Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft
File:                     ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft (raw, json)
Hash identifier:          MvavxcXstJ81cas9rO99nsIaktLCSKL0IIFCAFGKGXY=
Subject key identifier:   A7:56:97:ED:FF:64:1A:DB:96:D4:25:D7:AD:BB:CD:33:CD:7A:8C:75
Authority key identifier: 65:06:8E:4F:C4:D3:27:F7:B3:F2:E1:59:AA:D9:12:61:82:25:75:47
Certificate issuer:       /CN=F366E8F3AF/serialNumber=65068E4FC4D327F7B3F2E159AAD9126182257547
Certificate serial:       0236
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft
Manifest number:          0235
Signing time:             Fri 25 Sep 2026 04:49:49 +0000
Manifest this update:     Fri 25 Sep 2026 04:49:48 +0000
Manifest next update:     Sun 27 Sep 2026 04:49:48 +0000
Files and hashes:         1: ZQaOT8TTJ_ez8uFZqtkSYYIldUc.crl (hash: ZzSULWlL1bGN7k67TAjec0n7w2DL7qNFHDvF14VYm24=)
                          2: FA23C6E0033111F0913B507A762E951A.roa (hash: UU+VLCaW1bzLKfQrboq/hHsg8DwvgOdl3KUVSjPJbis=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 04:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 566 (0x236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366E8F3AF, serialNumber=65068E4FC4D327F7B3F2E159AAD9126182257547
        Validity
            Not Before: Sep 25 04:49:48 2026 GMT
            Not After : Sep 27 04:49:48 2026 GMT
        Subject: CN=6ab5fd6c-040b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:54:a4:b2:86:cd:fd:ce:f1:7a:a6:1f:5e:b5:
                    1c:11:a0:89:47:66:98:f5:2c:c8:c1:d4:20:4a:5b:
                    dc:55:c1:d4:3a:7f:19:bd:5f:43:b2:ed:bf:ad:b7:
                    98:4b:79:ba:47:b8:34:51:c5:73:db:c2:4d:f8:dc:
                    e4:d7:fa:eb:1d:fe:e9:a1:ed:d8:2f:05:b8:51:ac:
                    21:48:85:0e:51:14:b3:93:c7:9d:03:52:34:3a:52:
                    5d:38:ce:f4:a7:cb:db:d2:dd:7a:45:b4:b7:f2:36:
                    7d:01:7f:17:19:e2:e4:5e:24:09:e3:ce:06:1c:1a:
                    2e:79:44:ae:59:b9:0d:27:9d:f2:5a:34:4b:51:d3:
                    b0:19:7e:7a:1d:c0:80:ee:1e:cb:dd:ec:f8:82:0d:
                    1d:ed:06:c1:64:39:0c:d6:15:41:c5:76:95:82:b9:
                    09:9f:5a:63:3b:56:22:c3:13:89:65:ef:86:02:84:
                    8b:f9:27:dd:87:da:28:93:bd:f2:26:94:87:fa:11:
                    e5:17:69:75:4e:9e:64:95:46:3e:4b:b8:c2:62:e4:
                    ed:2e:4b:86:7d:48:03:64:a6:62:01:83:9a:56:31:
                    48:5b:af:b4:c8:db:e5:1d:3d:76:a4:83:44:c8:ea:
                    16:c0:5d:1d:69:92:ea:88:f2:bf:cf:4b:b3:f7:30:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:56:97:ED:FF:64:1A:DB:96:D4:25:D7:AD:BB:CD:33:CD:7A:8C:75
            X509v3 Authority Key Identifier:
                keyid:65:06:8E:4F:C4:D3:27:F7:B3:F2:E1:59:AA:D9:12:61:82:25:75:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366E8F3/B743560E032E11F0BCF79465762E951A/ZQaOT8TTJ_ez8uFZqtkSYYIldUc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:1f:ca:08:fd:66:6b:fb:12:2c:ce:73:fc:d5:f8:53:c3:fc:
         20:24:24:a7:7d:21:2a:22:44:b7:05:b4:53:ba:cc:46:b3:fe:
         d3:b7:de:2e:2a:28:99:ba:b7:9b:b5:af:09:0e:d5:6e:4f:3b:
         9f:a1:c1:cd:5f:83:08:9c:b7:39:0e:98:02:57:01:9e:af:0d:
         b8:58:b1:50:12:22:9a:66:c8:48:6b:f2:8d:0e:20:1b:91:2b:
         7f:6b:86:a4:d0:28:0c:78:d6:28:1d:28:d6:4e:27:02:53:20:
         ba:4d:fa:01:e6:11:75:d2:e0:52:4c:37:b5:3a:c2:23:fa:f6:
         cb:1a:7e:d6:78:e4:f9:36:79:7c:28:3b:c3:61:79:0c:10:eb:
         a4:54:1b:fc:e4:96:00:e9:fe:f7:00:2b:c7:96:39:4b:33:24:
         61:59:94:51:61:88:9b:83:be:a9:dc:7a:94:72:e6:b1:17:b3:
         8b:53:3e:58:9c:9b:c7:36:c7:ac:75:4c:1f:df:2e:0f:9a:45:
         d1:bc:1c:73:c1:8c:b0:fc:06:38:6e:e1:d8:e4:9b:10:da:0f:
         3d:eb:e3:87:7a:27:81:84:e1:f9:26:b4:42:0b:86:65:63:0c:
         2f:7d:10:66:3e:63:8c:76:3f:35:6e:60:96:fc:cd:76:9d:89:
         75:e1:3c:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----