Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
File:                     2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft (raw, json)
Hash identifier:          wb1ypaNkA76XySeBHUWiToRKZMt+idUQD4RJBOwntzQ=
Subject key identifier:   50:45:83:61:D6:5C:19:FF:47:5A:52:E0:6D:34:10:78:DE:D9:A0:26
Authority key identifier: D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E
Certificate issuer:       /CN=F3686F75AF/serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
Certificate serial:       078B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
Manifest number:          0787
Signing time:             Sun 15 Nov 2026 02:24:08 +0000
Manifest this update:     Sun 15 Nov 2026 02:24:07 +0000
Manifest next update:     Tue 17 Nov 2026 02:24:07 +0000
Files and hashes:         1: 2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl (hash: 6Bf/NLB/8Xapshcq3pf92ynozPPXH1KiamL0byASrJk=)
                          2: 41154872962911F1979923DACE1D38B0.roa (hash: 5lt3Yq+7+mrDu7Rgxl913ugiuhww8fYeSDHdmofrW5s=)
                          3: BE375CAA962911F1878869DCCE1D38B0.roa (hash: Y3X1SBiD4AkB1iF8TfEGnqcGwMoyf7vwpW8s0D8Pl5I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1931 (0x78b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3686F75AF, serialNumber=D99770F8F9B62DD036EDE741F2702CDDD640DE1E
        Validity
            Not Before: Nov 15 02:24:07 2026 GMT
            Not After : Nov 17 02:24:07 2026 GMT
        Subject: CN=6af917c8-77c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:bb:47:8b:3c:8e:c6:44:30:4c:fc:ac:f9:60:
                    df:1d:1b:5a:97:0a:49:76:d6:1a:dd:bd:b9:2f:33:
                    ba:97:b7:79:f5:11:ab:aa:03:2d:bc:ec:11:db:08:
                    bc:98:17:1b:8d:3d:b8:6e:ca:92:c6:45:ec:35:a9:
                    b0:3b:2a:03:0d:04:af:98:90:b7:05:02:1d:d6:d6:
                    8d:2f:99:55:48:b0:d6:fe:68:c2:cc:ed:7b:c1:3c:
                    e3:ca:2d:4c:92:65:b0:29:9f:ed:6e:c3:5a:07:91:
                    2e:60:27:96:4f:39:6c:8e:47:78:f4:71:74:52:83:
                    6d:09:20:71:71:fc:ed:64:36:d2:97:da:22:c6:e3:
                    cb:aa:7e:9d:87:af:1d:28:9e:01:b1:3f:fe:39:ec:
                    33:d7:5d:eb:3b:33:f0:37:5a:93:21:b7:f4:e2:51:
                    a8:09:4f:51:34:1a:15:ce:d9:7a:83:54:25:ec:e2:
                    cf:08:4b:6f:89:9e:71:f0:7a:b5:64:30:12:1f:c0:
                    df:e8:39:8a:55:e5:bd:fa:fb:4f:3b:ea:2e:59:e2:
                    bc:e6:8a:58:b6:38:6d:e8:82:04:66:d5:e9:e1:3f:
                    f5:26:be:6c:e8:74:50:b0:6e:b8:eb:f1:ba:7b:03:
                    c7:74:15:4c:75:fb:61:32:f6:c4:3f:88:20:8a:9b:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:45:83:61:D6:5C:19:FF:47:5A:52:E0:6D:34:10:78:DE:D9:A0:26
            X509v3 Authority Key Identifier:
                keyid:D9:97:70:F8:F9:B6:2D:D0:36:ED:E7:41:F2:70:2C:DD:D6:40:DE:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2Zdw-Pm2LdA27edB8nAs3dZA3h4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3686F75/A60780961D3511ECB510340AD8A014CE/2Zdw-Pm2LdA27edB8nAs3dZA3h4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:5a:fe:7b:24:6c:06:a8:c6:e2:d2:56:50:ce:7f:1c:8f:f6:
         17:bc:c9:87:c5:c8:ce:fc:08:a3:60:52:51:ef:ab:e6:33:d9:
         01:fe:c1:69:b4:6f:76:79:e9:5f:a2:19:6e:5d:12:6c:79:d7:
         ba:3e:37:98:af:41:d7:d1:ea:c2:04:6b:d0:a9:44:1c:66:91:
         2d:66:b3:20:26:2e:c6:a6:14:d2:12:c0:d8:3d:4c:6c:0a:24:
         f9:79:45:88:40:39:63:a4:f2:11:21:ed:4f:87:04:e6:e8:99:
         e4:77:d1:3d:f7:ef:98:98:4f:f9:d9:bf:8b:15:76:5c:db:b4:
         a4:10:63:b5:5d:9f:fa:d5:b0:e6:95:80:98:78:03:97:54:d7:
         5e:7a:20:f8:0c:59:1c:69:72:14:32:66:05:58:01:00:53:e2:
         c5:74:2c:3e:c0:7b:ee:c9:e0:5f:24:7c:5e:fd:f0:15:79:15:
         ae:5b:30:b8:f0:b4:36:9b:64:8f:75:9b:29:09:b3:85:af:94:
         18:b5:59:3f:fb:82:50:e5:4e:71:18:d1:68:2a:a7:ad:27:77:
         a5:08:0e:33:74:fd:89:7b:fd:be:37:6e:10:3e:c1:d5:e5:0f:
         ad:be:25:71:b6:17:56:39:4e:fd:03:76:f5:dc:67:4f:a9:56:
         83:62:2a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----