Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
File:                     s14-lHqUdaFnx9_wp9CQLIZFgy0.mft (raw, json)
Hash identifier:          fRDyc/rGLBC0oMDWEZMeYjOsFl6sRadJUJaqNqmyABY=
Subject key identifier:   0F:1F:8B:73:1E:91:CC:A3:CD:C3:F7:29:73:D7:4F:54:20:E7:2C:6A
Authority key identifier: B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D
Certificate issuer:       /CN=F36B6ED4AF/serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
Certificate serial:       01D8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
Manifest number:          01D6
Signing time:             Sun 15 Nov 2026 05:02:31 +0000
Manifest this update:     Sun 15 Nov 2026 05:02:30 +0000
Manifest next update:     Tue 17 Nov 2026 05:02:30 +0000
Files and hashes:         1: s14-lHqUdaFnx9_wp9CQLIZFgy0.crl (hash: DQIjRxf95214mpQ7vM7UEDUhoo9LEULqFDkeoHSMWA4=)
                          2: D8A71DD2749111F1802E4BF8CE1D38B0.roa (hash: JTzpFHYOsn2jAqwAVCYXPu+sTMxl0KhIneHn4a+QTiE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B6ED4AF, serialNumber=B35E3E947A9475A167C7DFF0A7D0902C8645832D
        Validity
            Not Before: Nov 15 05:02:30 2026 GMT
            Not After : Nov 17 05:02:30 2026 GMT
        Subject: CN=6af93ce7-405c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:27:4c:92:1a:b4:42:4b:20:08:0c:5b:82:5b:
                    04:7f:ba:da:3a:da:7e:c9:21:1a:6e:c6:68:35:0f:
                    19:b5:9e:fc:7c:7e:71:fd:3d:06:da:b0:4e:3c:16:
                    59:7c:3e:0b:d0:b8:f8:65:00:a5:08:54:e2:34:db:
                    db:c2:dd:4c:55:43:c3:f2:aa:16:f1:34:1b:7c:69:
                    e9:d9:08:6d:28:60:40:49:8e:47:31:91:82:2e:00:
                    78:15:a6:58:f4:72:40:ba:7c:db:ea:e7:2d:6b:81:
                    99:3b:25:d4:5b:aa:cf:f9:50:87:bb:57:d9:52:75:
                    36:d0:1b:52:3e:03:03:b0:e8:2c:68:fb:ac:54:8e:
                    24:2b:a1:a3:97:37:11:62:78:75:82:74:3e:a3:77:
                    3a:02:48:0f:33:3c:ff:72:97:c6:cf:10:5e:15:90:
                    90:d4:93:be:fc:95:92:14:70:48:c5:89:a9:4c:3e:
                    c3:a8:d5:55:d4:a4:85:6d:b2:bb:fc:a6:56:d0:3b:
                    7a:35:b9:68:28:ff:92:7d:d0:e5:33:39:e3:cb:e3:
                    5e:4a:ee:e7:bf:3b:30:e7:dc:89:3e:ba:26:df:7e:
                    20:9f:c6:8f:8e:89:bf:e4:a0:5e:f4:ad:1a:f0:75:
                    86:9b:de:91:1e:81:a6:50:34:1f:d3:5f:02:33:49:
                    cc:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1F:8B:73:1E:91:CC:A3:CD:C3:F7:29:73:D7:4F:54:20:E7:2C:6A
            X509v3 Authority Key Identifier:
                keyid:B3:5E:3E:94:7A:94:75:A1:67:C7:DF:F0:A7:D0:90:2C:86:45:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/s14-lHqUdaFnx9_wp9CQLIZFgy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B6ED4/7FEB5078746511F0B88F0E83DAE4EC9C/s14-lHqUdaFnx9_wp9CQLIZFgy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:c9:42:1d:14:13:3d:c8:0a:29:03:2a:39:8a:b9:93:75:99:
         94:09:9a:ad:02:ee:a2:ff:0d:cd:7c:43:06:3e:c4:2e:ae:e7:
         db:36:39:45:26:36:3f:59:ca:7b:ca:91:77:27:57:8e:6c:7c:
         cb:3e:09:c0:0c:1e:21:58:8e:e1:1e:69:c0:6a:2b:3f:1e:be:
         29:1f:20:98:8d:8c:41:9b:8d:62:09:f5:23:61:e1:4b:f2:3b:
         f9:09:dd:77:65:4a:a1:ea:c4:b8:cd:cd:82:1f:56:59:90:fe:
         07:a6:68:0c:ec:e5:44:8b:60:37:ec:a1:71:47:88:8f:b7:9e:
         39:97:c8:49:2f:dc:bc:27:d4:0c:de:c7:4e:5d:78:d0:1e:b7:
         21:8e:20:f1:f8:28:24:b3:88:9d:2a:17:13:02:63:75:62:73:
         0d:ec:8a:58:45:c1:99:c5:82:33:72:45:5c:15:19:fd:02:5c:
         8f:6e:13:68:5a:eb:d8:48:8e:83:1d:6b:72:29:4f:d9:e3:93:
         ec:35:13:49:2e:a1:12:06:5e:ef:5b:42:e1:57:6e:da:97:a8:
         bf:fc:29:3d:c4:2e:e9:f1:ac:ac:52:5e:b2:dc:28:34:c7:cc:
         de:29:e7:f4:56:4e:76:f9:46:35:e2:2a:ff:3c:12:1d:08:16:
         00:2d:27:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----