Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
File:                     eJra0zjCDXJE3Hvm0PRKklP8jxM.mft (raw, json)
Hash identifier:          re4W9bqSZVYVyvad7BW11+7YiocLGiCfejcVsG+EI0s=
Subject key identifier:   3B:A2:A1:74:A2:BC:96:24:06:90:7C:D0:45:23:97:6D:98:A5:A9:58
Authority key identifier: 78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13
Certificate issuer:       /CN=F36EE687AF/serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
Certificate serial:       0260
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
Manifest number:          025E
Signing time:             Sun 25 Oct 2026 04:48:40 +0000
Manifest this update:     Sun 25 Oct 2026 04:48:39 +0000
Manifest next update:     Tue 27 Oct 2026 04:48:39 +0000
Files and hashes:         1: eJra0zjCDXJE3Hvm0PRKklP8jxM.crl (hash: JEfSi2EKkQSIijYLyI6k0fHpYj0X9YUvmLvH+auVwKo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 04:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 608 (0x260)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE687AF, serialNumber=789ADAD338C20D7244DC7BE6D0F44A9253FC8F13
        Validity
            Not Before: Oct 25 04:48:39 2026 GMT
            Not After : Oct 27 04:48:39 2026 GMT
        Subject: CN=6add8a28-2e2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5c:9c:a5:e0:72:e9:de:11:96:9c:ea:56:d8:
                    a6:c1:a7:03:69:f3:70:8f:e4:92:2f:e2:56:d8:c3:
                    fb:d8:fb:45:f4:bc:b7:80:7e:b5:d3:c8:f8:3b:36:
                    1c:dc:5c:6e:b8:a4:56:2b:4a:87:1b:2b:73:24:00:
                    df:31:cd:f8:b3:60:b0:22:e3:b6:ec:db:fa:3f:a6:
                    32:2c:b5:3a:40:c7:96:ae:8e:42:c6:fd:c6:67:7c:
                    8a:63:90:3f:ad:5d:bd:00:15:ef:b6:8d:18:64:2a:
                    ed:60:c4:21:16:c2:cf:ac:4e:02:d4:73:8b:d2:df:
                    4b:6f:f1:44:d4:3c:a4:58:59:d4:77:fd:b9:93:48:
                    af:6e:68:1a:be:6a:ee:ab:47:19:5f:8d:6f:54:18:
                    8f:97:a7:fd:3f:b4:87:b6:9b:af:5f:43:5c:ea:5a:
                    59:7c:7c:69:d3:df:28:ba:b3:60:02:43:1f:30:4d:
                    e1:9d:d7:00:d4:ca:e6:d4:cd:3c:d7:e6:e9:26:89:
                    d2:94:13:14:5d:2f:79:32:e1:c1:47:e0:66:d2:f2:
                    eb:d2:ec:00:37:23:5d:9b:f0:23:3e:a8:e3:47:9e:
                    14:0d:a4:c2:a4:09:d0:57:04:01:8d:c1:e2:91:7b:
                    9a:78:a0:3d:dd:ba:d2:29:a9:6e:0d:d5:e1:71:0d:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A2:A1:74:A2:BC:96:24:06:90:7C:D0:45:23:97:6D:98:A5:A9:58
            X509v3 Authority Key Identifier:
                keyid:78:9A:DA:D3:38:C2:0D:72:44:DC:7B:E6:D0:F4:4A:92:53:FC:8F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eJra0zjCDXJE3Hvm0PRKklP8jxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE687/16FB6D9AFA5411EFA5C65CBE762E951A/eJra0zjCDXJE3Hvm0PRKklP8jxM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:03:64:7e:91:5a:49:59:94:65:53:12:c8:3a:0b:df:c6:b2:
         53:46:3d:1f:06:34:0f:bb:9d:b5:d9:c6:93:42:83:65:c3:17:
         21:cb:a2:f2:0e:09:c9:f1:00:a3:29:a2:8e:db:48:e0:11:51:
         dc:3b:4f:fb:6f:33:96:b9:81:c8:db:30:ca:8c:c7:d0:42:27:
         c9:f4:94:f8:fa:5a:b3:aa:d4:f4:a4:b7:2c:b6:ed:bf:ba:88:
         47:6b:2d:db:6d:4b:9c:98:d4:1e:da:cb:37:54:b8:37:2c:38:
         69:9b:04:21:fa:93:71:b9:c0:f2:be:91:70:f6:a0:4a:8f:63:
         39:e9:02:c0:50:94:62:3f:67:7e:96:80:75:03:a5:a2:d7:4a:
         d1:a2:c6:22:ad:c3:19:27:5e:a4:67:bd:ad:55:ce:e6:7a:3a:
         a5:3e:d4:68:a7:7d:ca:fa:8a:99:fa:53:31:c1:3e:ee:ed:c4:
         11:62:97:bf:48:c1:6c:74:bc:70:f0:65:31:73:c4:c0:f1:a4:
         7e:8b:97:97:af:1d:23:fe:19:5a:38:ee:ee:e4:4c:56:0a:8c:
         d8:8b:32:25:4c:3a:bd:d3:a3:33:5e:59:ac:74:ae:f8:0d:11:
         27:70:a8:d9:80:12:e5:23:a0:34:0f:be:d2:a4:42:37:6d:10:
         f4:42:7c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----