Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File:                     ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier:          m9C9hiZwy6lpGpDLYKji1Jp3//Q6CI4GL+KHT651+3U=
Subject key identifier:   79:A6:CF:EF:82:FA:03:75:F6:66:5F:21:6D:30:2D:8C:3F:B0:BA:70
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer:       /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial:       0281
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number:          027F
Signing time:             Sun 04 Oct 2026 04:41:31 +0000
Manifest this update:     Sun 04 Oct 2026 04:41:30 +0000
Manifest next update:     Tue 06 Oct 2026 04:41:30 +0000
Files and hashes:         1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: kji51yNT6kHPx64nc3+jpVq/Do2HUtriOVCpBRx0Py0=)
                          2: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 04:41:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 641 (0x281)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
        Validity
            Not Before: Oct  4 04:41:30 2026 GMT
            Not After : Oct  6 04:41:30 2026 GMT
        Subject: CN=6ac1d8fb-37e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:ee:47:e2:8a:bc:5d:05:19:11:24:a8:02:
                    01:4d:54:59:da:9f:10:7b:ac:c2:91:c7:33:b2:94:
                    cd:b4:dd:26:35:6e:12:18:35:16:e0:cb:45:f4:c9:
                    45:b1:b0:14:74:30:e7:71:67:2d:c1:d4:30:3a:41:
                    0b:e4:2c:b8:2e:82:43:24:88:4b:ba:0f:4b:bb:54:
                    f6:92:d8:64:e8:b9:4f:67:e2:10:3a:f8:ac:5d:6c:
                    cc:21:47:bb:75:98:d0:2a:c2:e5:07:01:34:4c:15:
                    6f:fc:f8:27:d0:dc:cb:d2:3d:a3:f0:1f:2d:4c:e6:
                    dc:1b:2f:0b:8e:0f:39:c9:7b:d7:ce:56:b8:d9:ed:
                    0a:4f:99:58:d1:a9:f6:31:9c:a9:87:7e:57:31:37:
                    69:dd:25:89:b0:8b:64:26:50:df:b2:f6:60:5b:d2:
                    62:c7:33:6a:28:0b:43:5f:34:9f:cb:11:95:88:98:
                    42:59:81:99:2a:16:6f:56:25:f9:e5:65:d9:a9:60:
                    33:ef:7b:69:54:a8:78:06:69:7d:58:66:c7:8a:c3:
                    f6:af:a6:14:4e:ae:35:42:01:c5:f3:33:dd:c8:eb:
                    0c:35:55:3b:a9:c5:fc:c9:fe:6b:31:66:87:92:fe:
                    0c:1d:ed:b3:a4:f1:f5:f9:53:b5:3c:71:3a:1f:82:
                    9d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A6:CF:EF:82:FA:03:75:F6:66:5F:21:6D:30:2D:8C:3F:B0:BA:70
            X509v3 Authority Key Identifier:
                keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:a1:19:7e:6e:8f:74:ce:a5:64:ad:1c:21:97:e8:1f:ea:1a:
         14:44:85:bd:51:c0:5e:70:c4:ee:d1:52:e4:94:a8:72:10:4d:
         b0:1e:1c:ec:2f:35:1b:25:87:f4:1e:83:71:00:21:53:ba:7a:
         55:09:d6:2d:6d:39:87:bd:aa:1a:fc:3f:ce:bd:f6:bc:3f:37:
         94:8d:c0:7c:e0:82:ec:ad:c5:92:82:c9:a6:71:c0:1b:cb:19:
         92:df:2f:9c:4a:37:34:21:20:2b:f4:10:21:b6:08:43:97:f3:
         ca:f9:0d:58:82:74:82:f5:f1:8b:d4:23:4d:9b:8b:75:ea:c1:
         6a:5f:8d:c4:a7:6d:77:2e:4d:57:28:15:97:44:34:d0:d8:cf:
         45:a5:3f:a4:6d:80:9b:56:c1:6d:e5:13:44:df:94:1b:f1:6d:
         1a:01:d4:c5:2f:be:33:34:23:9b:dc:ae:a9:a1:e4:06:c3:7d:
         88:c6:85:3d:e2:6b:29:d2:5c:11:92:40:4e:50:d9:36:fa:83:
         ef:5e:c4:83:a9:f7:cd:6c:5d:76:e7:39:e9:4d:c2:b1:d7:37:
         ef:3e:8f:fe:4b:7c:f1:38:54:f5:45:72:5e:3c:c5:e3:75:81:
         50:4c:26:0a:f8:cb:69:16:59:c9:6e:c6:08:f2:63:23:72:a8:
         0d:ce:25:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----