Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
File:                     zgfVJCGaKb9NDax9tiqIO3WsSUA.mft (raw, json)
Hash identifier:          qFHIzLGIb1Zz0tNRkzgUj3pl/qHBWAwVviSJPaoPR84=
Subject key identifier:   76:14:E6:B8:58:C4:4B:AB:5A:E8:01:7A:E5:8E:66:05:4F:2F:E4:A2
Authority key identifier: CE:07:D5:24:21:9A:29:BF:4D:0D:AC:7D:B6:2A:88:3B:75:AC:49:40
Certificate issuer:       /CN=F36E1A95AF/serialNumber=CE07D524219A29BF4D0DAC7DB62A883B75AC4940
Certificate serial:       0123
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
Manifest number:          0122
Signing time:             Sun 25 Oct 2026 05:21:58 +0000
Manifest this update:     Sun 25 Oct 2026 05:21:57 +0000
Manifest next update:     Tue 27 Oct 2026 05:21:57 +0000
Files and hashes:         1: zgfVJCGaKb9NDax9tiqIO3WsSUA.crl (hash: xYsrR+Qk8HvfJ3GEK+fp8tXAmzXqIiNNwfoxp/ciDGA=)
                          2: 0836D574EFA911F0AD3786BEDAE4EC9C.roa (hash: s34q98p+j1656mmnmZ5OjzaYIjMbFPtO6WF3YwxXSiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1A95AF, serialNumber=CE07D524219A29BF4D0DAC7DB62A883B75AC4940
        Validity
            Not Before: Oct 25 05:21:57 2026 GMT
            Not After : Oct 27 05:21:57 2026 GMT
        Subject: CN=6add91f6-7e09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:ea:2a:69:98:78:f8:67:67:e1:5e:40:a3:
                    9a:b1:a9:1b:e5:3b:d0:a6:c3:d5:77:6f:aa:15:9d:
                    1e:1e:b8:49:ae:55:f9:12:54:8b:5d:bc:51:42:0b:
                    2e:53:43:b4:cc:dd:de:7d:4c:cf:ec:d2:c8:4d:cc:
                    50:ca:d6:b9:99:f4:85:44:c3:ee:56:7f:4e:97:13:
                    f7:21:70:39:1d:a8:1b:b8:b4:39:10:2c:6c:b0:f9:
                    02:a7:57:d6:9b:dd:70:da:f3:d5:7a:ad:b4:00:c7:
                    f6:94:c6:f7:4f:52:0b:b9:53:39:ff:e8:78:4f:3d:
                    91:b4:0d:f9:6f:41:b3:29:00:0f:29:57:3b:cd:37:
                    8b:3b:85:e7:36:4a:c3:14:e7:28:67:79:2d:8d:23:
                    86:fa:c2:d4:b3:1c:fc:4d:df:f2:94:f9:6f:8e:a6:
                    5b:47:a9:d0:2a:a7:5b:40:45:b1:1d:f9:c6:ca:48:
                    ed:5f:0b:05:f6:78:53:5c:3b:a3:68:20:1b:fa:75:
                    44:4b:37:ae:3b:67:0f:4b:dd:97:58:59:e0:34:cb:
                    b1:fe:56:7c:e3:17:4e:f1:2e:8f:78:89:7f:93:22:
                    bc:2c:6d:15:ee:45:21:07:07:80:55:b3:48:59:29:
                    cd:9f:8a:c1:2f:46:55:e0:0d:e8:d2:72:97:d2:dd:
                    9e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:14:E6:B8:58:C4:4B:AB:5A:E8:01:7A:E5:8E:66:05:4F:2F:E4:A2
            X509v3 Authority Key Identifier:
                keyid:CE:07:D5:24:21:9A:29:BF:4D:0D:AC:7D:B6:2A:88:3B:75:AC:49:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zgfVJCGaKb9NDax9tiqIO3WsSUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1A95/28A3BF58EFA811F0A6B991B8DAE4EC9C/zgfVJCGaKb9NDax9tiqIO3WsSUA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ce:f0:d9:47:eb:fc:f8:66:ea:f1:a7:3a:7e:d9:16:51:61:
         b3:1f:fa:e6:89:82:9a:bb:70:b1:f8:bd:25:e0:54:e7:c8:cf:
         fb:34:e6:dc:d5:02:ca:f8:5a:6a:aa:a3:d6:ad:cb:70:e8:a5:
         c9:64:a5:a9:44:f8:a9:b0:2c:8d:1f:c4:64:1c:c8:3f:6d:4f:
         4b:79:e4:57:14:ff:32:e7:41:4c:b2:8b:b5:62:2e:2d:8f:dd:
         1a:6b:70:f8:4d:b0:30:7b:5a:b9:72:8c:87:44:32:42:71:22:
         39:03:92:99:2b:d3:5b:33:bd:04:26:00:f0:2c:69:12:74:5b:
         08:55:b0:8b:70:34:3d:0e:a4:6b:6e:13:bc:f1:7e:64:69:1a:
         38:59:36:d2:01:03:95:49:b0:af:0e:f6:cd:92:b3:e8:c9:e5:
         21:1a:16:c9:5f:a7:db:2d:b1:fb:8e:7b:a4:c0:18:9a:b2:d2:
         69:66:c5:9c:20:28:c9:79:6b:2f:36:8c:c3:e2:22:56:4b:5e:
         54:45:87:94:a6:3f:5a:5c:24:02:cf:b5:30:16:ed:e6:c5:d6:
         e6:66:79:8f:b0:96:0b:7f:87:b5:76:20:c7:f1:58:a3:03:b0:
         46:85:d5:e9:27:3f:e6:11:ca:ee:91:73:b7:9c:c5:66:02:e9:
         f3:00:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----