Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
File:                     gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft (raw, json)
Hash identifier:          zItSgJu0SD7D6cfU2d5lmNKX17qzDN8cABcXVLr7wxg=
Subject key identifier:   29:37:7C:6B:5A:EC:16:3E:11:37:09:65:6B:76:09:56:49:48:CF:3C
Authority key identifier: 80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38
Certificate issuer:       /CN=F364744FAF/serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
Certificate serial:       0967
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
Manifest number:          0963
Signing time:             Sun 15 Nov 2026 01:50:02 +0000
Manifest this update:     Sun 15 Nov 2026 01:50:01 +0000
Manifest next update:     Tue 17 Nov 2026 01:50:01 +0000
Files and hashes:         1: gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl (hash: /k2VV79CSCOiQZHedi5Ll0pia6qW+YGCkkSRAeUt5tc=)
                          2: 1C467B5A8B6C11F1A58384A2CE1D38B0.roa (hash: 2c1rafmJ8uAX7I4T9KV6h7Qhuemf9XiHnWfTCcuaKOs=)
                          3: 7C4E6EFA8B6B11F1975A431DCF1D38B0.roa (hash: 5fNF9adn8hznCtC8W7/QFTQ4MXq5VVjvENhur/9sV/w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2407 (0x967)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364744FAF, serialNumber=80AF060E4640C32653D0F00C3024514A9F149538
        Validity
            Not Before: Nov 15 01:50:01 2026 GMT
            Not After : Nov 17 01:50:01 2026 GMT
        Subject: CN=6af90fca-e996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:4b:68:1c:b6:53:bf:68:a0:d4:66:46:5e:
                    ff:55:11:a9:05:94:ed:c4:d2:4b:d2:ef:a9:68:2e:
                    03:8d:77:1a:1a:85:c6:63:eb:32:a2:b6:5b:4e:82:
                    b8:4a:ab:ee:c0:e5:73:93:51:97:13:f8:f7:f2:d8:
                    e6:e4:ee:31:a5:08:34:bb:bb:52:ae:bc:1e:2c:d7:
                    ec:f5:c5:d8:6f:79:3a:64:23:9a:c8:df:de:d5:bf:
                    e1:7b:28:0b:17:f1:ae:6f:76:c3:83:75:89:f6:ad:
                    89:17:20:b0:32:84:8e:6b:11:07:d2:d6:7c:d0:56:
                    22:b2:00:32:b6:23:18:66:2c:51:27:12:f9:5a:8a:
                    99:f7:c3:c7:7c:6d:38:d2:e0:3f:8f:3a:9b:32:a9:
                    fe:89:e6:6c:59:05:e8:a5:bf:81:d3:e5:ab:a5:11:
                    76:bf:ab:25:7e:e2:1f:ec:97:5f:af:22:09:21:49:
                    a6:42:85:14:6a:c9:d8:e7:91:61:1e:36:62:e0:19:
                    98:a1:7e:e5:f8:d6:d6:85:7d:f2:54:f8:f2:52:c2:
                    ad:48:44:e7:96:e6:34:ce:aa:e0:5f:43:11:fa:61:
                    d9:76:42:2d:d5:87:9c:e1:95:e5:de:d7:53:79:f5:
                    59:b0:7e:0f:e9:c7:9a:cf:32:10:78:00:5d:ea:c0:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:37:7C:6B:5A:EC:16:3E:11:37:09:65:6B:76:09:56:49:48:CF:3C
            X509v3 Authority Key Identifier:
                keyid:80:AF:06:0E:46:40:C3:26:53:D0:F0:0C:30:24:51:4A:9F:14:95:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gK8GDkZAwyZT0PAMMCRRSp8UlTg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364744F/3B02F8B2ADC311EA8F42EF77F8AEA228/gK8GDkZAwyZT0PAMMCRRSp8UlTg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:35:27:44:04:3a:98:72:cb:f7:db:f0:ea:f9:c1:9a:fd:65:
         bc:6c:44:07:a1:2a:17:8a:0b:11:1a:1e:f2:b0:d0:3a:a0:c2:
         c7:cc:2f:7e:8e:58:fc:d7:fb:24:05:e8:7c:1c:92:1b:fd:70:
         73:de:18:4d:ed:19:7d:a5:26:64:fe:a4:8c:35:76:67:ee:81:
         66:b5:05:5c:09:44:11:cb:1f:57:5c:bb:34:31:18:04:d5:b6:
         4c:68:6f:fd:ad:55:7c:ef:91:7c:da:44:e1:bf:f7:07:1d:6f:
         1e:b8:64:cc:21:0c:25:a6:11:29:37:56:43:49:f7:43:8f:46:
         78:b4:43:d5:16:84:86:f2:da:fc:f6:45:2d:e7:51:bb:b7:a9:
         de:4e:d6:0f:c6:79:af:7f:6c:04:48:9e:84:51:ea:f4:8e:00:
         c4:21:4f:31:3d:24:d4:56:1a:b5:0b:82:06:ba:af:c9:0d:0d:
         2c:5a:88:51:e1:cf:d4:11:78:51:12:70:bf:7a:d0:3d:69:d7:
         11:0d:a0:1d:9d:81:2c:3a:f6:f1:ba:81:ea:8f:f3:c3:0a:c5:
         f3:6d:a4:f9:cc:5d:b7:b7:b9:10:c0:3e:dc:72:d8:6b:9a:8a:
         0c:2a:2f:0e:01:a2:62:32:e6:57:0d:57:d2:19:57:bd:d5:4f:
         b6:c4:58:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----