:9c:69:90:20:3b:4f:03:88:e7:ba:d7:cc:91:91:9a:78:37:
         bb:a9:e4:98:bb:fd:44:0e:02:6c:38:99:a8:45:6c:66:b8:eb:
         e9:14:b4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----