Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          EgSzeAAeQkf2abzwhi4aOEKRY2AouRaNICgRnhxEm/Y=
Subject key identifier:   D0:7B:CB:B3:F6:63:2D:92:72:37:A5:0C:F4:52:89:62:86:CF:8D:40
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       0516
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          0512
Signing time:             Sat 24 Oct 2026 03:26:23 +0000
Manifest this update:     Sat 24 Oct 2026 03:26:22 +0000
Manifest next update:     Mon 26 Oct 2026 03:26:22 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: RP+nXn/2Ks+Q7Vq2bDtujetgxtZHb39m+mhvw957Vic=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1302 (0x516)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: Oct 24 03:26:22 2026 GMT
            Not After : Oct 26 03:26:22 2026 GMT
        Subject: CN=6adc255f-e402
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:f6:41:8f:33:10:66:33:0f:3a:28:12:92:
                    d6:a9:81:f7:1c:50:57:9f:f7:51:e4:de:24:a3:ff:
                    6e:75:46:da:a5:62:98:ab:01:f5:69:84:5a:19:7b:
                    2d:dc:c5:1c:31:d6:5e:e8:10:bb:61:9f:b0:2f:29:
                    4d:96:50:4e:63:0e:c3:56:b3:e8:c5:d6:93:ef:27:
                    61:2c:ff:4a:28:b6:65:d0:dd:f9:20:19:db:c5:35:
                    51:96:60:de:1e:8b:b2:8d:a5:33:e2:21:cb:36:6d:
                    66:38:ec:f6:c0:56:fc:1a:37:60:4e:46:03:21:83:
                    99:94:ea:8d:df:06:3f:77:86:8a:b4:31:41:35:3c:
                    d5:9e:50:82:e3:c8:bc:e5:72:9c:c2:7d:6a:05:d2:
                    29:d5:95:ae:9c:d2:89:4d:9f:6c:b1:72:25:f8:bf:
                    f7:9f:bd:78:b6:70:35:d5:6d:ce:fb:a0:70:f1:bb:
                    d3:50:a5:70:17:4a:94:76:59:6c:fb:95:75:ea:cf:
                    5b:7b:2c:4e:ef:da:8a:b0:8e:26:8d:29:e8:5d:74:
                    2a:d1:26:44:f7:72:d4:ba:2a:54:25:24:a4:71:0b:
                    93:31:a2:96:56:24:34:6d:e4:0c:99:67:a8:1e:4c:
                    71:fa:65:5e:78:7b:01:67:ad:fb:cb:91:37:3c:1c:
                    5d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:CB:B3:F6:63:2D:92:72:37:A5:0C:F4:52:89:62:86:CF:8D:40
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f3:3c:0b:10:4f:eb:0c:f1:c6:70:97:08:91:27:e9:46:f8:
         7b:ac:86:dd:95:89:8b:81:0e:e4:f7:e1:6b:fe:8a:c0:50:ce:
         3e:11:ea:a4:a3:4a:c5:68:65:fc:ee:df:27:07:d9:26:c6:0c:
         56:d7:e3:6a:2d:55:58:db:9b:1f:74:f1:90:51:84:f7:fb:a8:
         3d:fa:ed:5c:70:18:73:b5:d1:7c:9d:73:ba:6a:a0:12:0d:b4:
         dd:e1:c9:05:5b:55:05:10:73:31:57:92:9a:19:15:97:9d:99:
         b5:21:0f:dc:b1:33:b3:91:1e:d0:00:61:31:2d:e6:b1:0f:10:
         69:08:0b:ca:13:b1:49:d8:9c:d1:08:fb:58:13:86:1c:76:5d:
         a1:48:2e:1e:e3:a0:08:58:70:3e:40:8d:3c:2d:1f:37:f9:ea:
         cb:38:8c:46:8e:e2:f3:99:43:e1:a3:9f:73:f5:c7:2c:ad:2a:
         33:ba:2c:26:ed:c3:88:54:10:fe:6a:69:2b:e6:14:dd:f3:83:
         4e:fb:68:21:d0:77:26:27:4f:99:b8:4c:b9:c9:9e:e1:77:bb:
         2b:a7:33:f0:84:81:ae:85:33:e9:1e:93:88:68:50:a3:24:02:
         5e:04:68:99:b7:01:83:ca:b9:42:1a:33:46:57:4d:6b:20:d4:
         a6:d9:bd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----