Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
File:                     k4vok1GoGkLfhHvzkxNy0JgwREY.mft (raw, json)
Hash identifier:          rCnfE0CJh9WgxfxFznrTvqZWvvzK0hR20IVSjlHdwB0=
Subject key identifier:   02:61:20:8E:1A:C0:10:A4:94:A0:F4:65:32:99:FA:24:FE:CC:7F:0E
Authority key identifier: 93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46
Certificate issuer:       /CN=F36F3412AF/serialNumber=938BE89351A81A42DF847BF3931372D098304446
Certificate serial:       0A33
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
Manifest number:          0A28
Signing time:             Sun 01 Nov 2026 01:41:09 +0000
Manifest this update:     Sun 01 Nov 2026 01:41:08 +0000
Manifest next update:     Tue 03 Nov 2026 01:41:08 +0000
Files and hashes:         1: k4vok1GoGkLfhHvzkxNy0JgwREY.crl (hash: fXHYwiyQcUpD2+aWVbse0V5gDBiugo7qSCTeoJTxN6M=)
                          2: 98EF30AA8DA311F1B24090AFCE1D38B0.roa (hash: sJm71oGph9KMpwM3rDSTtS+YxsIE62gCvetiP6QIx3c=)
                          3: 5ADAEA428DA411F19652A6B3CE1D38B0.roa (hash: 5JJQ358XU/uV4F04ikG8Wv5l2HlFyXE9smv14Iz/5C4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 00:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2611 (0xa33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F3412AF, serialNumber=938BE89351A81A42DF847BF3931372D098304446
        Validity
            Not Before: Nov  1 01:41:08 2026 GMT
            Not After : Nov  3 01:41:08 2026 GMT
        Subject: CN=6ae698b5-8452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:63:f1:3d:13:01:4d:97:f8:ee:42:7e:67:29:
                    bf:b5:b9:d7:fb:b3:5b:0d:bb:78:97:50:32:ab:ad:
                    0d:7f:ed:5a:91:a4:22:00:35:a5:8a:43:11:27:02:
                    bc:b0:b7:f3:44:b2:e4:d9:ed:6a:63:40:76:98:1f:
                    ad:ac:43:2a:b5:19:2d:a6:9c:75:35:5b:a6:eb:bd:
                    09:f8:ca:82:e9:b3:0c:3a:06:a7:8f:5a:31:85:93:
                    1d:f3:6b:73:0b:58:cf:e1:fb:45:45:27:12:f3:8c:
                    42:a9:55:7f:a4:74:1e:47:d8:f7:03:64:54:6d:ec:
                    f0:30:ca:ba:10:6c:30:df:6e:44:e3:ce:e2:f7:50:
                    72:d0:c0:35:ec:62:7d:c4:af:2f:c9:d9:46:06:2e:
                    6f:23:c3:cb:d8:40:48:aa:95:d8:ae:1a:55:ae:a7:
                    5e:40:cb:7d:f2:b0:9d:ce:bf:9a:1c:3a:c7:82:d7:
                    5e:63:f7:a6:b3:ca:48:c5:78:90:57:87:e0:ac:c1:
                    cc:00:03:aa:8d:6b:14:4a:76:81:fc:62:5a:fb:4b:
                    18:0a:33:1c:5d:e2:88:4f:50:2e:6d:53:3a:6d:f9:
                    0a:3d:94:64:96:7b:c5:05:9d:47:4f:ac:ad:09:2d:
                    d7:b4:9f:9b:32:fd:6b:23:55:b6:ca:e7:25:35:67:
                    5b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:61:20:8E:1A:C0:10:A4:94:A0:F4:65:32:99:FA:24:FE:CC:7F:0E
            X509v3 Authority Key Identifier:
                keyid:93:8B:E8:93:51:A8:1A:42:DF:84:7B:F3:93:13:72:D0:98:30:44:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/k4vok1GoGkLfhHvzkxNy0JgwREY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3412/E82C776A177E11EA9CA7BC0EF8AEA228/k4vok1GoGkLfhHvzkxNy0JgwREY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:58:cf:6c:c3:d7:4d:1c:77:52:0a:e7:0c:21:39:58:87:62:
         5e:0e:9e:8b:4a:0b:29:9b:a0:d4:d0:c1:a2:76:c1:99:02:b8:
         87:40:1d:9f:4c:aa:79:c0:f0:d1:a5:ce:9a:2e:48:48:98:b7:
         d1:8f:5e:79:ab:a1:21:55:27:67:b1:b3:a3:57:e4:15:79:c0:
         9e:79:e2:76:ef:c8:7a:f8:13:b1:6f:b9:c7:aa:df:31:8a:1b:
         11:aa:c2:54:a1:49:2b:1f:ea:c4:cc:78:20:a9:a3:99:19:0c:
         b5:10:90:5f:a2:4e:6e:f8:2d:09:da:d1:d4:be:fc:df:c9:45:
         4f:b3:7b:d9:07:55:ed:8f:45:58:90:59:6c:10:fd:9f:da:0b:
         ad:c5:d5:bc:b5:5b:26:a4:f3:32:8d:92:fb:0c:23:8b:6f:7a:
         94:75:19:2a:cb:29:d1:bb:37:0a:31:50:13:bc:41:fe:52:df:
         3f:d7:65:37:b3:f0:0a:dd:04:16:e4:69:78:84:cc:ec:c1:34:
         85:49:4c:e9:ce:bb:e9:5e:4b:24:ac:b6:eb:05:ec:ca:79:40:
         c5:6b:96:0d:53:a3:bf:3d:23:a0:f1:89:c2:9e:6a:8b:0a:94:
         fb:46:6b:b4:08:fd:1b:b5:56:df:b2:e2:31:da:e9:5c:12:ff:
         1e:44:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----