Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File:                     xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier:          0O6rwEcn8mHMpc8Mq3QqIWwoNyq/Be7BIY7i26ZuPhA=
Subject key identifier:   4E:AC:04:A5:50:02:56:BD:DD:DA:9A:2B:CB:B6:6F:A2:58:32:5F:12
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer:       /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial:       041C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number:          041A
Signing time:             Wed 30 Sep 2026 03:53:12 +0000
Manifest this update:     Wed 30 Sep 2026 03:53:11 +0000
Manifest next update:     Fri 02 Oct 2026 03:53:11 +0000
Files and hashes:         1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: HyWhPrEX9LHbRkKRh0GclNpVRzUCWxyD9eJw1yedrOM=)
                          2: C44EDCDE47A111F189DCF8F2CE1D38B0.roa (hash: 5wtUZaGAD6hnevPQoGy0Wp/M21ZmQcq4eTIcxSJMHIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 02 Oct 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1052 (0x41c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
        Validity
            Not Before: Sep 30 03:53:11 2026 GMT
            Not After : Oct  2 03:53:11 2026 GMT
        Subject: CN=6abc87a8-7953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:ae:b0:4d:0b:9d:0c:4d:2e:76:23:7e:e3:
                    25:58:28:fa:7c:c4:00:3f:78:8b:71:63:cc:42:35:
                    29:de:ed:e0:70:a4:22:b2:01:3b:a4:f0:67:c5:6b:
                    63:7f:ac:98:99:da:7e:a6:e8:1f:5f:9f:2a:31:5d:
                    d5:ee:56:04:6b:3a:19:c1:dc:3f:3f:6b:a4:ca:e8:
                    36:4c:26:ea:5c:a1:be:37:5d:2e:31:18:53:bc:50:
                    77:51:13:c6:5c:c1:a0:46:a1:52:58:b2:6e:9e:3f:
                    6a:ba:53:05:a6:22:88:32:37:d6:1d:a9:92:5c:ef:
                    a5:d0:10:b3:12:56:41:d0:ec:a0:a5:81:66:e8:ed:
                    cf:cb:35:8f:34:b8:df:11:5a:da:c1:da:00:88:37:
                    c7:32:b9:59:8d:ae:25:a9:ae:d3:2e:67:69:ff:64:
                    38:05:98:5e:c0:94:8f:05:5b:5f:9e:8e:88:8a:5a:
                    69:d1:14:e1:36:63:fb:26:ee:ff:bf:b8:31:48:71:
                    95:2d:5d:6d:52:53:0d:50:4e:e1:d3:b6:c3:bc:ec:
                    6c:e5:fe:0c:74:af:17:07:24:92:96:0e:05:98:e8:
                    3c:ce:3e:24:ac:82:16:96:cd:b8:ef:8d:ad:d7:fc:
                    fe:82:2d:f4:f9:59:3c:55:b8:80:af:63:22:68:a6:
                    c1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AC:04:A5:50:02:56:BD:DD:DA:9A:2B:CB:B6:6F:A2:58:32:5F:12
            X509v3 Authority Key Identifier:
                keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:90:c4:5d:d9:e9:da:83:b7:de:63:a6:09:e7:87:87:bb:90:
         a3:cc:ec:00:68:91:ed:06:0e:b2:e5:dd:fd:90:1c:2c:78:56:
         a9:32:35:27:69:43:16:b8:ea:49:0a:2e:5a:e1:62:c4:01:a8:
         6a:cd:33:3b:51:c1:ed:73:cb:21:3d:93:d6:7f:00:36:57:97:
         a3:be:4b:7b:45:e4:f7:37:f2:76:32:7f:a8:2b:70:10:a8:41:
         a1:05:c1:be:a9:e6:e2:60:12:c3:10:7b:50:2d:7a:69:9b:32:
         0e:20:0b:e5:09:e7:ac:45:86:3b:b7:14:5f:5f:da:76:41:2c:
         7e:bc:f6:39:94:d0:34:24:85:1e:a7:d1:9f:89:6e:3f:46:02:
         e8:29:31:f7:cb:86:e6:5e:1d:f3:01:78:10:7f:8d:a9:f6:00:
         ea:b9:89:a4:93:df:e3:e7:37:d6:c1:3e:05:70:b0:71:e9:3f:
         75:51:c2:e4:cc:dc:cc:b4:2d:d3:f1:51:d5:24:5b:31:16:fa:
         45:e5:a0:60:d3:9d:de:d6:f0:b5:ee:56:16:ce:7f:58:51:a9:
         0c:8d:ca:09:a8:83:c1:86:83:9c:9c:f3:7b:ea:ab:9c:e8:20:
         d8:77:38:86:0d:e5:61:4f:1c:fc:28:2c:f1:c1:f5:2f:30:6f:
         88:bf:f8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----