Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
File:                     gSd0TaTuADsp3hEDT3LeuN_sKP0.mft (raw, json)
Hash identifier:          ZM/Za3RPGCPI+tlbT6eGf+hypPbCxVTHXGSlj/fO7H4=
Subject key identifier:   B9:F7:D9:06:12:75:33:51:DE:D6:AB:1B:D3:02:BF:1A:BE:FF:AA:A7
Authority key identifier: 81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD
Certificate issuer:       /CN=F36A31C5AF/serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
Certificate serial:       02DB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
Manifest number:          02DA
Signing time:             Sun 15 Nov 2026 04:38:49 +0000
Manifest this update:     Sun 15 Nov 2026 04:38:48 +0000
Manifest next update:     Tue 17 Nov 2026 04:38:48 +0000
Files and hashes:         1: gSd0TaTuADsp3hEDT3LeuN_sKP0.crl (hash: NNBScSwvb8sattxYKwlY9Uii3ECvp0P3R17MyQGeL2Y=)
                          2: 7AE36338AD8011EF9210379E762E951A.roa (hash: XKLpYRyjT4GR/+JJ89LUWYlPWbTP8lT2SU+RbEft1XA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A31C5AF, serialNumber=8127744DA4EE003B29DE11034F72DEB8DFEC28FD
        Validity
            Not Before: Nov 15 04:38:48 2026 GMT
            Not After : Nov 17 04:38:48 2026 GMT
        Subject: CN=6af93759-14c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4c:4f:cc:92:04:d7:d7:c7:ab:9d:c2:16:81:
                    9d:3c:ae:2a:09:a4:2d:32:80:a0:1a:b4:c1:38:30:
                    9a:69:a2:e7:57:cb:49:09:cd:c1:96:87:33:e0:e2:
                    6d:41:98:77:b7:49:08:9f:15:e6:b1:84:91:f5:df:
                    ee:1e:6d:8c:22:c3:1e:ef:14:6c:69:32:29:a1:a1:
                    de:39:04:94:0e:ff:b4:53:6c:c5:a2:1c:19:54:21:
                    0a:3c:21:cb:4f:af:f1:4d:10:04:b3:f7:4d:25:9d:
                    81:a8:bf:00:d4:e9:55:a6:0a:b4:29:9b:75:85:5b:
                    cb:14:e8:e2:ea:ae:91:e1:e7:6d:fc:0b:8b:7c:6f:
                    15:78:92:83:fe:a1:50:5d:7a:b4:5a:7e:97:9f:08:
                    6c:b1:49:84:7e:01:cf:a3:75:6b:45:eb:e2:d2:b2:
                    a1:4a:f5:a7:4a:56:e9:3a:12:04:61:6b:16:08:65:
                    4b:08:5e:66:b2:ac:f8:fc:8f:ab:d6:6d:4e:d0:3a:
                    c2:48:f6:66:33:81:d2:29:ed:d2:f1:88:db:59:25:
                    1c:bf:99:ef:53:b2:63:d6:09:fa:4b:50:c5:11:9f:
                    66:8e:cb:84:cd:4f:c6:e5:79:28:59:10:9c:e5:af:
                    7d:f1:03:8d:f3:a4:a7:af:2d:9e:8e:ce:b0:b8:2c:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:F7:D9:06:12:75:33:51:DE:D6:AB:1B:D3:02:BF:1A:BE:FF:AA:A7
            X509v3 Authority Key Identifier:
                keyid:81:27:74:4D:A4:EE:00:3B:29:DE:11:03:4F:72:DE:B8:DF:EC:28:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gSd0TaTuADsp3hEDT3LeuN_sKP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A31C5/6F90618AAD7F11EFA5498697762E951A/gSd0TaTuADsp3hEDT3LeuN_sKP0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:ac:c7:e1:e8:60:52:35:cb:32:d3:e9:97:6c:93:7d:2d:58:
         04:09:f9:36:77:eb:ce:60:e5:dc:10:bc:ca:b9:43:74:16:51:
         dd:21:b4:4a:b3:de:9c:6b:20:d2:cb:5e:85:89:2f:9c:a2:51:
         cd:58:2d:54:61:5f:e2:9e:68:94:59:3e:46:69:29:78:c5:5a:
         2a:19:5e:34:41:4c:47:4f:31:ac:6b:4c:da:dd:53:1f:9e:a4:
         24:4e:0a:b5:bc:2d:90:c7:fb:6b:70:76:84:6f:7a:98:21:b7:
         a6:84:d4:08:f9:52:c1:ea:41:dc:ad:4a:e0:6b:19:1b:e2:b7:
         2a:e7:d6:54:5e:e7:e2:6f:fc:5a:39:ee:20:50:87:ab:c5:ec:
         d6:e0:37:c0:83:2f:b7:ea:c2:3f:0a:89:be:78:43:ab:4f:98:
         12:41:d9:5f:0d:6c:47:58:c7:00:b5:b2:55:c9:9a:82:6d:9d:
         5c:45:d0:4a:26:a6:ea:d8:cd:99:af:56:91:ef:57:2b:61:a9:
         e2:44:df:c8:47:84:17:d6:54:ea:0f:2b:fb:bf:b3:78:a6:a0:
         d0:69:87:a9:8e:8b:17:63:4e:e2:eb:9a:8b:a2:80:da:3f:c8:
         7e:fb:8f:3c:ff:d0:93:a8:cc:a2:f4:34:7e:99:b1:dd:1d:ae:
         d0:b7:a8:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----