Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
File:                     UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft (raw, json)
Hash identifier:          hDSRYUcnSL5+7ff1p5SMYRSCwkFLHEhczWKIYh4PaGc=
Subject key identifier:   59:0B:BA:88:EE:D4:D1:55:E2:6C:70:67:2E:29:D0:F1:3F:F1:C8:6E
Authority key identifier: 52:30:7E:40:B6:BD:C4:C4:C9:AD:DE:8C:5A:39:3F:77:C6:CA:4A:71
Certificate issuer:       /CN=F3656325AF/serialNumber=52307E40B6BDC4C4C9ADDE8C5A393F77C6CA4A71
Certificate serial:       4B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UjB-QLa9xMTJrd6MWjk_d8bKSnE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
Manifest number:          4A
Signing time:             Sun 15 Nov 2026 05:50:45 +0000
Manifest this update:     Sun 15 Nov 2026 05:50:45 +0000
Manifest next update:     Tue 17 Nov 2026 05:50:45 +0000
Files and hashes:         1: UjB-QLa9xMTJrd6MWjk_d8bKSnE.crl (hash: fWV9sLzDMjK1Bc6jrEmz/X2p7OhLtGK2YkiUUyELm2Q=)
                          2: 79C18868A86011F19F3763F9CE1D38B0.roa (hash: vaoELsOFVOg4HJw3Qs5sWp61mQ8soCkWjOfsBwURWO4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UjB-QLa9xMTJrd6MWjk_d8bKSnE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656325AF, serialNumber=52307E40B6BDC4C4C9ADDE8C5A393F77C6CA4A71
        Validity
            Not Before: Nov 15 05:50:45 2026 GMT
            Not After : Nov 17 05:50:45 2026 GMT
        Subject: CN=6af94835-f5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:25:f4:1e:df:6d:ec:f5:a6:42:ee:e2:6f:1f:
                    92:75:86:18:c9:1c:05:67:ee:50:47:0a:3e:30:d9:
                    c3:fb:7c:d8:a6:77:31:c6:6d:b1:1f:4b:cf:4c:77:
                    f0:23:a4:63:6a:d3:ef:dd:26:f6:6d:75:40:a2:38:
                    b7:a6:04:11:18:da:d5:f7:90:9d:58:60:9a:6c:5f:
                    bc:84:e7:be:46:25:bf:af:eb:09:c7:2c:48:5b:9e:
                    bb:e1:06:9a:1b:7d:7f:7c:e9:ae:63:60:90:9a:41:
                    d3:fa:45:28:3b:47:e4:47:4d:35:8a:1f:ac:da:d2:
                    da:1e:1a:da:02:7b:68:d6:7e:6b:b9:4c:3e:9d:b3:
                    96:81:ab:29:c7:e7:63:39:00:1c:ed:03:d9:3a:11:
                    a1:b7:40:fc:54:22:00:8e:57:95:d1:63:43:f5:67:
                    9c:b4:2e:78:d3:3a:4b:bd:bc:17:4b:02:c3:f7:82:
                    c8:cc:87:ab:85:1a:b8:6e:b9:01:92:e7:24:22:21:
                    d1:41:3a:4f:38:82:55:96:c3:27:bb:b8:11:64:98:
                    6d:ef:46:62:1d:3f:36:16:0f:cc:29:5b:7d:a5:d1:
                    2a:69:fb:23:88:2f:d3:b6:e3:a4:dc:ca:01:3a:1a:
                    a8:0b:57:73:93:f2:6d:7c:bf:b6:91:b8:e0:0c:5d:
                    fd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:0B:BA:88:EE:D4:D1:55:E2:6C:70:67:2E:29:D0:F1:3F:F1:C8:6E
            X509v3 Authority Key Identifier:
                keyid:52:30:7E:40:B6:BD:C4:C4:C9:AD:DE:8C:5A:39:3F:77:C6:CA:4A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UjB-QLa9xMTJrd6MWjk_d8bKSnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:a9:f1:8a:01:37:73:58:d6:82:f9:4e:b7:07:36:f0:9a:30:
         f6:53:38:b2:1d:5d:59:2a:ae:5c:6a:35:d8:70:27:c0:a8:7d:
         ea:13:0b:87:19:84:7d:b7:83:bc:d0:08:5c:95:eb:42:cc:67:
         71:dd:2f:a5:f9:f8:e9:fc:9f:49:06:c5:42:d0:5b:26:37:75:
         35:ba:89:a5:5d:99:49:27:17:13:5d:aa:60:2d:1c:77:26:9d:
         3d:e9:42:49:74:c7:cf:a2:c8:5f:a2:9d:dd:78:d3:23:60:c6:
         57:4a:99:f9:d5:a5:27:c5:df:08:2a:61:83:08:cc:3d:75:b7:
         4d:dc:c3:77:34:62:18:62:d7:91:c8:64:58:45:a4:0c:67:9a:
         7b:c0:6f:72:e7:9e:5a:f1:20:f9:3f:ce:1c:bd:cd:c1:4d:05:
         88:38:f4:b3:01:6e:54:57:33:b0:7a:0b:f0:8f:f8:a1:48:99:
         b6:b6:9d:05:36:eb:0b:b2:6e:46:bb:d8:48:eb:b5:42:f2:38:
         6a:c2:59:1b:df:f2:61:5d:e6:a4:c5:4f:71:e5:6e:f6:8f:22:
         9b:90:e5:00:08:4c:aa:b7:c9:00:ca:11:f2:72:60:20:56:1b:
         64:9e:b3:8b:3b:40:e9:2b:8f:8f:99:48:d8:61:2d:6d:5e:bd:
         b9:4d:79:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----