Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
File:                     XTIRwmpetGVqxFtni0_0vyQECa4.mft (raw, json)
Hash identifier:          cD9ChCZczSdOJt3+Mf8M8Nh+s0cFLGvM7hTekgsoono=
Subject key identifier:   26:5B:42:83:7A:BF:7D:CC:2A:91:B1:45:A1:1F:B4:20:60:BE:44:AF
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Certificate issuer:       /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial:       02FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
Manifest number:          02FB
Signing time:             Sun 11 Oct 2026 04:32:52 +0000
Manifest this update:     Sun 11 Oct 2026 04:32:52 +0000
Manifest next update:     Tue 13 Oct 2026 04:32:52 +0000
Files and hashes:         1: XTIRwmpetGVqxFtni0_0vyQECa4.crl (hash: E+McStnpdSM9rifpwvKmk0viH2ipq9dxroQ90Si6UTU=)
                          2: 9643C3ACBFEF11F085B1BFE1DAE4EC9C.roa (hash: 2uFOUkSFKVasJhOLfUiTVE3r4VWf4k4tupX7FNxvep4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 765 (0x2fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625046AF, serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
        Validity
            Not Before: Oct 11 04:32:52 2026 GMT
            Not After : Oct 13 04:32:52 2026 GMT
        Subject: CN=6acb1174-43ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cf:a1:98:fa:b6:b5:cd:29:4d:d1:3b:b2:86:
                    fd:1e:25:fe:81:4c:31:a3:cd:0e:97:6f:ea:0a:f6:
                    66:fc:a6:e6:f1:d1:12:f6:aa:13:b2:16:cf:48:ff:
                    94:be:e3:90:a5:fa:45:b3:c7:ba:9a:81:c1:fd:47:
                    08:c8:a3:ab:77:88:1b:a3:0f:33:f2:99:94:5b:09:
                    7a:cf:32:57:c0:b3:26:38:4d:8a:79:9d:de:db:b9:
                    c3:8a:be:62:7e:6a:cc:2d:9b:64:11:7a:a9:7e:30:
                    f2:b2:b1:c7:eb:f5:dc:fb:3c:56:67:8b:d2:7c:b1:
                    65:b0:74:a6:98:3a:35:92:cc:36:19:3d:6c:b0:1a:
                    22:25:24:a4:f2:c4:a5:94:8f:d0:8e:92:91:cf:c8:
                    7b:10:f7:1e:82:81:72:74:b3:11:62:4a:59:aa:de:
                    5f:e8:2a:e8:cf:13:46:c3:56:85:12:7a:41:e1:c7:
                    d2:30:02:b1:43:18:04:8d:da:fc:16:3a:cb:50:13:
                    bd:79:39:b0:a1:81:1b:e6:f8:38:c5:7b:8c:f2:d6:
                    c0:a9:4e:61:f4:de:a1:b6:b9:a0:00:59:fc:ba:cd:
                    eb:3d:8e:8f:d5:b6:50:be:9f:16:3c:3d:d1:0f:34:
                    8a:00:b3:33:7c:52:84:66:3d:22:b4:85:66:f1:df:
                    1f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5B:42:83:7A:BF:7D:CC:2A:91:B1:45:A1:1F:B4:20:60:BE:44:AF
            X509v3 Authority Key Identifier:
                keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:af:4d:c2:90:47:6b:f7:cc:7d:c4:6b:49:50:e7:1b:29:60:
         76:4e:91:13:99:8c:64:92:3e:9e:55:ce:88:4d:8a:fd:d6:0d:
         9f:90:56:d9:bf:bb:f7:79:2f:a0:60:76:98:2c:5a:11:ca:ad:
         58:73:0d:ce:a7:4c:f4:bd:2b:c8:e7:cd:2a:9d:bc:73:9f:f2:
         6f:80:1e:05:9b:e5:11:93:c0:78:b8:3b:ad:3f:fd:3a:de:36:
         24:a1:ef:70:76:76:a9:ec:38:3b:14:30:ef:34:8b:0a:01:af:
         08:e6:7c:a3:fb:af:8f:77:1b:42:4c:6b:f2:3f:0b:b3:bb:bd:
         2b:e9:5d:83:a2:77:72:ad:98:42:a2:e3:f8:fe:48:4e:d7:e4:
         bf:32:da:80:92:75:38:3a:38:f5:00:b4:a1:6a:4b:4e:e7:a2:
         35:f0:7c:64:3f:cd:6f:47:68:1e:3e:1a:25:fe:41:7b:0c:25:
         81:b1:79:b1:41:15:89:94:c5:5a:36:68:ce:e5:f5:1a:8a:71:
         bf:2f:ef:97:82:78:cc:c0:24:0f:eb:7b:b8:0c:8b:47:c1:90:
         f5:51:b4:8e:77:0f:d9:d2:0b:5c:43:35:89:10:31:7c:26:cc:
         81:2d:e3:a8:eb:eb:bf:d7:76:5f:a4:fb:f8:7f:a6:6d:6a:e2:
         ef:4e:08:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----