Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
File:                     8GzMRNUs-b4RXOx6TaaxMJukOaU.mft (raw, json)
Hash identifier:          5i9baBvARuMcIXWwfZpZQwo8wj9yxYf95VmjAW6kXUk=
Subject key identifier:   CB:02:98:C9:A3:88:97:B2:0E:09:A3:32:1F:F5:5B:1F:EB:B4:97:60
Authority key identifier: F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5
Certificate issuer:       /CN=F36390A9RI/serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
Certificate serial:       02ED
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
Manifest number:          02EC
Signing time:             Wed 14 Oct 2026 04:33:15 +0000
Manifest this update:     Wed 14 Oct 2026 04:33:15 +0000
Manifest next update:     Fri 16 Oct 2026 04:33:15 +0000
Files and hashes:         1: 8GzMRNUs-b4RXOx6TaaxMJukOaU.crl (hash: Q6Y0fCPw/lOpg9J7Kt9u+6bOsDcV+spEudYMCL+5hBE=)
                          2: 7F1695F2871411EF981CC64F762E951A.roa (hash: y+9csfTO7VjobZ1q8Iv+RH3EIrHQat1B/mZ0hIosNpk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                          rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749 (0x2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9RI, serialNumber=F06CCC44D52CF9BE115CEC7A4DA6B1309BA439A5
        Validity
            Not Before: Oct 14 04:33:15 2026 GMT
            Not After : Oct 16 04:33:15 2026 GMT
        Subject: CN=6acf060b-e541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c1:f4:64:d7:bb:cc:c9:76:80:0f:2e:7a:e7:
                    91:6a:d5:cd:e8:55:5d:61:92:21:e1:8a:40:61:9b:
                    24:0e:16:41:66:81:91:0e:e9:bc:1a:2b:b1:58:b4:
                    0b:16:22:cd:fd:70:96:30:14:2e:e7:25:b2:df:7d:
                    42:d4:18:36:f5:01:70:88:47:fd:08:80:08:6c:98:
                    ce:ca:18:0e:16:c3:2f:2d:17:0d:62:0d:a7:f4:c9:
                    55:ef:28:17:64:17:5e:08:ba:0b:59:bf:86:15:c4:
                    c7:c6:76:60:8b:bd:cc:a5:ee:72:79:13:aa:d5:7f:
                    40:71:c7:5e:54:bd:f8:f4:7a:d2:b4:f0:3a:c6:69:
                    90:58:65:af:c6:ef:45:74:aa:81:7f:c9:b6:74:e1:
                    a2:b8:b4:3c:60:98:ab:8c:c8:17:ff:ba:ae:65:29:
                    f6:43:a9:8d:65:cc:92:5e:dd:39:9f:74:91:e5:bb:
                    6a:92:76:7b:a5:6a:c2:5f:df:da:23:94:7b:f6:07:
                    31:22:cc:95:6f:3a:a6:86:b3:78:0a:04:81:bf:0d:
                    5c:a8:f7:66:04:86:30:99:2f:19:e9:1a:be:c0:94:
                    1a:3e:05:b9:e4:ee:c3:7f:b2:c6:a1:69:5a:12:c4:
                    71:55:6b:c9:76:30:f8:f2:18:45:33:9e:0d:25:d0:
                    26:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:02:98:C9:A3:88:97:B2:0E:09:A3:32:1F:F5:5B:1F:EB:B4:97:60
            X509v3 Authority Key Identifier:
                keyid:F0:6C:CC:44:D5:2C:F9:BE:11:5C:EC:7A:4D:A6:B1:30:9B:A4:39:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/8GzMRNUs-b4RXOx6TaaxMJukOaU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/1B3A425486E211EFB4686096762E951A/8GzMRNUs-b4RXOx6TaaxMJukOaU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:f0:36:1e:e8:24:43:70:29:06:a0:50:c1:27:2d:42:83:ce:
         5e:35:b2:05:f4:ad:dd:4d:02:c0:21:e0:74:33:63:5a:34:8e:
         7c:96:b0:ff:58:f9:8f:c7:3d:e7:07:37:82:15:f8:32:4c:9f:
         42:79:97:58:85:1c:99:b5:98:23:5a:81:e3:42:1d:2b:cb:4f:
         21:9a:c4:52:12:7b:e0:61:e8:5e:f5:57:e7:73:a7:2e:fd:47:
         8e:cd:57:cd:0e:67:e2:96:c9:13:80:cd:22:01:78:5d:c5:d7:
         95:8b:67:fd:17:e1:42:36:14:e9:75:4e:8a:6f:c0:91:ee:36:
         60:80:fe:9d:91:31:56:9a:1c:73:0c:f1:07:f2:09:48:f0:ea:
         14:24:bd:df:18:ba:13:90:f3:b6:f4:df:92:7e:b0:f5:96:ac:
         1b:15:7e:02:8d:c4:5d:4a:22:30:66:c1:fd:e6:f4:01:35:cf:
         95:a2:45:88:6c:05:7c:0f:b1:51:cd:98:e9:c6:23:63:79:2c:
         62:68:19:25:5b:ab:d3:b2:87:cb:ac:48:22:d1:a8:09:c3:06:
         43:40:e7:c0:bf:ad:86:74:75:b1:be:fc:de:1a:3e:8d:f9:31:
         f0:c0:5a:39:28:16:6b:d6:eb:fd:c5:87:76:0c:d8:61:d1:88:
         da:c3:d7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----