Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
File:                     HduOkx9XqSgXZJgwxO2K3XTvSfk.mft (raw, json)
Hash identifier:          hj2Hh9HEQOzrHqwXamgT1atnBNria/bWZ5Biwbiu/nk=
Subject key identifier:   E1:30:97:FC:90:92:3D:25:69:4D:A4:C5:07:1F:94:68:22:3E:53:4C
Authority key identifier: 1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9
Certificate issuer:       /CN=F36F505DAF/serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
Certificate serial:       052B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
Manifest number:          0527
Signing time:             Sat 14 Nov 2026 03:24:35 +0000
Manifest this update:     Sat 14 Nov 2026 03:24:34 +0000
Manifest next update:     Mon 16 Nov 2026 03:24:34 +0000
Files and hashes:         1: HduOkx9XqSgXZJgwxO2K3XTvSfk.crl (hash: UrNyWZXvXpaCBxWKSO8JXPgHE+9I5wiH0f/i/fnSAhA=)
                          2: 67EE102447CF11EE9C03343D4AD9E6FC.roa (hash: O2NZ35ufqu4elRfMay9VZHxMEvo+nnYW2X0R4hlLTtM=)
                          3: 4880939CC4DE11EE95672478775412E6.roa (hash: F2e0hzbOK6HYaj0QzfpPWideNdPZ8IN39pRD4AiYXOM=)
                          4: D1362304419011EE9B834D534AD9E6FC.roa (hash: YNDCiZrahjcZAjNgcdtfFcQUc6+zKfN2PpG8gmYcUdM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1323 (0x52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F505DAF, serialNumber=1DDB8E931F57A92817649830C4ED8ADD74EF49F9
        Validity
            Not Before: Nov 14 03:24:34 2026 GMT
            Not After : Nov 16 03:24:34 2026 GMT
        Subject: CN=6af7d473-5590
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ce:cd:b9:4e:dc:4b:8a:bd:7d:52:f4:ef:7b:
                    6d:58:83:cb:34:57:d9:c3:50:8e:ff:c7:eb:cc:f0:
                    ae:87:aa:b1:6f:7c:11:eb:5c:5a:c7:57:6d:35:88:
                    0b:89:a2:46:b7:09:c0:ec:af:1a:56:3d:2f:b4:74:
                    e9:7c:5e:88:85:53:0e:55:7f:b3:22:77:e5:f8:56:
                    12:15:77:c7:62:fe:e0:63:8d:69:03:10:88:ab:56:
                    d7:97:7b:2f:20:63:ca:45:cc:db:7b:c0:db:14:86:
                    68:8e:56:8d:4f:06:3b:b5:bf:9a:99:24:85:df:08:
                    53:ac:42:78:f3:5b:81:de:63:ae:bc:37:b3:1b:5b:
                    b2:3e:0a:e4:77:43:fa:13:fd:d4:9a:4d:84:ca:46:
                    bc:1e:4e:c3:70:1d:aa:64:5b:72:20:14:81:06:22:
                    b9:c7:27:b6:d5:2f:87:9d:aa:35:b7:a0:86:d3:d9:
                    ba:20:ff:52:84:d2:36:d9:f9:89:a5:aa:f1:0b:3c:
                    93:eb:49:45:ee:7c:0e:bb:82:2c:65:4c:9d:76:95:
                    d4:ce:15:b8:be:16:d3:ff:bb:29:83:cf:09:ab:75:
                    ee:61:d9:68:01:0a:9e:de:d8:80:b5:fe:76:16:17:
                    d7:60:24:a7:ff:fe:f9:2e:a4:d8:1d:52:39:a4:8e:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:30:97:FC:90:92:3D:25:69:4D:A4:C5:07:1F:94:68:22:3E:53:4C
            X509v3 Authority Key Identifier:
                keyid:1D:DB:8E:93:1F:57:A9:28:17:64:98:30:C4:ED:8A:DD:74:EF:49:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HduOkx9XqSgXZJgwxO2K3XTvSfk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F505D/1FB1B4B0EE5F11EDA8219C5A4AD9E6FC/HduOkx9XqSgXZJgwxO2K3XTvSfk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:95:8d:ea:14:6c:e3:72:8e:48:7c:a1:95:f6:9b:05:ca:c8:
         52:d3:c4:3a:27:ca:9b:d2:74:5c:04:f7:ee:ee:cc:d4:d4:37:
         fc:1b:0a:fa:83:65:07:c1:60:37:6a:02:41:32:56:4c:9d:58:
         c8:b4:af:a1:43:4c:be:0e:bf:4f:0c:e5:a1:0b:56:26:22:21:
         57:af:9e:83:3c:32:e1:10:38:a9:42:77:27:84:95:67:e7:32:
         56:fe:99:84:60:c5:80:6c:6d:30:2a:9c:fe:32:a6:6d:62:a2:
         3d:65:1e:d2:45:cf:64:b8:2b:52:4d:86:c9:d0:df:42:11:70:
         bb:96:b1:bd:a0:3b:ba:e6:2e:98:07:c3:3c:ab:ee:21:b2:74:
         64:d5:92:50:50:fd:53:f0:e4:e8:fd:2e:1f:6a:f4:81:62:bb:
         a3:21:19:ce:fb:79:32:fa:5b:89:56:cc:a6:0d:d1:aa:92:55:
         4a:a1:9e:1a:58:d9:03:30:fd:04:63:67:57:1c:21:dd:49:8f:
         97:d6:cb:51:a2:2e:87:45:9c:1a:39:b4:4c:b8:05:22:2f:dc:
         1e:a2:d9:48:53:7f:18:fd:ef:a1:56:44:5d:08:74:34:e7:9f:
         33:1f:80:db:76:62:3f:96:05:ca:33:c5:e2:94:de:20:56:0c:
         71:63:38:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----