Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
File:                     htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft (raw, json)
Hash identifier:          1Xwn6dq0ZCW2jc6tPcAtPiaWAyqTSC9t74rnyh0Qefw=
Subject key identifier:   B6:3B:33:57:D4:29:1D:C4:83:86:17:CB:7E:EC:22:16:7D:3A:82:68
Authority key identifier: 86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14
Certificate issuer:       /CN=F36CC8EBAF/serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
Certificate serial:       06C5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
Manifest number:          06C3
Signing time:             Sun 15 Nov 2026 02:38:59 +0000
Manifest this update:     Sun 15 Nov 2026 02:38:58 +0000
Manifest next update:     Tue 17 Nov 2026 02:38:58 +0000
Files and hashes:         1: htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl (hash: lRjzKndsc2NY5NfDWShfpbRXUk1LYtjqC/41VPwjTQ8=)
                          2: 711CFAE68EFF11F1861E12F7CE1D38B0.roa (hash: YcxFaRYDU93ic2kkJf38rgwio29IQhYMfFVkiCv5/sQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1733 (0x6c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CC8EBAF, serialNumber=86D5F6042E46689FE5A503E7D2DF89F0E3FC9214
        Validity
            Not Before: Nov 15 02:38:58 2026 GMT
            Not After : Nov 17 02:38:58 2026 GMT
        Subject: CN=6af91b43-7cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c2:56:81:3a:5f:66:b0:a8:ec:a3:c2:7b:ba:
                    a3:27:3b:5f:99:7d:3d:0c:81:ab:ff:23:2e:fb:d3:
                    cc:bc:92:3f:ac:e1:10:0d:1a:22:ee:3f:73:c0:a2:
                    f5:bd:c5:d7:da:58:4e:53:ec:d3:76:2d:16:86:03:
                    6b:e9:22:f6:8b:4b:6f:5e:d7:ae:f7:02:a0:9c:a4:
                    7a:b2:d2:02:9e:ef:ce:db:b8:6e:62:52:f4:d7:a7:
                    06:26:ca:b7:b6:ad:15:30:b2:d2:37:e3:1b:c1:1c:
                    58:1c:05:80:5a:4d:d4:23:2e:8d:99:9d:0c:57:6b:
                    d7:08:49:db:1a:35:ec:59:13:45:78:77:d0:05:61:
                    85:7b:8d:fe:cd:c4:b2:9f:3a:d3:04:a5:32:a6:3f:
                    db:99:6a:95:bf:89:f8:80:fd:29:7a:a4:19:c8:a8:
                    29:3b:83:11:cb:fe:9a:e8:cf:be:ef:5a:08:b1:0e:
                    f1:fe:b0:42:ae:bc:70:87:c5:6f:cd:d3:89:09:ba:
                    ee:06:62:37:e9:f6:4b:aa:1e:36:2b:a2:6f:a8:7c:
                    d1:5a:de:44:58:4a:18:d4:29:48:ea:10:36:a2:2b:
                    f6:9e:43:ce:38:2a:ee:f0:d2:4f:e2:50:2f:4c:05:
                    e7:23:44:c4:af:34:0f:f7:d0:81:eb:68:2c:4e:02:
                    9a:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3B:33:57:D4:29:1D:C4:83:86:17:CB:7E:EC:22:16:7D:3A:82:68
            X509v3 Authority Key Identifier:
                keyid:86:D5:F6:04:2E:46:68:9F:E5:A5:03:E7:D2:DF:89:F0:E3:FC:92:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/htX2BC5GaJ_lpQPn0t-J8OP8khQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CC8EB/B8DAD9A6B0ED11EC8494D0815A40D577/htX2BC5GaJ_lpQPn0t-J8OP8khQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:5d:b8:24:70:68:8e:ee:8f:90:8d:9c:bd:0d:79:ad:1a:97:
         67:6e:fb:63:69:e4:57:cc:a2:34:36:f2:00:62:cc:09:d4:ec:
         df:a5:71:e5:7a:03:dc:ff:0c:ed:ea:32:9f:d4:10:4c:66:cc:
         c2:c8:d9:82:9e:09:d1:ad:16:05:29:53:77:ce:6b:f4:f2:78:
         7f:ed:0d:8d:9b:9c:99:0c:0c:52:99:3b:2d:5a:bc:2d:bb:fa:
         19:b5:40:57:f6:d4:89:e8:e5:f3:16:86:7b:7a:46:e0:72:d5:
         b1:5e:98:4c:27:b5:2e:a1:f0:b2:31:84:7f:e4:7a:ef:c2:fa:
         da:14:8b:36:f3:a9:1c:cf:a5:f1:87:23:83:ce:58:23:b2:b5:
         b3:12:47:9e:5b:e0:9d:1c:7e:ae:93:08:d6:72:bd:50:a0:56:
         9a:b2:8f:c6:9a:b7:66:d7:4b:88:1f:ef:63:3b:77:0e:ee:e1:
         9d:12:fd:a8:0a:7f:a5:d5:1e:d1:58:4c:4c:1a:61:ff:3f:25:
         fe:d0:16:12:9b:8c:90:a4:7a:d8:7e:d6:c3:25:7f:8c:91:2e:
         44:2b:6b:6d:70:ac:2c:31:d2:c3:ec:1f:1d:31:4c:bb:a6:0d:
         de:18:82:7c:cc:0c:99:4b:97:75:76:4b:b2:9b:91:1c:bb:b4:
         13:2d:b4:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----