Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
File:                     a5qEGbi8uumMQQnFsT9T3CAtmnk.mft (raw, json)
Hash identifier:          KHsgfVbr7rDA+sLKggvHIUdBGt/Q/tXSfmqy0HNBsbE=
Subject key identifier:   68:A8:0E:05:BC:CA:B1:60:7F:11:66:2A:C8:E8:C4:58:E1:E7:B7:6F
Authority key identifier: 6B:9A:84:19:B8:BC:BA:E9:8C:41:09:C5:B1:3F:53:DC:20:2D:9A:79
Certificate issuer:       /CN=F36250A1AF/serialNumber=6B9A8419B8BCBAE98C4109C5B13F53DC202D9A79
Certificate serial:       33
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
Manifest number:          30
Signing time:             Sun 11 Oct 2026 05:53:25 +0000
Manifest this update:     Sun 11 Oct 2026 05:53:24 +0000
Manifest next update:     Tue 13 Oct 2026 05:53:24 +0000
Files and hashes:         1: a5qEGbi8uumMQQnFsT9T3CAtmnk.crl (hash: 4/0GslWYZJI2cPgUth98eiXyOIcv3Nf51gQ0EMlWko4=)
                          2: F312CFCEA5C711F1B3FC18CECE1D38B0.roa (hash: EFMA6YNMYBhoHPMBTT30p4Lctr0AmQ5qhgphyC0IGSw=)
                          3: BAF5007CA5C611F18A373AC4CE1D38B0.roa (hash: /F1vWOzW0fg+2W1kCzqXuu5VBgL5pobx9VVGHh2FCq4=)
                          4: 7C673F94A2A811F1AA24A8E7CE1D38B0.roa (hash: dxBgg9SKGVOPFMpt363i3eflK4txWh7F49pZpdKEnSs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36250A1AF, serialNumber=6B9A8419B8BCBAE98C4109C5B13F53DC202D9A79
        Validity
            Not Before: Oct 11 05:53:24 2026 GMT
            Not After : Oct 13 05:53:24 2026 GMT
        Subject: CN=6acb2455-a390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:77:ef:61:7e:cd:2d:56:1e:95:e9:c3:ce:2a:
                    70:b8:da:f6:4b:77:e9:16:c4:6e:c1:33:4e:f7:ac:
                    cd:25:39:5a:68:e8:30:7f:23:40:e1:72:ea:b8:a5:
                    2e:17:4e:08:b5:5e:d9:c3:9e:39:7f:c6:6e:c6:96:
                    43:39:24:95:98:59:9e:e5:2f:89:34:b5:9b:a8:1c:
                    44:31:44:08:1a:7d:54:67:7d:a1:fa:05:68:1f:2e:
                    a8:23:5f:18:ad:11:f5:98:55:6e:21:29:3f:8f:cf:
                    f3:29:85:f9:04:1b:42:47:ef:d8:ec:99:df:4c:ee:
                    d7:fc:44:bc:24:67:b7:1c:72:06:08:f0:16:e0:40:
                    e5:0a:9b:b6:79:67:dd:d5:fe:cf:7f:c0:99:ac:05:
                    b4:95:85:9c:b8:72:cd:8c:79:f6:41:1c:36:44:7f:
                    44:e5:10:c3:2f:13:7e:4c:44:04:03:f3:02:9e:76:
                    50:bf:79:f1:bd:c8:44:0f:51:8d:2e:4a:99:8c:90:
                    68:c7:91:9e:6b:43:85:53:82:3a:1d:eb:71:15:15:
                    48:d2:d8:be:16:99:e6:8f:0c:ca:ef:4e:7f:d5:63:
                    fb:9a:7b:93:a2:b5:81:06:8f:3f:84:a5:9f:6b:35:
                    5d:a6:bc:35:2e:5f:5d:d8:4b:cc:fc:e1:b2:5a:86:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:A8:0E:05:BC:CA:B1:60:7F:11:66:2A:C8:E8:C4:58:E1:E7:B7:6F
            X509v3 Authority Key Identifier:
                keyid:6B:9A:84:19:B8:BC:BA:E9:8C:41:09:C5:B1:3F:53:DC:20:2D:9A:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5qEGbi8uumMQQnFsT9T3CAtmnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36250A1/0C146B5EA2A811F18FA880E7CE1D38B0/a5qEGbi8uumMQQnFsT9T3CAtmnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:dd:50:59:df:4c:77:b8:ef:78:6b:60:76:8c:fc:ee:b7:87:
         79:f8:4c:06:63:f7:7a:a8:b7:e4:29:64:cc:3b:a2:55:4d:d5:
         28:99:90:ee:5e:8c:0e:97:68:37:47:44:99:d6:60:36:2e:18:
         35:9a:a4:e9:f2:fa:b7:2d:f5:b3:07:17:c1:a3:85:27:f1:27:
         89:aa:16:54:1f:a3:bd:82:88:ed:19:e2:00:dd:37:c8:0e:03:
         51:33:d2:fa:ba:f1:6b:b7:24:b5:16:3d:11:b5:d1:bf:d2:d8:
         b6:3a:f4:93:0b:3e:d8:47:4e:7d:dc:bc:cd:63:bc:b1:cd:2f:
         2a:0f:90:94:e2:cc:3f:f6:de:b1:62:00:dc:c1:39:03:2b:3a:
         70:d2:7a:b6:a6:e8:9a:b3:64:b1:8e:4b:b5:2d:37:64:9a:f0:
         ec:5d:cb:3d:0b:b2:94:d9:4b:81:9a:46:32:d3:35:34:c3:de:
         27:32:3c:9f:92:e8:cb:fa:ee:a2:a4:b5:a8:30:55:b0:45:3e:
         37:fd:7f:09:17:e8:35:10:fa:c2:a7:ae:ea:80:52:70:56:89:
         f1:f1:00:88:3c:21:80:6d:f4:9b:5c:f4:68:47:49:ef:00:8b:
         5e:c9:7c:c1:2b:72:9c:b5:76:cc:cf:4b:e6:6b:96:c4:6f:84:
         65:4f:5e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----