Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
File:                     Upl4cSNfYM1xWncQ_9bi6kyI0po.mft (raw, json)
Hash identifier:          7ZQxBlGtoerPJjMdQBBP8+fYEEsX8kRgoRavP4vQsRs=
Subject key identifier:   A4:89:97:85:3A:0D:0C:75:22:0E:DB:AC:A7:ED:20:D1:F3:2F:7C:03
Authority key identifier: 52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A
Certificate issuer:       /CN=F36F7F21AF/serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
Certificate serial:       068D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
Manifest number:          0680
Signing time:             Mon 26 Oct 2026 02:45:41 +0000
Manifest this update:     Mon 26 Oct 2026 02:45:41 +0000
Manifest next update:     Wed 28 Oct 2026 02:45:41 +0000
Files and hashes:         1: Upl4cSNfYM1xWncQ_9bi6kyI0po.crl (hash: jHs9LPty9eeFdRuRWAO+nc08rHI2h/ewHq/XGaaSp6M=)
                          2: B20CCB9E797911F1826E3FBFCE1D38B0.roa (hash: jFtBWD8b4/pcM12zi7gI3mC1xmb0s5cfDLKXIlCYkhg=)
                          3: 0960CA42BA3211F0A0CE52AFDAE4EC9C.roa (hash: /hSkccke2QwuiXgH6leYqgSqL0lMDfWuf3RDrn5+nSY=)
                          4: E6E760728BFD11F1BDE9D0A1CE1D38B0.roa (hash: Lra5L5tTGpW913Q+gWlmHX0eWlkSz0Num4hTY/9IHRg=)
                          5: 498039F28BFE11F1AEC9F8A5CE1D38B0.roa (hash: 4/w31jgZKaDe5nOxHUMZ2QljXJcUdfkoVW7DzGpwi9I=)
                          6: 72295C0E8BFD11F18CEA8BA1CE1D38B0.roa (hash: SRCUuBI/JjzAV7yK6yEAaPy+LUAUUyg5gCuWR+kBW74=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:45:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1677 (0x68d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7F21AF, serialNumber=52997871235F60CD715A7710FFD6E2EA4C88D29A
        Validity
            Not Before: Oct 26 02:45:41 2026 GMT
            Not After : Oct 28 02:45:41 2026 GMT
        Subject: CN=6adebed5-01eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b6:20:92:b1:9b:bf:91:49:8d:9f:f7:d9:85:
                    52:4e:bd:0c:d6:48:4a:be:09:7c:36:14:29:3c:e8:
                    58:76:6c:7a:6c:8f:52:79:6b:1f:d2:41:f7:0a:c8:
                    8c:73:6d:72:e9:57:1f:01:05:bc:16:f2:ee:f7:4d:
                    dd:35:00:8e:ac:0d:60:3d:f7:df:f9:76:f4:33:f8:
                    c7:98:a6:20:b3:c8:2d:e8:7b:80:e1:cc:68:a8:fb:
                    63:5a:69:c8:ec:de:a6:13:a8:be:8e:57:d2:e9:84:
                    5f:0f:f1:af:de:28:b7:9f:bc:40:2a:47:58:d1:0e:
                    5c:db:36:6d:cb:81:fe:a8:c9:df:23:a4:ec:82:3d:
                    4f:90:cd:57:b6:c2:02:7c:9e:2f:9f:56:7f:11:11:
                    fb:31:6f:c0:ab:34:a4:6e:f3:2e:fa:68:2f:23:34:
                    7a:4a:01:ea:35:ee:da:2b:d3:a6:24:f8:b2:38:81:
                    bd:dc:c2:3f:59:11:d1:3f:49:b7:5a:0e:74:37:dc:
                    7d:76:e7:06:a9:3d:5d:b0:d2:02:0c:56:3a:1c:24:
                    21:be:b1:c5:86:bb:e0:38:93:a2:a0:df:2e:bb:97:
                    0f:b7:e3:cb:50:3d:07:e2:64:cc:92:4e:69:72:ae:
                    b5:f2:2f:bb:7f:4a:1c:7c:a8:0a:ce:79:a9:50:65:
                    25:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:89:97:85:3A:0D:0C:75:22:0E:DB:AC:A7:ED:20:D1:F3:2F:7C:03
            X509v3 Authority Key Identifier:
                keyid:52:99:78:71:23:5F:60:CD:71:5A:77:10:FF:D6:E2:EA:4C:88:D2:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Upl4cSNfYM1xWncQ_9bi6kyI0po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7F21/355D737EE70011EC9C84D7B9F1222468/Upl4cSNfYM1xWncQ_9bi6kyI0po.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:14:1b:e2:12:2a:ce:b8:98:f4:b2:aa:87:20:6f:01:ce:fd:
         cf:45:1a:e1:37:36:cc:81:96:70:a4:ff:9d:e7:2b:77:99:dc:
         e6:8d:2a:5a:a4:15:b6:ff:63:b2:a8:54:54:c9:9d:02:d2:f6:
         1b:0b:41:35:69:99:67:aa:c4:f7:b4:d1:98:ca:0d:52:cd:41:
         97:36:38:23:83:fe:51:d2:ab:ed:08:e5:8b:29:cd:85:8d:ec:
         5a:fd:09:95:7b:9f:04:84:e0:cd:fd:be:3a:c0:3b:bf:4c:b5:
         29:eb:15:45:ce:70:fe:7f:ab:4e:ee:1d:ed:bb:bc:5d:9a:2a:
         5e:a0:34:cd:24:f4:7b:2c:19:01:86:3f:a9:22:3e:10:e2:33:
         42:70:8c:41:3a:86:69:14:fe:ca:39:8d:e0:b1:67:30:0a:d2:
         e2:42:b6:e4:42:e3:58:7d:7d:e9:76:2c:34:f8:73:45:d3:e6:
         dc:1d:0a:b2:bb:9f:58:69:ba:af:67:db:33:ad:f7:dc:5d:dd:
         0f:c2:39:32:46:eb:eb:62:98:4a:f5:71:f0:7d:1b:77:1c:f3:
         4e:7f:19:ae:7d:cf:e9:74:a8:2c:44:4a:e7:74:58:9e:19:9d:
         46:13:41:70:c0:8a:9a:2c:47:83:74:7c:b5:83:6b:8b:5b:65:
         db:f6:a3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----