Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File:                     xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier:          IK6QHH9zs821Mstx5aYEPtFq4sm6ZD5qT+KYDfT423Y=
Subject key identifier:   5F:44:E0:BA:06:21:2E:99:47:46:D8:7E:E8:C0:DB:AA:1C:6C:1D:92
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer:       /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial:       06AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number:          06AE
Signing time:             Sun 15 Nov 2026 02:39:59 +0000
Manifest this update:     Sun 15 Nov 2026 02:39:58 +0000
Manifest next update:     Tue 17 Nov 2026 02:39:58 +0000
Files and hashes:         1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: vE1Aigt7iO69dQ0DX1UpsKUpa19vl2mbTAYChUOM0Fs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1710 (0x6ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAF, serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
        Validity
            Not Before: Nov 15 02:39:58 2026 GMT
            Not After : Nov 17 02:39:58 2026 GMT
        Subject: CN=6af91b7f-7543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:d8:e3:61:93:90:d5:fe:ec:09:14:23:10:
                    dd:95:b7:db:72:04:53:38:1a:c5:e8:a1:37:cd:86:
                    3a:74:7b:cc:9a:f3:c3:27:cf:0c:f2:7a:c6:2f:02:
                    c4:f7:b7:48:c5:6a:54:29:46:26:00:03:10:cd:2d:
                    30:36:7c:01:b5:f2:2b:4e:72:8d:99:43:06:03:f6:
                    59:2c:aa:81:e6:87:5b:df:2d:8e:de:46:5c:41:82:
                    08:5a:4a:4b:5a:46:65:50:8e:d8:7b:8c:eb:9f:b4:
                    55:b0:54:bf:64:b8:c9:b4:4a:1f:db:55:69:c0:ae:
                    5b:42:4c:37:77:1d:d0:3c:8e:bc:2f:bb:22:0d:d0:
                    51:09:a3:a0:f1:2f:00:8b:34:1a:69:b1:71:02:8a:
                    e0:2c:0e:d8:e9:2a:ca:ec:bc:7f:f3:2a:f8:8e:e8:
                    d8:f3:4e:00:5d:61:a7:2e:2f:b5:0b:0a:20:6b:76:
                    51:85:f6:89:5f:c1:c8:fb:05:c0:00:5c:ec:8a:9e:
                    bb:84:ee:7d:0a:b1:1a:75:a2:e4:db:95:06:ae:53:
                    ce:51:01:a9:ae:75:dc:27:07:73:c4:73:29:4e:1d:
                    b1:36:05:5c:d0:34:00:07:97:4d:ce:c8:10:8a:75:
                    cf:41:b8:aa:c8:48:dd:c4:a5:f2:d3:16:76:48:f6:
                    d3:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:44:E0:BA:06:21:2E:99:47:46:D8:7E:E8:C0:DB:AA:1C:6C:1D:92
            X509v3 Authority Key Identifier:
                keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fa:a2:4f:1a:a5:81:7c:35:a1:15:06:6e:05:11:9b:4f:44:
         31:10:8e:d5:e7:f7:90:a3:92:ad:7a:bb:a0:1d:b4:1e:bd:64:
         13:54:e2:98:52:bd:22:53:bf:7d:bb:03:af:f2:2e:e6:a2:c2:
         b8:e1:20:4c:98:a9:b8:e0:76:40:8d:53:58:d8:87:4c:cc:ce:
         74:17:a6:06:94:c6:20:5b:ba:ce:0f:72:e2:2b:71:af:73:2c:
         80:ec:e6:60:26:c1:9a:eb:17:3f:51:61:8b:ad:64:7b:09:d1:
         7a:d7:bc:c5:2c:ab:60:87:ae:b2:f5:be:f2:2f:6d:fd:94:c7:
         04:91:e1:69:38:eb:2d:bf:0e:10:0c:57:e1:c1:1b:20:6b:21:
         cf:0a:ac:5c:0e:ed:be:6e:33:14:b0:15:15:47:3e:d6:21:b9:
         e7:7a:e9:78:08:03:09:cd:4d:db:6b:c3:52:b7:c3:a0:61:6f:
         7b:17:40:7d:6e:ab:c7:ed:b4:52:f3:f1:1b:7a:c7:ea:39:80:
         ba:29:78:d5:f2:d2:fa:cb:21:98:10:d8:74:5d:bd:f3:97:e6:
         1c:b6:b6:56:38:c0:e1:79:cb:e0:7d:f3:43:d3:d0:d8:d6:e9:
         f3:b3:8a:20:2a:41:44:0b:a9:2e:54:fa:16:c8:95:54:f1:a0:
         40:72:f8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----