Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
File:                     3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft (raw, json)
Hash identifier:          2BDMxNuVTTCWfGy35UiXCk6bzCaaM3i8hEZ0XUMSsag=
Subject key identifier:   F1:24:63:23:21:FC:EA:6C:5D:D3:87:E3:43:95:14:22:C4:9F:15:9A
Authority key identifier: DE:DA:4C:4F:3A:31:77:BA:23:6C:E4:6B:D7:FF:79:2E:3C:6B:C3:F4
Certificate issuer:       /CN=F361609CAF/serialNumber=DEDA4C4F3A3177BA236CE46BD7FF792E3C6BC3F4
Certificate serial:       0971
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
Manifest number:          0970
Signing time:             Sun 11 Oct 2026 01:46:53 +0000
Manifest this update:     Sun 11 Oct 2026 01:46:52 +0000
Manifest next update:     Tue 13 Oct 2026 01:46:52 +0000
Files and hashes:         1: 3tpMTzoxd7ojbORr1_95Ljxrw_Q.crl (hash: XKT8Bq3MhugLgVw8KIHi7yGLp9sIVvqRXQAAse99eAY=)
                          2: D7A1ECB283EF11EA9BA97462F8AEA228.roa (hash: TlTBwqHEQHiLLbQaXNnmF5UgaA5f3WCBAPGr0I+b64I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2417 (0x971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361609CAF, serialNumber=DEDA4C4F3A3177BA236CE46BD7FF792E3C6BC3F4
        Validity
            Not Before: Oct 11 01:46:52 2026 GMT
            Not After : Oct 13 01:46:52 2026 GMT
        Subject: CN=6acaea8d-8346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:06:d4:74:bb:de:b6:53:f2:8b:69:be:15:11:
                    79:8d:9d:42:a9:f4:a9:e1:69:86:64:7b:12:6b:2d:
                    7c:1e:74:d8:97:19:aa:01:57:e6:53:59:13:1d:41:
                    83:5e:59:20:11:27:0c:f4:f5:3f:50:25:78:21:00:
                    c1:30:fc:70:ba:c5:02:ed:d6:41:78:90:68:67:1f:
                    fb:56:bb:c7:b5:5b:21:fc:ee:9f:a1:ec:ca:04:4a:
                    f0:83:bf:3c:e7:2f:40:40:ab:db:ec:a8:9f:88:5c:
                    74:61:9e:5c:40:12:93:a9:7e:eb:fe:e2:bb:e6:c6:
                    9f:c3:f0:22:63:0d:76:99:85:b0:5b:f0:8e:40:42:
                    48:cf:e8:ed:95:c8:08:46:9d:24:4f:3d:c6:b8:9c:
                    8c:d2:7b:1e:c5:46:53:a1:cb:61:95:c0:f7:8c:56:
                    70:8f:d9:a4:1f:5a:55:05:7d:b1:ba:fb:9c:ca:9c:
                    c7:7a:96:a5:c6:ca:a0:60:f4:bd:6e:99:28:95:e3:
                    8d:fd:2d:fe:4b:9c:56:aa:f8:ea:90:c8:c8:cf:61:
                    57:23:a6:f4:e5:fe:02:9d:92:99:2d:ae:5d:43:85:
                    5a:ed:93:70:e2:b5:a6:95:6d:71:48:65:4f:e4:67:
                    a4:ea:a1:72:35:30:72:e4:08:2c:3e:1e:59:2e:f4:
                    50:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:24:63:23:21:FC:EA:6C:5D:D3:87:E3:43:95:14:22:C4:9F:15:9A
            X509v3 Authority Key Identifier:
                keyid:DE:DA:4C:4F:3A:31:77:BA:23:6C:E4:6B:D7:FF:79:2E:3C:6B:C3:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3tpMTzoxd7ojbORr1_95Ljxrw_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361609C/8C1B615283EE11EABE7A3161F8AEA228/3tpMTzoxd7ojbORr1_95Ljxrw_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a5:70:4b:6a:9c:b7:b4:40:d1:88:09:17:a0:74:62:e0:c5:
         9b:55:e6:46:5f:2e:d2:d6:b4:91:0a:15:9d:51:e0:44:7e:76:
         c4:7e:77:b0:39:09:3a:b5:3c:f9:33:92:ed:72:48:fe:7c:67:
         7e:37:c0:f5:c2:d5:6f:b3:c6:87:46:06:35:21:fb:cc:45:f5:
         3b:86:60:f3:d1:56:4c:6a:4e:76:49:8d:e7:6b:ce:14:31:53:
         8b:1c:c1:c5:d0:f4:d3:ea:fc:ab:64:c9:a9:4f:05:c6:2e:5f:
         52:64:ad:e2:5c:ec:2f:2b:48:5e:7d:b0:88:fb:0d:e9:e5:de:
         27:5d:6e:38:e1:92:ec:0b:3d:64:cd:8d:fe:e2:27:13:ef:10:
         2f:ad:05:56:46:a5:32:ee:86:53:53:a0:1b:3a:82:14:48:e9:
         cc:7b:ca:04:d5:fa:7b:c2:f8:16:4d:bc:fd:57:65:65:68:54:
         48:bf:b4:b2:03:1e:c4:21:ad:ab:ae:7c:66:14:8e:0e:7d:5e:
         8f:61:4f:1b:15:4b:4d:ff:63:63:cd:b4:8a:84:7b:01:9e:24:
         6a:ad:26:4d:fe:65:26:8c:d4:9a:95:30:36:05:9e:ab:b8:3a:
         15:fa:c2:f6:d8:63:cb:7c:b7:db:81:25:3e:6d:9f:a5:14:90:
         d9:43:c5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----