Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
File:                     zFDm0Igy-da0ktsaCun0dMNadjo.mft (raw, json)
Hash identifier:          A6hKGxOWP49AUcWGP+hqe50TGOGaYWa8Nx8vLhxUMyc=
Subject key identifier:   D5:D3:9F:E1:9B:75:4E:7F:37:5F:05:43:43:42:9E:F9:03:A4:B0:41
Authority key identifier: CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A
Certificate issuer:       /CN=F36EBB83AF/serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
Certificate serial:       0134
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
Manifest number:          0133
Signing time:             Sat 14 Nov 2026 05:21:18 +0000
Manifest this update:     Sat 14 Nov 2026 05:21:17 +0000
Manifest next update:     Mon 16 Nov 2026 05:21:17 +0000
Files and hashes:         1: zFDm0Igy-da0ktsaCun0dMNadjo.crl (hash: J2CAvmpX9Zqdzt64P0j1PlxRKgU4XVMkG9kogmSYzqI=)
                          2: 890714D6F13C11F0A8B5B8EEDAE4EC9C.roa (hash: jpMzBp+XA2OT7GpKVUf61L9TEAnmUra8ZP6BY3MSD60=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 308 (0x134)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBB83AF, serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
        Validity
            Not Before: Nov 14 05:21:17 2026 GMT
            Not After : Nov 16 05:21:17 2026 GMT
        Subject: CN=6af7efce-1360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a9:96:ba:34:57:b8:62:ab:32:10:59:a8:0e:
                    51:62:70:62:24:e3:e8:87:f9:92:58:4c:96:e7:81:
                    ff:ed:aa:36:11:84:f3:09:5e:0b:69:4b:4b:69:ce:
                    9f:40:52:e5:3b:ec:d5:3e:7f:bc:42:87:a5:75:29:
                    90:75:fb:dd:79:0f:b3:78:ee:62:45:fb:df:36:13:
                    13:70:c0:0b:38:ca:98:3a:bc:08:c6:4f:08:23:7f:
                    b8:1b:c5:55:bc:05:5a:a2:d3:96:94:1e:8c:44:71:
                    05:9d:c7:d3:7f:41:38:8f:41:2b:d4:24:a3:46:c1:
                    e4:21:82:8c:56:de:38:d0:74:ca:23:2e:97:4e:2d:
                    da:0c:5f:15:ec:d3:4e:20:ef:a3:4d:db:15:ae:9a:
                    1b:32:6e:1a:1e:7b:f9:25:40:7a:98:e1:9a:d6:b7:
                    b4:cd:b8:fe:1b:1d:54:81:35:20:c1:c5:7c:82:93:
                    ef:66:13:60:ef:bc:b7:55:a7:54:d6:2e:e3:3f:fb:
                    df:a4:e9:db:99:81:00:51:10:16:15:72:e5:ad:69:
                    84:8b:22:71:74:0f:d7:0e:52:c5:67:a2:35:77:7f:
                    74:4f:32:5d:f6:f4:39:24:d3:c0:00:22:60:31:a7:
                    26:0f:aa:58:34:3f:d5:8a:9e:63:29:b3:55:1f:54:
                    73:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D3:9F:E1:9B:75:4E:7F:37:5F:05:43:43:42:9E:F9:03:A4:B0:41
            X509v3 Authority Key Identifier:
                keyid:CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:18:3d:62:76:44:45:f1:14:f1:6f:da:aa:aa:9a:f3:57:b4:
         9b:74:c6:cc:a0:7a:d8:aa:b6:23:ae:ce:1f:7c:ae:df:07:e7:
         ad:cd:2c:10:d0:7f:24:e0:ad:38:20:d7:82:d3:41:2f:75:12:
         f5:59:79:f2:ab:41:ef:c7:9c:ca:63:4a:13:6b:c2:18:06:4d:
         3f:fc:26:a4:5e:93:12:78:23:aa:10:2c:1c:cb:c5:c4:43:50:
         e6:e6:2f:1c:0e:c7:a4:67:22:86:ec:2c:3b:ca:ee:6c:9d:3e:
         46:f8:ad:05:a5:bb:60:00:2c:55:cb:51:a9:1e:91:65:b9:17:
         fd:98:2e:41:5d:b2:17:1d:67:55:af:47:17:f7:2c:a8:95:a1:
         33:54:01:c6:8a:6e:47:5c:1b:90:e2:13:28:d2:fc:98:e7:c1:
         30:df:1b:f8:37:7d:23:78:98:56:d7:b9:2d:a9:51:dc:07:ad:
         3d:a5:4f:6b:55:17:62:db:bb:ba:87:d9:d6:60:06:b9:3f:39:
         65:1e:45:f6:5d:7e:66:22:b6:3a:d2:47:8a:a8:7f:1e:eb:b5:
         90:93:75:5b:18:05:39:fd:4c:0f:88:6d:56:b8:25:d4:c8:2c:
         15:8d:19:11:21:99:8b:73:18:70:c1:a5:8f:3c:28:c5:37:40:
         aa:63:1d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----