Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
File:                     ki5AVQsnbd4essFQ31YlgeKM6LY.mft (raw, json)
Hash identifier:          wmzcWtuEeye9y7lgTK62/0CVRLeKezl/3r8hftRGYZ4=
Subject key identifier:   B2:0E:8E:3A:80:A1:AF:15:50:71:EA:09:07:16:9E:41:E2:83:ED:CF
Authority key identifier: 92:2E:40:55:0B:27:6D:DE:1E:B2:C1:50:DF:56:25:81:E2:8C:E8:B6
Certificate issuer:       /CN=F36F0F1FAF/serialNumber=922E40550B276DDE1EB2C150DF562581E28CE8B6
Certificate serial:       04D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
Manifest number:          04CE
Signing time:             Sat 14 Nov 2026 03:36:21 +0000
Manifest this update:     Sat 14 Nov 2026 03:36:20 +0000
Manifest next update:     Mon 16 Nov 2026 03:36:20 +0000
Files and hashes:         1: ki5AVQsnbd4essFQ31YlgeKM6LY.crl (hash: xGs4q0Z0lT8m/F1J/3OHXy2ATjAJMEsCQbAgRouDmlQ=)
                          2: 100404ACF0EF11EF88C9AE71762E951A.roa (hash: 8k5gdkW/3dmY+rQ2FXNkTuiBZr2cv4drq04xkEmoRrA=)
                          3: 103C0BB8314711EE99292E464AD9E6FC.roa (hash: TmpoQ5dHcVfEPTGG3mk1fm6t56EElHhj1QpqJ0Vnq+E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 03:36:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1232 (0x4d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0F1FAF, serialNumber=922E40550B276DDE1EB2C150DF562581E28CE8B6
        Validity
            Not Before: Nov 14 03:36:20 2026 GMT
            Not After : Nov 16 03:36:20 2026 GMT
        Subject: CN=6af7d735-0bac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:12:78:aa:b7:a4:a5:6b:fc:1f:0c:e2:27:2d:
                    69:71:eb:95:48:31:bc:b8:05:fa:9b:ba:cb:d5:d0:
                    ce:f8:39:7c:dd:e9:11:92:d5:26:7f:fa:10:38:29:
                    eb:87:14:91:5d:88:fb:e4:ec:7b:58:e8:ad:8d:d8:
                    8e:6b:8d:48:c3:d0:85:d1:a3:1b:90:5c:21:5e:18:
                    fd:fc:78:92:01:7c:56:fd:0f:87:08:d2:4a:7f:0e:
                    d3:1b:07:7c:4f:70:ea:96:ae:88:ad:bd:fd:b6:d9:
                    b7:08:d9:8f:dc:56:ef:4e:9e:db:a8:28:8e:5a:67:
                    24:57:61:c5:9e:cf:06:6d:23:49:17:b9:f7:25:76:
                    c8:ce:72:f7:c0:7c:8c:93:ab:d7:13:d4:6a:da:1a:
                    e0:f8:29:7c:3c:64:71:87:44:09:8c:53:e8:03:35:
                    d3:56:5e:2e:28:41:df:d0:c6:25:5c:4b:05:84:db:
                    c8:6b:39:be:9a:a8:26:5e:df:34:8c:8c:86:0e:c8:
                    b5:8c:c5:de:af:87:60:dc:f7:cf:07:c5:74:18:eb:
                    9a:cd:d7:51:3f:a7:51:cc:55:20:33:33:be:43:70:
                    a1:0e:df:6b:d5:c7:bf:fd:ff:48:8f:99:bb:91:7f:
                    e3:5c:92:dc:4d:fd:38:04:01:16:6a:ac:a0:d2:29:
                    fc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:0E:8E:3A:80:A1:AF:15:50:71:EA:09:07:16:9E:41:E2:83:ED:CF
            X509v3 Authority Key Identifier:
                keyid:92:2E:40:55:0B:27:6D:DE:1E:B2:C1:50:DF:56:25:81:E2:8C:E8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ki5AVQsnbd4essFQ31YlgeKM6LY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0F1F/EDA5AFEC314011EE95A038344AD9E6FC/ki5AVQsnbd4essFQ31YlgeKM6LY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:4e:79:4e:bd:2d:ed:8b:5e:5f:e7:68:2b:12:8f:57:db:67:
         c6:8d:52:78:ba:e8:40:2d:cd:48:e0:52:07:e9:42:c7:2f:c4:
         41:37:16:52:a2:5b:0f:90:6e:15:fb:e6:40:02:9f:46:85:d5:
         b6:97:1c:92:68:ef:f6:6f:f0:e0:4b:f9:2f:62:e6:04:87:21:
         25:be:7e:8c:e5:93:95:a0:0a:74:1c:95:b2:f8:40:ca:94:61:
         81:14:35:e6:54:04:b0:e2:6b:ab:4c:cc:87:3d:4b:69:49:e2:
         dd:02:94:59:9f:44:c9:22:30:76:70:57:86:50:4e:96:6a:9d:
         11:1d:8d:74:49:80:ea:94:95:50:89:aa:f0:81:62:cc:16:7d:
         b0:92:eb:86:f9:ef:3f:ee:9a:51:02:51:59:03:c0:35:b0:31:
         fd:37:5c:48:47:d4:bb:bb:ca:b1:10:e3:f7:ba:94:18:43:d3:
         87:2f:a7:bf:c6:5a:83:96:88:1d:fb:fa:70:87:ef:05:09:36:
         56:fd:a9:7e:a3:94:8a:ed:17:13:7d:59:0e:47:cc:bc:e3:06:
         eb:5c:a5:3c:ea:b5:6d:03:3c:55:5b:07:01:8d:91:00:37:dc:
         6d:25:f6:76:45:bf:05:76:49:09:3a:ed:16:cc:d6:88:e7:f8:
         ad:9a:a0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----