Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
File:                     3YlMw4XaLW71JrsLssqqX8pm8MM.mft (raw, json)
Hash identifier:          kklHflKjW2v3cjm4o0HfgrS/7mCGKepiwXi8b8jyWRw=
Subject key identifier:   41:20:EE:93:01:B2:B3:74:15:3A:9E:47:C2:17:BB:C9:52:0C:ED:0D
Authority key identifier: DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3
Certificate issuer:       /CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
Certificate serial:       04FE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
Manifest number:          04FD
Signing time:             Sun 15 Nov 2026 03:28:43 +0000
Manifest this update:     Sun 15 Nov 2026 03:28:43 +0000
Manifest next update:     Tue 17 Nov 2026 03:28:43 +0000
Files and hashes:         1: 3YlMw4XaLW71JrsLssqqX8pm8MM.crl (hash: V8SgCme98SNo3rD7nG1Yg0FiJ3eNXEhHdMy8s52e6UA=)
                          2: A0B834A6403611EF97C8EE46762E951A.roa (hash: kJ/+tKAV2nU5Yw7yHfU4bK7cxohBTA9n07WDnp1GBUA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278 (0x4fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAF, serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
        Validity
            Not Before: Nov 15 03:28:43 2026 GMT
            Not After : Nov 17 03:28:43 2026 GMT
        Subject: CN=6af926eb-23bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e4:9a:a2:4e:73:8e:60:cd:51:34:1a:f5:6a:
                    21:7a:13:59:94:80:4f:52:e2:99:76:6e:9d:65:7f:
                    4a:13:55:2c:0c:fb:6f:92:f4:16:95:b1:cf:7c:3e:
                    3b:51:eb:bb:90:cb:30:6b:32:6e:f4:03:cb:3a:53:
                    03:c2:51:97:b0:f3:07:98:70:8d:d8:68:fd:5d:eb:
                    d2:11:05:c9:dc:c4:d8:1d:b7:d4:86:3c:19:c2:b6:
                    06:3d:77:05:a4:54:dc:73:ba:19:3b:2b:05:8b:03:
                    81:69:1c:4d:96:e9:c1:2e:41:fa:57:1a:46:e2:32:
                    f9:29:a3:cd:97:4c:50:c0:66:d2:69:61:f7:9f:a0:
                    b0:40:a6:c3:ff:00:11:48:71:0b:0c:84:ea:2d:31:
                    56:1f:02:a1:52:4d:38:fc:3a:46:e8:72:fe:61:8a:
                    75:45:bb:c5:da:c3:fb:e4:93:4e:97:54:2a:2f:1d:
                    53:8b:6c:40:ea:12:6f:ee:2b:20:2e:7f:aa:a9:0f:
                    e8:44:a2:13:d3:18:e8:8c:c6:18:26:d8:41:34:40:
                    a9:37:27:69:9e:40:21:80:8e:22:8b:2e:f2:ff:a6:
                    88:f2:36:5c:d5:76:1c:4a:b2:8e:7d:a6:b8:6d:72:
                    b4:17:0e:55:47:64:18:e0:e2:91:37:88:77:c4:4d:
                    6a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:20:EE:93:01:B2:B3:74:15:3A:9E:47:C2:17:BB:C9:52:0C:ED:0D
            X509v3 Authority Key Identifier:
                keyid:DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:0d:08:2d:f7:bb:f6:2f:7b:05:f4:89:57:c9:c7:66:a2:43:
         a0:97:ba:06:7a:9c:49:8a:4e:9f:db:1f:b0:c5:ba:bc:74:78:
         c9:d2:1b:f2:52:43:e5:b4:5a:c0:db:c7:fe:c2:02:74:b4:30:
         2b:04:a0:29:84:9a:36:01:86:03:75:dc:e7:fa:2b:04:a6:4b:
         d0:a8:d5:a3:47:ee:35:8f:a1:fc:83:26:46:d0:98:65:56:a3:
         5a:fb:96:d1:a6:e9:56:14:bc:7e:fc:0c:1d:97:44:e1:c3:fe:
         26:f5:26:d9:7e:bc:79:62:aa:26:23:87:d2:aa:bf:47:9d:fc:
         af:6c:00:b0:eb:04:14:5a:e8:8b:c8:01:1b:d2:07:0d:75:0a:
         e0:84:26:be:7f:6f:8f:4f:a5:d2:50:9b:39:dc:ae:cc:68:96:
         d2:4b:f2:3e:4f:f1:22:fa:80:9b:36:38:50:aa:b9:b0:a1:b5:
         9a:a7:60:d9:2a:71:11:6f:dd:a9:95:aa:e0:0f:1b:df:8e:aa:
         39:f3:fe:f6:ec:9c:aa:50:e0:19:7b:d8:06:a3:4f:94:d2:0b:
         fd:c5:ee:30:b8:a2:ad:65:38:07:84:6d:fc:54:f5:b1:37:0d:
         3f:9e:bc:a4:79:65:d5:3d:92:8f:a9:ff:60:49:73:ca:ff:ef:
         1f:58:cc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----