Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
File:                     4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft (raw, json)
Hash identifier:          QIHF1gTnDMDOX3ruzlofTVhsrhZG06ja8i3OVyoG8nM=
Subject key identifier:   9B:73:04:F2:57:43:2F:1B:A7:DD:D3:09:6A:5B:96:84:6E:A9:49:DF
Authority key identifier: E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66
Certificate issuer:       /CN=F3639454AF/serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
Certificate serial:       0669
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
Manifest number:          0667
Signing time:             Sun 15 Nov 2026 02:48:21 +0000
Manifest this update:     Sun 15 Nov 2026 02:48:20 +0000
Manifest next update:     Tue 17 Nov 2026 02:48:20 +0000
Files and hashes:         1: 4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl (hash: bPzEPaitd1blarfK/Mfg473IRnmA6yqA5VHl0mMBQt8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1641 (0x669)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639454AF, serialNumber=E0BE2C42A62AE6D7529C17D344C2D2177637A966
        Validity
            Not Before: Nov 15 02:48:20 2026 GMT
            Not After : Nov 17 02:48:20 2026 GMT
        Subject: CN=6af91d75-4c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:76:8b:8c:f9:8a:b4:48:00:82:b7:c1:08:bd:
                    c6:15:c8:c8:a3:c9:95:71:7f:47:2a:fb:1c:3b:17:
                    d6:2e:d6:ea:d0:c1:53:7d:31:f7:2d:d9:1e:7c:fa:
                    97:01:3b:3a:90:61:79:c9:1f:51:ad:c3:ee:eb:47:
                    29:1a:99:fd:af:81:3c:52:80:30:2a:fa:fe:69:67:
                    f7:f2:7a:1d:08:cf:d2:a6:2c:ce:8f:12:c8:18:c8:
                    47:80:4d:c6:14:fd:34:97:a6:e7:58:51:47:ed:f8:
                    8d:fd:96:b3:3a:45:cf:51:6b:18:08:44:75:76:5c:
                    b9:3e:2c:6a:86:c7:ed:09:11:d5:94:ed:64:91:17:
                    b3:0d:6c:eb:8a:aa:50:2f:cf:b3:01:1c:4e:d9:90:
                    98:d7:39:d6:91:6e:13:73:67:94:b4:8d:ff:44:a4:
                    4e:74:56:fc:3b:08:e5:2a:fc:a5:74:90:6a:19:4a:
                    48:81:8a:9e:94:df:53:41:e1:ec:ba:00:8a:c5:b6:
                    03:f5:49:35:a4:b6:24:ac:10:2d:57:66:ca:25:51:
                    98:8d:f7:00:41:0c:d1:2c:e6:a2:24:88:d8:3e:d7:
                    e0:1a:44:94:73:9b:98:92:01:23:a5:f8:d1:fe:26:
                    7a:70:64:6f:83:70:51:bc:77:fb:c2:8f:3f:b0:ea:
                    fd:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:73:04:F2:57:43:2F:1B:A7:DD:D3:09:6A:5B:96:84:6E:A9:49:DF
            X509v3 Authority Key Identifier:
                keyid:E0:BE:2C:42:A6:2A:E6:D7:52:9C:17:D3:44:C2:D2:17:76:37:A9:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639454/AF906B7EF92F11EC815BF183F1222468/4L4sQqYq5tdSnBfTRMLSF3Y3qWY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:84:f2:4a:5d:ef:e4:92:d3:06:5c:cf:d1:f6:9f:bf:c6:6f:
         5d:2c:d0:78:93:9e:f2:43:9a:30:79:ff:d4:14:40:34:11:7a:
         0c:b4:d3:ca:ae:8e:d6:f6:c3:59:e9:7e:18:4d:6e:f4:75:1e:
         b8:e3:7f:34:c8:99:ba:7f:8c:05:8c:37:41:d6:98:0d:84:78:
         af:b8:6d:19:f3:9d:69:46:86:9b:27:44:db:b2:b0:ce:1b:c8:
         b2:11:f3:bd:d9:ce:a3:d9:b9:ca:93:f7:1e:21:fb:94:71:01:
         26:16:3e:95:de:32:ac:93:b7:52:57:cc:0d:7c:be:b6:e0:8d:
         d5:19:5f:f6:71:56:7e:de:f5:93:b7:a4:b9:17:69:a7:ee:23:
         ed:a9:a5:d2:82:2e:ca:3d:97:d3:93:30:bc:ed:3c:ca:43:eb:
         54:66:fc:71:57:56:c5:78:3c:5b:36:ec:4c:90:e1:02:76:dd:
         f5:56:db:41:a7:33:80:49:c0:c3:df:ae:97:08:f8:19:bc:49:
         28:7c:cd:11:3b:43:ea:1d:31:5e:33:a7:00:c0:62:a4:54:2e:
         74:42:23:35:62:c6:23:86:0f:60:1a:66:80:ad:5a:fd:f0:b4:
         0f:55:32:f4:73:a9:bb:6b:93:c1:ba:16:6e:71:5b:2b:cc:98:
         08:8a:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----