Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
File:                     BiCXPEqhlLafR32b7VWXyU0N0Pg.mft (raw, json)
Hash identifier:          mbR+p94PEEDG4FUQORdXa31sbW7Y6WK8lzKg+BSCm8g=
Subject key identifier:   3D:AE:CA:BE:07:6F:A7:95:C4:EE:7E:7B:09:24:24:63:40:33:34:F6
Authority key identifier: 06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
Certificate issuer:       /CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Certificate serial:       0631
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
Manifest number:          0626
Signing time:             Sun 15 Nov 2026 02:58:02 +0000
Manifest this update:     Sun 15 Nov 2026 02:58:01 +0000
Manifest next update:     Tue 17 Nov 2026 02:58:01 +0000
Files and hashes:         1: BiCXPEqhlLafR32b7VWXyU0N0Pg.crl (hash: Ak/2e3aOl7nXQp4dzlkgt7Ivwk3gNFFUJqItQVRJAGA=)
                          2: 3DF983F290BA11F18AAA01EFCE1D38B0.roa (hash: Qh6y/eRMD6dSAiahenNmTxPPjoSpFyv4fHKPBYfl+Lw=)
                          3: 4509867C89A011F18FB096A9CE1D38B0.roa (hash: aPImwy1cVOEqmtUCa7IvTsb8BnZ1qt4uplLTZBIsKrA=)
                          4: 7EF51C66B09411EF816A837D762E951A.roa (hash: dK+s/XqGvJ2z+H1yiumGDgbO/rdLvkiEGWr5WQScXNE=)
                          5: 5B430E4AB09411EF9DCD797D762E951A.roa (hash: 4jVWIqFk1exxKlsXmJSXOLUstbW11Mv50NKI1fpU+9w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1585 (0x631)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DA43AF, serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
        Validity
            Not Before: Nov 15 02:58:01 2026 GMT
            Not After : Nov 17 02:58:01 2026 GMT
        Subject: CN=6af91fba-62b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:dd:5e:ce:01:bb:c4:d8:9b:0c:84:58:68:56:
                    f6:f5:7a:d0:db:2d:3a:5a:90:16:26:83:64:be:41:
                    0b:9e:41:df:16:70:ea:fb:0d:ef:95:d8:6a:9e:c8:
                    2a:ac:8d:a9:73:fe:a1:2c:fa:7f:ae:8c:88:86:96:
                    5b:b7:f9:07:6c:2d:4b:47:6b:c8:52:24:31:fb:97:
                    7a:63:b3:b7:70:45:38:f4:81:29:c9:c5:2c:e6:84:
                    f6:40:28:b5:ec:90:8b:c8:44:c0:8f:d3:93:ff:26:
                    86:45:ce:99:ee:48:42:1a:48:6f:b8:18:fe:f8:af:
                    9b:04:6d:7e:9a:8e:10:43:35:1b:8d:ad:98:0c:0c:
                    b2:38:8d:a2:b2:4f:8e:53:6b:9d:f7:4a:af:35:be:
                    65:ae:c7:a3:6b:cd:f7:21:9f:49:f3:4a:b6:9a:80:
                    2d:35:6f:65:88:95:e1:cc:5a:43:51:97:1e:b3:b6:
                    5e:e8:09:f9:a7:49:37:a1:1e:0d:17:10:32:4f:80:
                    23:c3:50:81:0d:9f:1f:27:a2:71:71:9b:f5:e2:c8:
                    0d:29:00:e8:5b:1d:ff:3e:f7:90:fb:a3:2f:ea:09:
                    dd:0f:f4:3f:b1:54:41:4e:28:cd:20:05:57:dd:9c:
                    7d:07:c6:ee:fb:09:42:9c:51:59:2b:0c:3a:3d:af:
                    71:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:AE:CA:BE:07:6F:A7:95:C4:EE:7E:7B:09:24:24:63:40:33:34:F6
            X509v3 Authority Key Identifier:
                keyid:06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:af:f1:86:1d:f8:b2:4e:ea:d8:1d:a8:50:34:01:c5:b7:d1:
         1e:bb:72:9c:5a:ea:fd:f0:95:50:ce:48:05:ae:34:b2:63:3d:
         d6:d3:b4:1b:97:9d:84:d4:92:7f:ab:ae:14:82:d2:48:76:9b:
         e8:2f:16:f4:05:9c:29:85:58:9f:38:90:3b:c8:49:bb:ea:bc:
         fc:32:65:36:f4:ec:6f:8a:99:63:0b:6b:9e:05:fa:13:82:c2:
         f5:82:dd:1f:4c:7c:0c:52:b1:bd:45:6c:40:48:9e:13:ba:0b:
         16:2d:eb:b7:50:00:28:b0:97:29:aa:cc:dc:27:ce:99:16:51:
         21:80:67:20:84:34:4c:26:35:d0:f7:b0:db:99:a7:7a:15:e2:
         d6:b0:20:77:8a:bc:a9:10:30:80:6a:28:50:10:b1:03:3c:6f:
         e7:c4:56:1f:ad:0a:28:e9:d8:94:a9:c0:25:7c:f9:8a:20:a3:
         5d:3b:d7:47:d4:33:c6:27:88:13:0e:b3:71:5f:05:94:60:41:
         ea:a0:0f:9d:45:92:91:d5:49:3f:65:b0:d8:cf:c6:c5:1b:67:
         b9:ab:0b:8d:7d:75:d1:69:a1:bc:3e:51:34:e7:a2:46:1f:4c:
         a2:9b:9f:2c:0d:74:2d:b5:1c:40:e1:21:92:19:20:04:7a:39:
         55:a0:cb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----