Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.mft
File:                     aQoBi0Pk6yF6DApLdmMnY8piBic.mft (raw, json)
Hash identifier:          wxCiYLObuX51jcrAEIXxNfVHlQSn4ed9QmsEhT0/sM8=
Subject key identifier:   4B:00:85:FF:32:97:6B:A7:BB:4C:C2:61:AF:A4:7D:33:3B:FD:58:4E
Authority key identifier: 69:0A:01:8B:43:E4:EB:21:7A:0C:0A:4B:76:63:27:63:CA:62:06:27
Certificate issuer:       /CN=F362AEDFAF/serialNumber=690A018B43E4EB217A0C0A4B76632763CA620627
Certificate serial:       3A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aQoBi0Pk6yF6DApLdmMnY8piBic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.mft
Manifest number:          39
Signing time:             Sun 15 Nov 2026 05:55:20 +0000
Manifest this update:     Sun 15 Nov 2026 05:55:19 +0000
Manifest next update:     Tue 17 Nov 2026 05:55:19 +0000
Files and hashes:         1: aQoBi0Pk6yF6DApLdmMnY8piBic.crl (hash: xqI9R8hkQf99bVU0IT5tu0DgJ5hkwrXdI6Vxkla+fF4=)
                          2: 3D973C18B75911F190FE8FACCE1D38B0.roa (hash: zRMNBBlDa8FKzDxgX7XPCSVqHDBLcFHvrrlFOoPZZIw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aQoBi0Pk6yF6DApLdmMnY8piBic.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AEDFAF, serialNumber=690A018B43E4EB217A0C0A4B76632763CA620627
        Validity
            Not Before: Nov 15 05:55:19 2026 GMT
            Not After : Nov 17 05:55:19 2026 GMT
        Subject: CN=6af94947-abd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:7a:be:9f:61:cf:2b:5e:7a:06:cb:58:9b:
                    60:d4:57:09:37:8e:59:bc:64:38:3e:cd:e6:46:ff:
                    0e:9f:f9:52:d6:9e:1e:22:b9:94:14:c5:8a:79:af:
                    79:56:ab:86:30:61:f4:37:5f:5a:4c:17:00:67:65:
                    bf:d4:96:1e:5c:b3:98:a0:fb:c5:b5:47:37:1e:0c:
                    be:4a:be:10:31:ab:5b:2d:45:17:9b:dd:c6:74:81:
                    fc:78:a1:73:8d:cd:82:df:04:4f:b5:9c:ae:86:d0:
                    b0:5c:ed:08:23:41:7a:c6:43:50:83:da:6b:b7:b8:
                    4f:f1:47:7c:8f:ba:92:66:11:81:84:61:a4:7e:12:
                    9e:90:85:51:20:8f:59:0f:39:cf:a7:45:57:e9:e4:
                    59:ed:ea:75:59:73:f6:f1:36:27:ca:44:54:d5:d6:
                    8b:a2:00:04:e0:05:81:7a:f2:59:5b:93:68:d8:e4:
                    49:dc:3d:f2:ed:37:82:2b:fe:d2:8c:02:57:15:67:
                    cb:d2:82:91:54:e0:d8:41:e3:f3:47:bb:b0:82:7d:
                    0a:21:26:9a:e8:18:ed:6e:f3:b2:e8:13:f3:1f:b8:
                    9f:08:b2:29:f3:7b:77:af:45:71:75:43:31:ec:89:
                    3f:f3:73:5f:3c:3a:32:f3:fd:97:c3:e9:dc:e9:b4:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:00:85:FF:32:97:6B:A7:BB:4C:C2:61:AF:A4:7D:33:3B:FD:58:4E
            X509v3 Authority Key Identifier:
                keyid:69:0A:01:8B:43:E4:EB:21:7A:0C:0A:4B:76:63:27:63:CA:62:06:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aQoBi0Pk6yF6DApLdmMnY8piBic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AEDF/C5AD13C8B75611F182A48A1BCF1D38B0/aQoBi0Pk6yF6DApLdmMnY8piBic.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:1f:03:6b:8a:28:91:47:19:0b:71:e4:60:80:3c:f4:69:a6:
         d0:72:d7:0e:c4:e5:40:25:b5:60:15:09:95:b8:df:29:32:48:
         f5:79:a3:99:67:95:ed:8c:85:a3:ef:bd:96:d5:dd:37:22:c9:
         01:59:15:8a:90:8b:c0:a7:92:1a:f8:ee:24:77:87:99:2e:52:
         9e:81:0c:5f:4a:f9:27:0b:23:13:52:9c:25:ab:e7:22:ed:10:
         0e:47:0d:09:58:83:d1:7f:0d:54:a1:ab:1a:99:2c:18:74:e9:
         79:a8:b0:3d:b6:cf:d2:4a:7b:f5:f5:2b:59:e0:4b:2c:4b:76:
         bc:41:ea:fd:69:74:5c:dc:3e:a4:ca:4d:c5:7a:f2:dd:52:f9:
         43:44:44:f8:8b:f9:0c:bf:5b:02:55:5e:eb:ec:cf:5b:a4:e4:
         4b:b9:81:59:77:09:dd:39:9e:5a:99:76:d3:fd:e0:40:13:41:
         35:be:78:26:c0:12:fe:38:95:21:37:c3:8c:9f:3d:6c:80:9a:
         c0:05:40:1d:04:bf:95:54:0f:b6:c6:a4:8c:df:2f:00:dd:2a:
         d5:2a:1b:ca:02:e4:08:8d:c9:06:07:85:1c:55:61:6f:9f:08:
         d6:ca:51:b7:69:ad:b8:6c:79:aa:95:fc:c3:05:65:9c:8e:3e:
         46:a4:4c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----