Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
File:                     XulhNES2heRACvJQMvMjaKxzhgo.mft (raw, json)
Hash identifier:          0IaF22dqCzML/hZf/AhN48ooVInwupbC7m6rargp8xQ=
Subject key identifier:   07:FD:B6:0C:CE:17:AC:75:A8:67:D3:BE:38:47:DC:9B:DA:FC:C5:FE
Authority key identifier: 5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A
Certificate issuer:       /CN=F36EE763AF/serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
Certificate serial:       0136
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
Manifest number:          0135
Signing time:             Sun 15 Nov 2026 05:20:46 +0000
Manifest this update:     Sun 15 Nov 2026 05:20:45 +0000
Manifest next update:     Tue 17 Nov 2026 05:20:45 +0000
Files and hashes:         1: XulhNES2heRACvJQMvMjaKxzhgo.crl (hash: uMcOVJnQ7kHQE5t83uu87f1bUTdzYOolC38FVaLYD4I=)
                          2: 8CF50C7EF09C11F09220C691DAE4EC9C.roa (hash: RBXfrMLemnAtHw5865OVdIO7wWh6V9X2nw9Mms9JBjU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 310 (0x136)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE763AF, serialNumber=5EE9613444B685E4400AF25032F32368AC73860A
        Validity
            Not Before: Nov 15 05:20:45 2026 GMT
            Not After : Nov 17 05:20:45 2026 GMT
        Subject: CN=6af9412e-e7ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:98:9c:dc:8f:83:73:f8:de:75:b8:48:f7:5f:
                    91:c3:9a:de:f9:4b:ba:6c:7f:00:9e:b6:6a:68:6a:
                    26:4a:ce:71:0a:ee:01:15:b5:ff:42:80:26:41:52:
                    5e:6e:bd:73:26:61:df:9b:43:91:b0:f1:d7:9e:20:
                    ef:9f:d9:50:ec:f9:ba:cf:c5:01:b2:8a:5d:6e:36:
                    41:48:3d:b0:9e:87:64:4b:f2:42:7b:6c:d0:0f:89:
                    26:21:85:10:e7:6b:f7:ae:e7:a3:b6:cd:c8:00:3e:
                    c2:74:7f:62:ce:0f:13:1f:02:dd:cb:fb:94:66:c0:
                    62:a2:17:06:c7:08:4d:95:f3:bd:08:4e:8e:b2:f4:
                    cf:91:47:33:19:1a:ff:17:4f:62:9e:c6:cc:2b:11:
                    ea:4a:3f:d1:8e:36:c9:c4:45:b7:68:37:b5:b0:8e:
                    91:d4:77:cf:35:2f:97:fa:45:e5:d9:8a:a5:59:b2:
                    17:c3:ff:7a:80:4e:7f:99:6d:10:0c:70:94:10:a4:
                    be:21:8b:29:ed:8d:68:36:00:72:db:aa:4b:2a:eb:
                    23:95:bd:c1:17:96:fe:64:6d:8b:0d:2c:c7:d3:c1:
                    80:4b:77:d7:53:96:58:71:c8:7f:7f:eb:86:f5:6d:
                    82:ca:26:62:89:a5:c7:a7:c4:77:61:56:c3:6b:3b:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:FD:B6:0C:CE:17:AC:75:A8:67:D3:BE:38:47:DC:9B:DA:FC:C5:FE
            X509v3 Authority Key Identifier:
                keyid:5E:E9:61:34:44:B6:85:E4:40:0A:F2:50:32:F3:23:68:AC:73:86:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XulhNES2heRACvJQMvMjaKxzhgo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE763/28352262F05411F092BE6EDCDAE4EC9C/XulhNES2heRACvJQMvMjaKxzhgo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:ff:73:11:5e:ec:b9:1d:db:47:80:3b:d0:b9:e6:17:4f:df:
         f7:6f:1e:bf:f2:d2:fa:29:ed:a7:d9:5e:8c:ba:f6:67:a2:85:
         40:f8:1a:20:08:25:0c:c3:05:33:7c:9a:d5:01:c0:35:cf:47:
         d7:bd:54:cb:59:42:e8:a0:e9:27:e3:37:c6:a0:54:d6:85:31:
         43:b4:f5:8d:3c:dc:03:0c:75:cf:22:cf:56:25:a6:59:07:67:
         b8:99:35:ca:19:41:2e:84:88:44:3e:c4:48:dc:00:68:de:b1:
         81:01:d0:47:39:ae:bf:fc:5b:de:98:d9:96:65:dc:75:69:73:
         dd:d4:bd:5e:2d:9c:2c:d8:fd:c1:71:40:32:70:f2:88:f8:66:
         81:37:13:d1:6a:e3:1e:f6:03:f1:d3:f4:56:1e:64:59:6f:b4:
         ae:38:d7:03:f0:7f:8e:e9:8d:3b:9b:ef:be:1c:ef:82:9e:d4:
         cd:02:0d:4b:66:36:2c:17:84:9f:a3:1b:9d:a8:c5:c8:e4:c5:
         fa:47:ed:fc:10:8a:ad:dd:35:4a:97:71:cf:12:06:9a:73:e8:
         e6:3a:40:c0:d2:e9:f7:8c:0a:94:c3:99:42:a1:cc:5d:f9:63:
         6a:dd:ea:6f:09:4d:c2:a8:ea:cd:22:c4:b8:fe:30:34:ce:5e:
         0f:f5:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----