Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
File:                     5_z-A6OF76F0KyB_rsnT3GwDl50.mft (raw, json)
Hash identifier:          aH2bZXVdshz6bobxM57Z1bLId4vExH7w6kax+Mbv3Yg=
Subject key identifier:   B7:BB:1A:7D:B8:8C:F7:00:D5:33:42:1B:44:7A:7C:68:0A:EF:AC:80
Authority key identifier: E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D
Certificate issuer:       /CN=F3646DCFAF/serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
Certificate serial:       1016
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
Manifest number:          1014
Signing time:             Sat 14 Nov 2026 00:58:03 +0000
Manifest this update:     Sat 14 Nov 2026 00:58:02 +0000
Manifest next update:     Mon 16 Nov 2026 00:58:02 +0000
Files and hashes:         1: 5_z-A6OF76F0KyB_rsnT3GwDl50.crl (hash: udDfPCp0qLAl7SM7WJrZvsjBiuacb/kE81PafPD3BZk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4118 (0x1016)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646DCFAF, serialNumber=E7FCFE03A385EFA1742B207FAEC9D3DC6C03979D
        Validity
            Not Before: Nov 14 00:58:02 2026 GMT
            Not After : Nov 16 00:58:02 2026 GMT
        Subject: CN=6af7b21b-0d32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3b:64:40:c5:53:09:af:ab:e3:1c:5c:82:cf:
                    b1:82:2d:d4:bf:8e:bf:97:b8:4f:bc:35:a4:c7:bb:
                    99:07:76:98:5f:ca:0b:d3:e0:d9:b1:d1:08:e6:22:
                    21:80:95:dd:91:6e:74:34:99:1f:d2:8b:2b:99:d4:
                    41:d6:3c:e5:42:30:79:29:d4:06:b4:dd:fd:be:eb:
                    df:d4:92:98:0b:4f:15:c4:54:51:bf:c7:48:c0:7f:
                    16:b7:75:bf:30:45:ed:39:ce:9a:31:95:c1:a9:7f:
                    17:3b:3b:73:d8:fd:54:19:90:a0:8a:e0:83:4d:e6:
                    c2:eb:6f:bf:95:49:86:ca:d6:34:1a:c8:8f:88:ef:
                    73:50:b3:ec:f1:ac:b6:5b:83:9a:cf:36:b8:b1:64:
                    0e:07:bb:c5:70:5f:c5:ea:9a:92:ef:0f:17:f1:8e:
                    96:e5:de:50:9f:6b:3a:ed:f6:72:59:b4:60:b6:20:
                    7e:24:8a:59:f2:71:b7:86:24:d6:5b:c6:03:af:42:
                    f2:7a:d6:25:d4:64:dd:7a:ea:81:ec:c3:7a:6f:3a:
                    d3:6a:0c:a9:c5:5c:8e:48:0a:9a:b5:10:e8:a6:99:
                    ce:9d:33:41:9a:e3:da:9e:ee:52:6b:cf:86:b9:2f:
                    9c:33:43:e0:72:c9:88:ab:f2:0c:68:c9:7c:07:aa:
                    75:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:BB:1A:7D:B8:8C:F7:00:D5:33:42:1B:44:7A:7C:68:0A:EF:AC:80
            X509v3 Authority Key Identifier:
                keyid:E7:FC:FE:03:A3:85:EF:A1:74:2B:20:7F:AE:C9:D3:DC:6C:03:97:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5_z-A6OF76F0KyB_rsnT3GwDl50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646DCF/DA9D1FCE773611E59B2FF40DF8AEA228/5_z-A6OF76F0KyB_rsnT3GwDl50.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8f:79:f6:e8:06:a5:6c:a0:ab:ce:72:bb:2d:70:63:e2:a4:
         14:4b:c7:9b:a5:e3:d0:4e:6a:f1:87:66:a5:a2:d9:55:ac:ff:
         6e:bc:78:a5:a1:0b:54:e4:cc:40:31:08:ef:41:65:61:ba:ea:
         db:aa:c1:07:a2:8a:4b:a4:f0:67:25:35:a9:d5:51:04:26:8d:
         8c:02:0a:fd:1e:46:26:46:ec:96:30:d9:36:6a:da:b9:bd:4d:
         b6:50:f4:d5:a7:94:aa:a6:94:6d:60:c0:bf:e1:b5:78:42:2e:
         e9:30:a0:af:5c:3b:bc:2f:2b:f1:02:a9:87:50:2e:05:09:d1:
         35:8e:92:c1:c0:0d:b1:f7:f3:54:8c:10:1c:4d:cc:ee:23:43:
         d3:69:26:ac:d1:87:6b:88:d2:2b:b6:40:86:1f:ac:7a:01:7e:
         4f:db:9d:a1:28:e6:a9:2d:ab:12:df:4c:9a:ce:30:96:fb:04:
         2d:8c:a8:63:43:a1:e5:26:d7:9c:84:84:94:0e:87:b1:b3:04:
         72:20:95:a5:db:b0:4a:bf:13:7f:d8:29:73:a1:e3:24:33:a2:
         b7:7f:45:1e:8c:34:02:b9:e6:3e:1c:e1:27:32:e4:34:2a:e2:
         72:98:d5:14:ca:22:9c:f3:6e:b2:93:0f:27:95:e5:49:06:20:
         46:c5:0a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----