Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
File:                     NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft (raw, json)
Hash identifier:          b5dHuNYHP1KNx9lc5vE4R30kLzZdbPVlJPCMoGhguqY=
Subject key identifier:   F6:B9:C7:E9:63:97:7E:20:71:AF:0C:4F:16:00:75:92:D1:D7:D8:BA
Authority key identifier: 35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72
Certificate issuer:       /CN=F36C67A4AF/serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
Certificate serial:       F4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
Manifest number:          F2
Signing time:             Sun 15 Nov 2026 05:29:34 +0000
Manifest this update:     Sun 15 Nov 2026 05:29:34 +0000
Manifest next update:     Tue 17 Nov 2026 05:29:34 +0000
Files and hashes:         1: NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl (hash: yHwb+vZIf7kOeHjxXJO5Wp1vIsT2jWTVwMS/QMTVfP4=)
                          2: 924CE9226B0C11F1BDC870D7CE1D38B0.roa (hash: XU+yo9KfYUkFLBQDwyQRQQAYJyKWLNTrj3wgPnpGVIY=)
                          3: 3100489627B211F18A08A3B6DAE4EC9C.roa (hash: KxXVh/K4PRDNOgb6lGt6sWf5pvipfL5DWCni74reBi0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 244 (0xf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C67A4AF, serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
        Validity
            Not Before: Nov 15 05:29:34 2026 GMT
            Not After : Nov 17 05:29:34 2026 GMT
        Subject: CN=6af9433e-cfd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fb:8b:5e:ab:f0:d8:89:80:2a:60:52:0d:84:
                    1b:f0:b0:a8:b9:e4:01:fb:18:a0:3c:7c:8d:0c:9b:
                    ca:94:d6:c8:f8:84:4d:28:6e:8d:41:f1:f2:6f:7d:
                    3a:8b:11:7a:ab:11:61:50:32:fe:4b:ba:1a:a8:a7:
                    41:b8:e7:63:5d:20:a2:9d:97:6b:d8:97:57:66:34:
                    2a:f0:ef:5e:b9:65:bc:74:43:55:ef:e2:5c:19:fc:
                    8b:55:1a:07:2f:fc:a6:86:2b:38:2e:57:8a:42:10:
                    d3:1e:2c:ad:77:0b:c6:65:db:d6:4c:60:64:3c:0b:
                    83:e5:06:fe:71:05:ee:51:da:f6:c8:a0:2c:17:c0:
                    6f:9c:37:38:a0:48:a2:51:b6:0e:c3:bb:72:4c:6c:
                    08:54:1b:8a:e6:cd:58:5c:15:61:dc:3c:c9:15:03:
                    20:5a:2c:d7:ea:5e:8b:81:41:b3:88:bb:7b:d3:7d:
                    ff:9e:65:98:dc:c6:65:6c:26:ef:02:54:81:04:ca:
                    30:97:5a:b7:d5:98:f5:af:5b:b6:76:43:7d:6c:0d:
                    1f:99:fe:b8:1a:c8:06:00:f7:49:c7:c5:09:40:08:
                    7f:04:1e:e4:53:e9:d7:b0:7d:f0:de:91:97:97:a3:
                    f1:c1:6c:73:26:d9:98:0e:87:f0:d2:e7:45:77:89:
                    c3:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:B9:C7:E9:63:97:7E:20:71:AF:0C:4F:16:00:75:92:D1:D7:D8:BA
            X509v3 Authority Key Identifier:
                keyid:35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1a:c6:a1:35:59:cf:56:4a:25:4d:ed:c5:f5:7c:52:bd:a7:
         df:43:36:c4:7a:c0:2c:e9:5e:a7:8b:31:7e:18:b4:99:69:3d:
         2b:b5:d5:53:53:51:ca:cf:c1:d5:24:28:84:d6:86:d8:35:67:
         82:12:e0:65:6a:dd:84:6a:9e:c3:b4:9a:25:95:81:66:d7:b9:
         6f:82:87:ce:91:b2:39:29:73:f9:9c:da:c6:01:9a:9c:b2:e2:
         16:ef:e6:a2:6f:67:80:93:3a:bd:8d:41:5f:49:66:67:52:19:
         24:ff:06:be:76:72:6d:7b:ee:09:0a:92:40:3a:13:c1:50:d5:
         7b:a3:54:1d:8c:81:40:ca:34:b3:76:f4:93:6e:da:e0:cd:2b:
         a7:43:39:f5:4d:e5:7a:6f:b0:8b:b9:a0:a3:34:c4:79:83:39:
         24:e9:36:f8:d9:7e:67:53:94:69:b0:5b:e4:c8:7a:27:59:71:
         60:24:f9:a0:a8:32:46:5c:2d:51:52:e5:ed:38:42:b0:ce:74:
         f5:0d:53:1c:5a:b6:63:6b:64:f9:26:7d:38:cb:97:eb:80:e7:
         87:85:1c:4c:39:6f:ca:bc:11:0f:8f:65:d8:f9:03:77:01:60:
         e1:32:dd:72:bd:b6:a0:79:36:64:8f:b7:bd:70:15:81:d2:51:
         c8:77:b0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----