Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FB4CD/C8D67202C17D11F1A6981CDDCE1D38B0/aNvA7OKNKXjZGy5rDxsvo8zCbwc.mft
File:                     aNvA7OKNKXjZGy5rDxsvo8zCbwc.mft (raw, json)
Hash identifier:          bB7Ce6MNvm74a+pOeBg338N0ukmsneK0AZI6ze6d45s=
Subject key identifier:   E3:D0:ED:3E:52:BC:DF:40:D9:9D:21:98:C0:58:C2:C6:AD:B5:F0:5A
Authority key identifier: 68:DB:C0:EC:E2:8D:29:78:D9:1B:2E:6B:0F:1B:2F:A3:CC:C2:6F:07
Certificate issuer:       /CN=F36FB4CDAF/serialNumber=68DBC0ECE28D2978D91B2E6B0F1B2FA3CCC26F07
Certificate serial:       13
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aNvA7OKNKXjZGy5rDxsvo8zCbwc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/C8D67202C17D11F1A6981CDDCE1D38B0/aNvA7OKNKXjZGy5rDxsvo8zCbwc.mft
Manifest number:          13
Signing time:             Sat 24 Oct 2026 06:03:06 +0000
Manifest this update:     Sat 24 Oct 2026 06:03:05 +0000
Manifest next update:     Mon 26 Oct 2026 06:03:05 +0000
Files and hashes:         1: aNvA7OKNKXjZGy5rDxsvo8zCbwc.crl (hash: tchxYw80pOSONzMzSxrrukDVvkrSzKYDQqAXQUND6Jo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/C8D67202C17D11F1A6981CDDCE1D38B0/aNvA7OKNKXjZGy5rDxsvo8zCbwc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/C8D67202C17D11F1A6981CDDCE1D38B0/aNvA7OKNKXjZGy5rDxsvo8zCbwc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aNvA7OKNKXjZGy5rDxsvo8zCbwc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 06:03:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB4CDAF, serialNumber=68DBC0ECE28D2978D91B2E6B0F1B2FA3CCC26F07
        Validity
            Not Before: Oct 24 06:03:05 2026 GMT
            Not After : Oct 26 06:03:05 2026 GMT
        Subject: CN=6adc4a19-b457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c5:aa:3f:ce:e9:11:92:ee:a9:b3:d3:90:c9:
                    17:30:90:f5:00:5d:99:6c:df:e0:a7:a7:7e:8e:20:
                    e2:e7:3b:40:c3:e9:be:e9:f3:b9:47:ff:bb:fd:68:
                    40:66:25:c5:08:a3:d5:95:9d:aa:72:d0:46:ce:dd:
                    8b:5d:ac:71:c3:0c:a6:46:48:0b:62:11:18:9c:75:
                    a3:db:88:d3:56:87:30:c5:62:c5:99:68:3e:15:10:
                    e2:6a:36:38:36:38:c4:00:58:ce:c2:49:e0:9a:ab:
                    f8:51:5a:ad:18:9b:92:7f:14:4c:39:4d:0e:0e:f9:
                    ed:26:73:90:93:68:12:e0:e1:2b:21:98:f6:8e:fd:
                    f1:bd:b1:88:5b:e6:dd:75:cf:b1:06:67:66:f1:95:
                    ba:2e:a9:bb:e4:11:b5:50:66:b7:04:90:a7:e3:0c:
                    21:18:8f:00:eb:7a:08:b9:3d:4c:f3:2f:b3:a8:db:
                    d0:51:c2:e5:b0:bd:a4:68:df:32:cd:99:b0:f8:8f:
                    0b:cf:6f:44:02:f9:90:20:9a:e9:99:36:0a:28:65:
                    5b:1f:22:21:81:19:8c:e7:16:4a:fe:5a:56:11:8b:
                    1b:94:9f:34:b3:4e:67:68:73:a4:c7:27:bb:29:ec:
                    27:19:a0:e7:d2:cb:fb:a4:00:af:cd:8c:87:d9:f6:
                    fe:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:D0:ED:3E:52:BC:DF:40:D9:9D:21:98:C0:58:C2:C6:AD:B5:F0:5A
            X509v3 Authority Key Identifier:
                keyid:68:DB:C0:EC:E2:8D:29:78:D9:1B:2E:6B:0F:1B:2F:A3:CC:C2:6F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/C8D67202C17D11F1A6981CDDCE1D38B0/aNvA7OKNKXjZGy5rDxsvo8zCbwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aNvA7OKNKXjZGy5rDxsvo8zCbwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB4CD/C8D67202C17D11F1A6981CDDCE1D38B0/aNvA7OKNKXjZGy5rDxsvo8zCbwc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:cd:f9:30:cd:79:29:0f:87:45:95:5a:cd:8f:33:52:45:c7:
         b6:82:7d:c8:c0:5a:e0:88:d3:a9:f3:2a:42:e9:74:8d:67:fd:
         c8:aa:43:26:1d:4f:2e:e0:09:71:56:a6:a8:80:46:9b:6d:dc:
         25:54:e8:e8:6e:f8:08:58:16:89:a9:3e:8b:72:7f:42:df:26:
         a4:bf:25:f7:b3:1c:ab:dd:a5:59:67:fc:66:e7:87:fc:06:98:
         50:17:b9:52:96:99:80:43:8d:a8:8f:b4:0d:4a:a8:98:e7:42:
         bb:ee:5c:de:29:3c:5b:aa:2a:18:c2:b7:2d:84:d0:e5:38:26:
         d1:32:1a:9e:af:51:a4:67:fe:06:5f:dd:e1:42:b5:d9:3d:bd:
         21:0f:7d:df:76:58:04:fc:27:96:2e:e6:f7:29:c7:fe:ef:21:
         b9:72:d6:5f:d1:37:c9:30:32:82:22:09:d8:5f:a1:20:f5:5d:
         08:49:00:94:7b:6e:ae:4c:30:a7:d5:a6:45:03:2b:b1:37:6b:
         1f:12:b2:7b:fb:bb:8d:59:78:26:19:8c:75:33:9d:ad:a7:06:
         00:1c:97:9b:8a:43:7a:3e:73:e1:32:a8:bb:4a:4d:fc:0b:63:
         98:20:2c:62:ba:c4:76:54:13:a4:ca:32:d9:6a:20:e3:c5:72:
         ba:6d:e6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----