Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
File:                     U-hK8pdaGMGaOWVSP_CxvITmAj0.mft (raw, json)
Hash identifier:          F0b2N55LSgR0O7LQbP38cm6gDQQshfVviTaYeq6wmZA=
Subject key identifier:   99:7D:01:23:98:48:7B:3C:A3:7C:73:2E:E3:01:AA:83:C4:6F:85:22
Authority key identifier: 53:E8:4A:F2:97:5A:18:C1:9A:39:65:52:3F:F0:B1:BC:84:E6:02:3D
Certificate issuer:       /CN=F3642A06AF/serialNumber=53E84AF2975A18C19A3965523FF0B1BC84E6023D
Certificate serial:       0126
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
Manifest number:          0125
Signing time:             Sat 14 Nov 2026 05:23:43 +0000
Manifest this update:     Sat 14 Nov 2026 05:23:42 +0000
Manifest next update:     Mon 16 Nov 2026 05:23:42 +0000
Files and hashes:         1: U-hK8pdaGMGaOWVSP_CxvITmAj0.crl (hash: ZiG79+W4aDMaLCHSgPamXX/hPgtxTNws9Z/KcsJwUTw=)
                          2: 30AAB082FC6211F0840064D0DAE4EC9C.roa (hash: FTL97fxTl1eE12YVO6r15mzp9MJrM8fqutIMlkKBkag=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 294 (0x126)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642A06AF, serialNumber=53E84AF2975A18C19A3965523FF0B1BC84E6023D
        Validity
            Not Before: Nov 14 05:23:42 2026 GMT
            Not After : Nov 16 05:23:42 2026 GMT
        Subject: CN=6af7f05e-8215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:af:5d:ea:e1:0b:45:9b:b4:a7:b2:2b:a7:b8:
                    e4:dd:ca:57:26:60:f6:ca:f8:e3:aa:e7:a2:93:d9:
                    fd:b3:3e:f4:80:4f:9a:19:fd:3c:b9:48:b2:00:b0:
                    1a:5a:84:81:7f:30:53:9f:0d:f6:1c:6a:55:dc:77:
                    4d:a3:99:d4:2f:7d:da:be:f8:75:a3:5e:e1:8d:45:
                    f8:f6:56:d1:fc:a2:5d:09:02:40:25:16:df:13:19:
                    1f:78:68:03:2e:a8:b7:35:fe:85:46:bf:5b:67:5c:
                    62:c7:d6:6a:32:fa:4d:94:4e:23:c6:56:13:78:9f:
                    b2:01:5e:4b:e3:66:e8:80:20:b8:61:70:b8:10:f3:
                    31:00:a4:7d:ed:76:a1:33:8c:5f:71:44:ac:9c:cd:
                    3a:14:87:65:a8:89:4d:bf:98:1c:59:83:73:39:b6:
                    20:e6:57:99:96:31:eb:d5:7c:37:33:a4:73:1d:fb:
                    ed:35:14:4c:d5:ec:79:c2:96:07:c4:29:0b:4d:75:
                    0a:d8:f2:e6:11:ca:16:72:22:91:ce:a3:73:b8:43:
                    97:f6:4a:12:bf:89:13:0e:74:f3:6d:18:6e:35:26:
                    b7:78:68:1d:ea:49:ba:33:93:cd:36:e1:96:c7:bb:
                    a5:85:2e:ca:7e:85:7b:ab:df:fe:65:30:e7:4b:cc:
                    71:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7D:01:23:98:48:7B:3C:A3:7C:73:2E:E3:01:AA:83:C4:6F:85:22
            X509v3 Authority Key Identifier:
                keyid:53:E8:4A:F2:97:5A:18:C1:9A:39:65:52:3F:F0:B1:BC:84:E6:02:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/U-hK8pdaGMGaOWVSP_CxvITmAj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642A06/5A984604FC6011F0A9A7EDC7DAE4EC9C/U-hK8pdaGMGaOWVSP_CxvITmAj0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a5:83:e3:f6:5e:f0:0d:fc:e2:f8:45:0b:fb:27:16:8b:c3:
         d5:41:96:a5:99:11:0e:2d:fe:4e:bb:a1:e6:9d:ea:39:87:07:
         e9:6c:bb:b3:52:06:a7:bb:5f:ef:da:a4:81:f3:a4:15:c2:b9:
         00:5b:6e:91:d6:4d:ea:df:01:e0:88:52:c7:c6:c1:38:85:48:
         87:03:a0:9b:18:80:6d:ba:81:cc:6a:4a:36:63:45:d5:5f:7d:
         0b:5b:76:e4:e0:80:2a:06:b8:26:71:81:e8:cf:21:ea:fd:5c:
         bd:bd:84:2a:7c:e4:d8:dc:c7:b3:b7:47:bf:28:f6:25:fa:e3:
         ea:fb:ff:8c:db:16:e9:5b:4c:58:bb:54:a7:8b:3c:67:70:47:
         ec:c9:9d:9c:24:7c:f3:88:37:c9:c7:4c:e6:a3:3f:1c:ff:8f:
         ad:d5:dc:01:04:5f:a5:20:ca:10:76:42:46:f1:29:23:94:1e:
         74:56:1c:c7:c1:8d:42:e7:f0:e3:79:bd:1a:f5:f6:a0:12:b5:
         87:46:c4:66:8c:0f:f6:69:05:2f:fc:40:d3:db:6c:e6:f9:44:
         ca:99:cc:19:fd:15:7d:c7:cf:32:31:7d:a6:84:42:5f:c0:38:
         8e:ac:cb:05:3b:5a:66:0f:ee:d4:68:fe:fe:1a:1b:5d:b7:e8:
         19:4c:6d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----