Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F3383/263C9DE2B8C611F1854C24FDCE1D38B0/iYuGYlnJUrDppcGeQRify6x2vIM.mft
File:                     iYuGYlnJUrDppcGeQRify6x2vIM.mft (raw, json)
Hash identifier:          lEyYbGyGZSVC5w0LHas9JJufVE5aWGroTEq0NYlxoD4=
Subject key identifier:   8C:86:26:28:C8:C8:B1:AA:CD:DF:2B:E0:52:BF:A5:29:4F:89:07:07
Authority key identifier: 89:8B:86:62:59:C9:52:B0:E9:A5:C1:9E:41:18:9F:CB:AC:76:BC:83
Certificate issuer:       /CN=F36F3383AF/serialNumber=898B866259C952B0E9A5C19E41189FCBAC76BC83
Certificate serial:       42
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iYuGYlnJUrDppcGeQRify6x2vIM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F3383/263C9DE2B8C611F1854C24FDCE1D38B0/iYuGYlnJUrDppcGeQRify6x2vIM.mft
Manifest number:          3D
Signing time:             Sat 14 Nov 2026 05:56:19 +0000
Manifest this update:     Sat 14 Nov 2026 05:56:18 +0000
Manifest next update:     Mon 16 Nov 2026 05:56:18 +0000
Files and hashes:         1: iYuGYlnJUrDppcGeQRify6x2vIM.crl (hash: HNwkZSaW0J5JootuUC7i9YmW+m/2N/bei/CfRTWnexw=)
                          2: 28630CB2C24111F1B3174CD8CE1D38B0.roa (hash: EgR9lrpz6yE2pJ40k4By5GVkmXaaQaJpw9UuVJJ6tYw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F3383/263C9DE2B8C611F1854C24FDCE1D38B0/iYuGYlnJUrDppcGeQRify6x2vIM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F3383/263C9DE2B8C611F1854C24FDCE1D38B0/iYuGYlnJUrDppcGeQRify6x2vIM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iYuGYlnJUrDppcGeQRify6x2vIM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 66 (0x42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F3383AF, serialNumber=898B866259C952B0E9A5C19E41189FCBAC76BC83
        Validity
            Not Before: Nov 14 05:56:18 2026 GMT
            Not After : Nov 16 05:56:18 2026 GMT
        Subject: CN=6af7f803-3f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d4:cb:29:a1:d0:cf:d1:ab:ea:b0:51:23:df:
                    fe:7e:cf:06:b5:0b:9a:19:f7:9a:1c:09:f3:d3:72:
                    d7:51:2f:ec:b1:d5:67:f7:32:45:b4:aa:ff:a7:6c:
                    52:bb:13:59:b3:39:7e:b2:85:56:10:b0:c9:a3:a8:
                    42:71:be:ec:d5:aa:25:58:ab:24:c6:d4:e7:ac:80:
                    cb:5e:c5:1d:4c:23:74:05:24:e6:7a:f9:2d:4d:d5:
                    24:8b:25:58:e9:95:f9:88:2d:1e:7e:d8:b1:0c:0a:
                    d4:33:26:fe:83:e2:09:d0:36:a3:94:75:e3:da:b8:
                    ae:2b:57:00:25:4c:04:b5:56:9d:89:61:39:20:44:
                    b3:e7:7c:0d:20:9a:6e:7b:5c:2d:9d:8c:32:68:83:
                    61:48:66:28:81:0f:e4:a1:63:78:d5:9e:0c:ed:46:
                    36:0d:28:11:d3:db:a7:59:36:b7:6a:76:07:d0:bd:
                    d7:15:eb:de:08:ff:3c:e6:c7:f6:19:7f:c6:6e:61:
                    2f:fa:b6:3a:55:ca:cd:c8:4c:31:69:02:09:7f:ea:
                    83:03:85:22:59:8d:8b:f2:21:35:b8:47:35:f2:5f:
                    bd:09:11:22:cf:a3:0e:a3:9f:7f:62:ba:74:b4:84:
                    64:d4:3a:3d:2c:0f:47:a6:71:5d:62:89:e2:07:60:
                    52:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:86:26:28:C8:C8:B1:AA:CD:DF:2B:E0:52:BF:A5:29:4F:89:07:07
            X509v3 Authority Key Identifier:
                keyid:89:8B:86:62:59:C9:52:B0:E9:A5:C1:9E:41:18:9F:CB:AC:76:BC:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3383/263C9DE2B8C611F1854C24FDCE1D38B0/iYuGYlnJUrDppcGeQRify6x2vIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iYuGYlnJUrDppcGeQRify6x2vIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F3383/263C9DE2B8C611F1854C24FDCE1D38B0/iYuGYlnJUrDppcGeQRify6x2vIM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:80:c1:90:9e:d7:1d:3d:fc:4c:98:21:97:e7:cf:69:13:e9:
         25:04:ce:d8:ed:9a:ca:37:6c:e8:75:6e:a2:ce:fc:3d:f4:54:
         7a:ab:62:86:6e:99:38:46:f5:1f:f0:59:fb:db:87:25:93:c3:
         26:b4:ae:20:ff:d3:0c:d9:6d:a0:80:c7:f7:3c:11:d1:28:44:
         7b:96:46:9d:7b:50:94:97:5f:41:0d:0c:70:ef:f8:25:3f:0e:
         c7:e4:35:ac:b6:21:ac:b2:90:8f:d0:60:0e:72:f8:77:ff:2e:
         ae:a6:76:f7:56:ae:9d:b5:f9:f2:1f:b1:23:36:c2:ce:64:5a:
         93:6b:74:eb:f6:42:6a:25:66:aa:8d:71:8d:cd:45:cc:0a:55:
         9a:f1:bb:ef:17:e3:37:5e:60:78:8f:9c:dd:19:9e:7e:c6:ff:
         41:27:fd:fb:c6:cd:51:c2:5d:89:b8:9f:d3:43:ca:eb:b3:f6:
         48:20:42:06:63:01:23:08:97:d5:96:d1:4b:b1:05:db:c0:ef:
         ba:69:01:65:a1:f6:3a:77:e6:8f:1c:1a:a7:e9:8e:30:b8:3f:
         3f:45:ae:a2:fd:a9:f9:24:dd:f3:12:48:e6:9e:9c:3a:15:2d:
         d1:4f:f0:d9:4f:5c:2c:2c:70:ed:f5:b3:95:46:27:77:f8:dc:
         72:5e:f9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----