Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.mft
File:                     msAeeNqxc6pXMODHe3RAzBzJgWA.mft (raw, json)
Hash identifier:          n+IKkSikcZB+obZ0QA57doKbqk4tT5EkmnWMwgNESU8=
Subject key identifier:   13:04:02:53:3A:0C:88:D3:0D:72:54:6C:B4:DB:6C:73:86:89:79:B2
Authority key identifier: 9A:C0:1E:78:DA:B1:73:AA:57:30:E0:C7:7B:74:40:CC:1C:C9:81:60
Certificate issuer:       /CN=F369D7FAAF/serialNumber=9AC01E78DAB173AA5730E0C77B7440CC1CC98160
Certificate serial:       18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/msAeeNqxc6pXMODHe3RAzBzJgWA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.mft
Manifest number:          17
Signing time:             Sun 15 Nov 2026 06:04:18 +0000
Manifest this update:     Sun 15 Nov 2026 06:04:17 +0000
Manifest next update:     Tue 17 Nov 2026 06:04:17 +0000
Files and hashes:         1: msAeeNqxc6pXMODHe3RAzBzJgWA.crl (hash: rUHGdCUhg99WBWdRV8xCKD+eYrO4Ck0WOeDJftZd7NE=)
                          2: EE394FA2D13511F1A0D33BC1CE1D38B0.roa (hash: nAPdYEo3baU1QOTFpmKcWBXkVW5IKAMofBS8s1gtSs8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/msAeeNqxc6pXMODHe3RAzBzJgWA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369D7FAAF, serialNumber=9AC01E78DAB173AA5730E0C77B7440CC1CC98160
        Validity
            Not Before: Nov 15 06:04:17 2026 GMT
            Not After : Nov 17 06:04:17 2026 GMT
        Subject: CN=6af94b62-03c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:2a:1a:b3:66:e5:9e:be:f7:3c:ac:70:53:
                    16:2e:23:0e:03:25:1b:2b:32:02:c6:e8:3e:9f:42:
                    2f:ec:e9:43:e8:f1:e6:91:1c:19:f9:ab:34:d0:d8:
                    51:7d:67:ce:0b:35:53:b8:1a:4b:23:c5:86:aa:f2:
                    19:85:de:4d:8a:93:97:7f:40:b4:62:dd:25:7e:cf:
                    dc:c5:79:10:e2:b6:4b:ab:df:a9:88:3d:f9:f1:48:
                    23:6d:a0:57:e1:a9:13:be:a4:6d:2b:cd:8b:34:9d:
                    65:27:48:0c:5b:93:0f:c7:00:92:2f:b6:73:69:b1:
                    49:cf:94:80:8a:50:6d:19:5e:ff:ce:60:6f:30:ba:
                    30:d5:2c:50:14:36:18:70:cb:de:24:13:9b:07:b2:
                    2a:2b:b7:9f:d2:12:64:3c:7b:e5:68:4f:c6:b4:1d:
                    94:ca:cb:25:59:cb:81:50:2a:6d:12:ba:9e:fb:09:
                    1a:b2:83:3a:a4:33:b9:48:06:7e:58:1b:59:cc:69:
                    6d:dd:33:15:50:70:a9:5d:a7:4d:82:7b:0e:6a:9c:
                    1f:47:bb:a0:58:2a:43:df:2c:99:63:e4:c2:92:89:
                    5c:c4:de:87:50:36:9e:d6:35:d2:e8:4a:5a:88:f0:
                    96:c3:5b:1e:d1:71:4e:10:f2:fd:e3:53:1b:f3:b9:
                    10:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:04:02:53:3A:0C:88:D3:0D:72:54:6C:B4:DB:6C:73:86:89:79:B2
            X509v3 Authority Key Identifier:
                keyid:9A:C0:1E:78:DA:B1:73:AA:57:30:E0:C7:7B:74:40:CC:1C:C9:81:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/msAeeNqxc6pXMODHe3RAzBzJgWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369D7FA/1E1495ACD13511F1A7D8C7BACE1D38B0/msAeeNqxc6pXMODHe3RAzBzJgWA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:d7:10:8b:23:ad:08:00:d9:51:91:df:18:b6:a9:ce:ac:ae:
         83:d2:aa:89:c5:11:98:47:4c:8d:27:ad:d0:64:15:c7:28:de:
         3c:e9:a2:be:20:4b:c6:86:88:e7:ec:ea:77:1a:82:3d:a2:91:
         ba:f6:30:1d:99:fd:4a:1a:24:50:23:d0:54:53:8b:2f:07:a4:
         56:24:69:a8:f7:0f:e8:06:60:96:4f:36:9a:21:a0:17:0c:ac:
         7a:73:c5:8d:e4:07:73:60:ea:e2:a6:4a:02:f6:a7:1b:b2:3a:
         87:9b:32:ec:57:54:45:f5:1e:bf:08:3e:56:43:69:28:16:04:
         5d:76:04:e0:18:6f:bf:ec:e3:06:ce:66:f1:97:ae:e5:ce:78:
         f6:82:fe:07:dc:fc:25:c5:c8:c2:c3:53:4b:00:6c:ca:12:25:
         96:b1:d0:fb:2f:18:5b:10:72:4f:5f:21:fa:1e:e3:9f:b1:66:
         c7:ab:d4:4b:a0:8f:75:4c:e4:12:ff:cb:72:b1:1a:eb:22:d5:
         33:ae:b0:a9:d4:5e:22:36:bd:a1:e9:f2:40:a1:5a:42:70:5e:
         dc:ef:c3:a3:5a:6d:a4:a0:59:43:1c:df:7a:66:23:5d:40:e6:
         4c:0f:17:24:5b:1a:95:2e:f5:ce:d7:26:9b:1e:5b:85:87:94:
         a8:8c:e6:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----