Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
File:                     cHofKGrimG32SRDDA05RiafCFt0.mft (raw, json)
Hash identifier:          NtkNPqV6IYS/7X7nzWav154WI/uCZic5ugadbHPQKZY=
Subject key identifier:   8B:C0:08:7A:A6:56:CD:0C:F2:18:54:AD:75:95:32:AD:9E:F1:A5:88
Authority key identifier: 70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD
Certificate issuer:       /CN=F3644DAEAF/serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
Certificate serial:       082C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
Manifest number:          0826
Signing time:             Tue 13 Oct 2026 02:04:23 +0000
Manifest this update:     Tue 13 Oct 2026 02:04:22 +0000
Manifest next update:     Thu 15 Oct 2026 02:04:22 +0000
Files and hashes:         1: cHofKGrimG32SRDDA05RiafCFt0.crl (hash: VP6K5J9WWjHcYSl3oZUoS7+C7zgwY3RO4ygTkHDtpiY=)
                          2: 9B99DDBC8C3D11F185844CA1CE1D38B0.roa (hash: KokIk2KULECc1dFtONKHV+dFBQMWcKtBPAeRS7FVdiQ=)
                          3: 50D8D0088C3D11F191A5F11DCF1D38B0.roa (hash: IBM2C6jsoHdsOf5q7FavB/zdwqJP1c7Zo2tcyx9bIiI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 02:04:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2092 (0x82c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DAEAF, serialNumber=707A1F286AE2986DF64910C3034E5189A7C216DD
        Validity
            Not Before: Oct 13 02:04:22 2026 GMT
            Not After : Oct 15 02:04:22 2026 GMT
        Subject: CN=6acd91a7-2a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:c2:8a:8b:56:3f:4a:0b:ec:79:fd:8b:1b:
                    35:85:ad:f7:78:73:a1:e6:04:33:01:71:02:72:56:
                    59:6c:6b:0f:e8:9d:61:b8:3e:58:0d:86:db:dc:48:
                    fa:9d:bb:06:b7:ab:e0:61:1d:a2:00:f9:d1:72:e4:
                    a8:58:27:9a:9e:2a:89:f0:30:ee:ea:6f:30:4d:fd:
                    86:a6:3e:3e:b2:59:1f:74:da:f0:4c:3e:b9:22:49:
                    e0:ba:7d:d7:b3:0f:1e:e4:f3:49:ce:f4:70:9e:a0:
                    ed:07:74:2b:ea:93:b8:77:0c:51:7e:bf:a9:ee:4d:
                    59:c4:e0:57:02:cc:f7:12:4d:36:4e:75:39:3f:89:
                    33:8a:cb:47:7c:92:da:52:98:a8:50:9b:16:df:65:
                    b4:ef:97:3d:0e:f3:93:89:35:82:9a:6b:7a:19:ad:
                    9d:d0:01:95:b5:17:b5:55:a9:41:bb:24:86:66:a0:
                    2b:1b:e9:45:38:43:30:2d:9b:32:8f:c9:cf:8d:ea:
                    d6:19:b7:bc:d6:cf:b2:88:dc:6a:ed:c6:4a:f3:48:
                    c4:90:a7:eb:82:96:12:91:66:c8:c0:0a:6d:45:d1:
                    7b:73:81:5d:1e:d5:9b:ce:bd:e3:d9:ca:1d:6b:aa:
                    75:34:39:00:94:4f:7a:14:65:af:80:5e:6b:cd:be:
                    9e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C0:08:7A:A6:56:CD:0C:F2:18:54:AD:75:95:32:AD:9E:F1:A5:88
            X509v3 Authority Key Identifier:
                keyid:70:7A:1F:28:6A:E2:98:6D:F6:49:10:C3:03:4E:51:89:A7:C2:16:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cHofKGrimG32SRDDA05RiafCFt0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAE/F71E7654970411EBB9363730F8AEA228/cHofKGrimG32SRDDA05RiafCFt0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:9b:be:c7:37:75:26:d7:49:8b:fb:0c:37:df:83:45:50:9f:
         fc:d7:0f:cf:de:fa:67:0e:b2:25:f7:f5:f8:c0:54:55:23:cb:
         20:32:e7:32:fc:1e:6f:c3:2f:c3:1d:ab:01:ab:bb:6b:49:9f:
         c7:87:be:95:97:84:9f:5b:17:75:d3:e3:ca:e5:fb:a9:a9:b5:
         6d:9d:93:b2:2c:35:05:26:5e:fb:b0:85:5b:35:f5:43:af:70:
         cf:5e:d9:28:b6:b5:99:5e:f2:a1:7e:25:17:7b:b8:4e:62:96:
         a8:77:62:2e:ac:56:bb:9a:e7:38:ae:e6:10:a4:e7:25:03:b0:
         b9:fb:fd:75:e3:76:25:0d:35:7c:09:6a:1c:66:9f:e5:12:0a:
         50:3c:76:55:f3:5d:4d:41:fb:34:a1:fd:de:b3:ea:07:23:ef:
         e1:01:fd:0a:99:13:73:23:88:4a:30:6a:87:5c:f8:59:da:a3:
         52:17:ee:07:a9:1b:73:56:d7:00:6c:52:3a:70:12:c8:c3:7d:
         36:84:cd:70:04:de:8b:86:31:7a:50:9f:1a:bd:32:51:94:83:
         cb:bb:2b:bb:65:b3:37:bc:ca:d3:30:a3:18:53:36:06:4c:cb:
         2e:03:b8:81:5d:bd:f2:04:02:e9:e2:14:84:bf:50:b3:9d:f0:
         53:37:8e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----