Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
File:                     XulhNES2heRACvJQMvMjaKxzhgo.mft (raw, json)
Hash identifier:          miS8vdR9KYOqq3+smIrxi4mIG8M/UEiRqkVy/VRBdyA=
Subject key identifier:   22:AE:8D:92:F3:38:09:07:C9:50:09:F4:D4:C0:CB:B7:95:28:13:24
Authority key identifier: 5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A
Certificate issuer:       /CN=F36EE763AF/serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
Certificate serial:       0121
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
Manifest number:          0120
Signing time:             Sun 25 Oct 2026 05:22:22 +0000
Manifest this update:     Sun 25 Oct 2026 05:22:21 +0000
Manifest next update:     Tue 27 Oct 2026 05:22:21 +0000
Files and hashes:         1: XulhNES2heRACvJQMvMjaKxzhgo.crl (hash: rkQmmrwJOV1rzZc7P1SaHxiXDF99lxBEeg51ZGweFbE=)
                          2: 8CF50C7EF09C11F09220C691DAE4EC9C.roa (hash: RBXfrMLemnAtHw5865OVdIO7wWh6V9X2nw9Mms9JBjU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE763AF, serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
        Validity
            Not Before: Oct 25 05:22:21 2026 GMT
            Not After : Oct 27 05:22:21 2026 GMT
        Subject: CN=6add920e-2d8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9e:21:4a:8f:ba:9f:9a:e7:c0:94:91:18:20:
                    2e:28:fb:99:1d:e9:4e:b6:cf:eb:89:5c:7d:12:9f:
                    25:e9:76:95:b0:c1:da:fd:15:ae:0f:c4:16:6d:49:
                    81:36:78:ec:1b:ba:20:aa:f3:7f:b2:42:83:07:f7:
                    1f:8f:a8:4f:cc:0f:7e:71:f1:1a:d4:47:40:ea:4f:
                    53:02:47:47:eb:4d:27:0e:ae:b6:27:87:9f:e7:9f:
                    e7:68:31:f9:8e:5e:15:d0:89:a8:a4:8e:a7:93:aa:
                    1f:a6:6b:ac:df:97:32:06:17:2b:b6:2f:d7:7b:47:
                    9c:aa:0f:db:28:a1:bf:1a:53:42:b9:62:68:5f:7c:
                    9f:07:ab:3d:aa:c2:f8:bf:2b:da:9c:94:49:68:e4:
                    ba:10:cf:57:96:f4:fe:86:c4:bb:8d:23:70:b4:a5:
                    5a:fa:93:24:f0:26:ad:f9:90:21:b1:c5:b6:e8:3a:
                    24:9e:d8:73:1a:c7:f3:7e:32:f1:aa:bb:ce:16:1b:
                    a8:43:03:7f:76:79:ce:b6:c1:7e:91:a4:23:9d:12:
                    59:1d:39:ea:f5:bb:31:63:c0:af:f8:f9:1c:88:4d:
                    dd:6f:f6:9e:72:07:21:0d:37:1d:ca:bd:23:9c:81:
                    8f:71:e6:fe:46:88:8f:6d:fc:cb:90:7d:ee:e6:3a:
                    ae:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AE:8D:92:F3:38:09:07:C9:50:09:F4:D4:C0:CB:B7:95:28:13:24
            X509v3 Authority Key Identifier:
                keyid:5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:67:e3:31:95:44:c4:cf:39:13:91:e9:76:c4:a3:ad:23:bd:
         36:b0:06:e1:3e:aa:1d:a0:03:35:58:70:6c:91:3e:1b:4a:86:
         7a:5e:4e:65:ec:ab:60:c4:18:31:85:db:cb:1c:cd:53:3c:f1:
         45:21:5f:f2:90:5f:63:dd:a5:84:74:75:91:96:8d:3e:d7:4a:
         e4:56:80:46:80:c7:ad:9d:07:9f:6a:f7:9f:19:cb:93:ce:ae:
         ad:3d:76:97:5b:93:bc:56:b8:be:a7:5d:66:bf:02:ef:58:26:
         28:45:16:8f:e9:00:ed:c8:55:4f:d2:d2:28:a8:5e:40:5b:24:
         6f:41:8d:8f:5d:b7:62:d3:61:4a:fe:cf:70:30:14:1e:a8:aa:
         b0:d5:88:be:c8:bd:cb:39:3a:ad:7f:3c:20:1a:19:75:57:5b:
         09:0e:67:50:9e:28:ec:96:ec:a6:4c:bb:8c:2a:c8:73:b5:77:
         73:a0:f4:fd:16:a4:52:6a:e0:5d:96:f2:99:f8:a0:18:c9:83:
         dc:eb:03:f6:38:1a:81:c6:bf:06:c6:5c:77:13:22:39:a4:08:
         8f:41:0f:a5:fe:98:b9:ef:0a:c2:d1:f6:02:8b:d9:cb:c0:54:
         81:92:8e:a5:b3:ff:51:14:8b:69:21:aa:9c:33:19:e5:37:5e:
         d9:08:ac:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----