Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
File:                     XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft (raw, json)
Hash identifier:          05/KoCZGutpdNYk1nd2A17rMQa4yZRfFUJptjGbaNr0=
Subject key identifier:   23:5C:EB:98:1B:7F:C0:B4:A8:0C:3E:54:E9:D0:48:F1:E1:CB:B0:B7
Authority key identifier: 5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B
Certificate issuer:       /CN=F3627065AF/serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
Certificate serial:       031C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
Manifest number:          031B
Signing time:             Thu 24 Sep 2026 04:22:50 +0000
Manifest this update:     Thu 24 Sep 2026 04:22:49 +0000
Manifest next update:     Sat 26 Sep 2026 04:22:49 +0000
Files and hashes:         1: XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl (hash: 2REtgnx7wfI8/RuVvsRbJCvkWOOoU52SVbdi9rddq0Q=)
                          2: 47D8021A53D411EFA7C83C74762E951A.roa (hash: QwK+XpG/BTzSdMaFzgcL2FXrrpo9GOI3wltkdoXtHnY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 796 (0x31c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627065AF, serialNumber=5C0E8F1E8B90FDD294B54D57309013FC5A06A35B
        Validity
            Not Before: Sep 24 04:22:49 2026 GMT
            Not After : Sep 26 04:22:49 2026 GMT
        Subject: CN=6ab4a59a-47bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b3:0f:77:38:23:88:ad:01:19:3d:d3:be:16:
                    ea:36:1a:f0:ca:c9:e4:16:c2:31:a1:a3:39:61:bd:
                    ef:b8:11:0b:bd:ab:ca:73:19:ec:a4:48:a2:f3:df:
                    38:31:18:90:9c:c8:dd:b1:78:0c:ea:9d:39:f0:ed:
                    22:14:ac:1f:20:b9:e4:2c:cc:2a:06:07:82:a2:6a:
                    d4:ce:06:b8:e6:b7:42:99:f0:38:db:91:e9:8c:10:
                    bb:3e:54:b0:b7:84:1e:4b:1b:07:9a:6f:d6:a0:ff:
                    a9:ee:99:27:06:53:ec:2d:1f:a0:fb:29:60:8d:62:
                    b4:0f:a1:0b:58:29:4d:e2:01:ed:99:bf:95:c2:e6:
                    1a:2a:38:64:44:ea:ab:8b:e0:62:05:29:82:52:32:
                    83:e7:78:e3:03:43:3a:52:2e:5d:51:e8:4e:86:c3:
                    64:d0:66:53:f2:1e:54:2c:be:8e:89:56:cc:47:a7:
                    32:52:e2:91:a0:d5:cd:47:c6:7b:74:f9:b4:d1:3e:
                    75:18:40:17:5f:a5:59:8a:7b:b9:57:04:69:63:78:
                    d2:c2:71:3e:7e:49:a6:52:a2:e2:3b:c7:da:b6:52:
                    9e:dd:6c:9e:d6:16:6a:3c:c7:18:93:54:60:b2:c5:
                    59:52:01:ff:f7:4e:b5:fd:54:b5:09:0a:2e:59:78:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5C:EB:98:1B:7F:C0:B4:A8:0C:3E:54:E9:D0:48:F1:E1:CB:B0:B7
            X509v3 Authority Key Identifier:
                keyid:5C:0E:8F:1E:8B:90:FD:D2:94:B5:4D:57:30:90:13:FC:5A:06:A3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XA6PHouQ_dKUtU1XMJAT_FoGo1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627065/65AD365853D311EF9BB76F6F762E951A/XA6PHouQ_dKUtU1XMJAT_FoGo1s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:be:14:7c:23:7c:a8:39:32:cb:ec:e5:38:a5:e5:94:9e:eb:
         19:90:2c:00:ae:12:3f:43:eb:53:df:c5:68:6a:95:6b:3f:f2:
         bb:99:15:0c:5e:cf:ff:e7:36:03:aa:f1:3b:02:3e:32:9a:ea:
         65:e3:5f:ef:3e:c7:57:93:72:93:26:75:f3:92:25:fc:a2:f8:
         77:b3:09:b9:90:03:8e:a5:ac:fa:e6:d0:d6:6e:7d:fe:7f:1e:
         f1:11:ec:19:17:a5:c7:e4:1e:af:26:fd:05:4c:31:7a:64:97:
         0d:d8:6b:9d:b3:ed:f9:67:8a:8a:1d:cc:97:d4:d7:8d:92:b8:
         b2:6d:86:50:7c:b4:6a:88:f6:f4:75:22:f3:2a:54:fa:08:96:
         bd:88:98:06:50:ba:8d:78:df:ab:b1:e8:6b:74:d1:cb:9e:fa:
         00:19:ca:ba:f9:f7:cf:9c:cb:2f:5a:59:55:b8:f2:a7:b2:70:
         f9:05:18:75:75:e9:ff:cf:32:60:8b:d5:1e:8c:9d:67:b3:10:
         4c:83:5f:8f:8e:e9:19:0f:c0:0e:2c:0c:20:6c:15:02:76:76:
         1c:6a:fa:04:d8:15:fd:ef:ed:f2:16:60:c4:e6:44:71:87:86:
         99:e8:88:14:fd:16:ab:6f:68:a6:02:98:22:9c:0c:c7:f8:7d:
         1f:bf:49:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----