Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
File:                     kgRBKh8SvNXSs845kazvaXbIhl4.mft (raw, json)
Hash identifier:          u9R9ubNzMwgVDgM+iN26pj8LQd2RfYWot6zmASPApRs=
Subject key identifier:   D4:EC:2E:DE:B5:65:9B:E7:59:97:C6:9B:91:89:10:DE:B1:95:13:8D
Authority key identifier: 92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E
Certificate issuer:       /CN=F3647FF0AF/serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
Certificate serial:       05FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
Manifest number:          05F9
Signing time:             Sat 03 Oct 2026 02:57:48 +0000
Manifest this update:     Sat 03 Oct 2026 02:57:47 +0000
Manifest next update:     Mon 05 Oct 2026 02:57:47 +0000
Files and hashes:         1: kgRBKh8SvNXSs845kazvaXbIhl4.crl (hash: Y5YjACC14QWHQ6eFljjA8JxIuXNpVi5ldwNqIIzr6DE=)
                          2: C1B630EE8D6B11F08834F6ACDAE4EC9C.roa (hash: dgSYZC5D+KjnOh21ksdGPfjeg//i1eX1fXXuJxMe2OM=)
                          3: 401D27E081C711F0830BC9C9DAE4EC9C.roa (hash: nJPUmahtOqiPFAxwPDfnodDi2p2b719GESj2IRhzuSA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3647FF0AF, serialNumber=9204412A1F12BCD5D2B3CE3991ACEF6976C8865E
        Validity
            Not Before: Oct  3 02:57:47 2026 GMT
            Not After : Oct  5 02:57:47 2026 GMT
        Subject: CN=6ac06f2c-604f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:58:5d:6e:e6:3b:2b:b3:8d:48:5a:ae:45:c3:
                    c5:b1:ce:05:aa:c1:4b:4d:93:86:d5:38:35:a8:54:
                    97:cb:a7:d7:59:b9:b4:6a:a4:f4:9a:08:4c:8e:a9:
                    cc:23:e6:af:fa:aa:2d:b4:0d:fd:66:88:c4:9a:60:
                    31:d3:fa:f4:5e:82:c9:af:5a:e4:3d:e6:32:ac:ac:
                    d3:a3:33:1e:7c:9d:7f:94:91:e5:66:81:8b:09:cd:
                    33:1b:81:ab:12:b6:db:70:82:9c:7c:d4:9c:6b:ae:
                    50:78:1d:9a:d4:72:c9:1c:be:49:d6:df:7f:f0:c1:
                    98:35:ea:8f:8e:e8:e6:9f:7e:24:13:81:c0:ba:32:
                    32:3a:29:8d:0a:bc:38:2f:4d:d2:95:1a:94:af:17:
                    76:08:ef:ec:af:f3:1f:e9:a1:09:72:a4:55:80:46:
                    69:e5:c4:9a:c3:98:cf:5f:eb:45:ee:89:a2:1e:a2:
                    15:04:d9:ef:88:cf:46:bd:06:c0:b5:56:3f:1c:06:
                    11:d1:98:83:75:32:ad:3e:c4:67:54:ce:49:87:c3:
                    fc:88:97:61:bf:b8:7b:21:ef:03:73:5e:bc:36:2c:
                    22:2f:94:85:8d:5d:b2:50:d5:f3:b3:d6:cf:56:0e:
                    46:69:09:38:c1:b8:6c:cc:e8:dd:2a:5d:d6:91:57:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:EC:2E:DE:B5:65:9B:E7:59:97:C6:9B:91:89:10:DE:B1:95:13:8D
            X509v3 Authority Key Identifier:
                keyid:92:04:41:2A:1F:12:BC:D5:D2:B3:CE:39:91:AC:EF:69:76:C8:86:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kgRBKh8SvNXSs845kazvaXbIhl4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3647FF0/A28AC10A32A911EDA4E5C9DCF1222468/kgRBKh8SvNXSs845kazvaXbIhl4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:6f:bc:58:19:38:46:92:89:0d:0b:e1:59:ec:04:10:7b:f1:
         64:ef:d4:5d:77:89:5a:fd:30:24:3d:02:b4:c5:b3:99:30:d8:
         ee:66:01:5a:a3:8f:b5:a7:3f:db:d8:12:ac:eb:9b:a5:0b:b2:
         ae:75:59:35:2e:17:cb:13:6c:b3:70:75:e6:79:c7:11:a9:27:
         38:d5:cf:b2:64:6d:74:2f:3c:03:62:5e:d5:d1:44:4b:32:db:
         18:a9:c2:15:ee:44:3f:8b:61:04:4f:47:df:0f:32:3e:59:b5:
         ec:37:d7:e4:88:f7:f5:32:60:63:41:72:f5:64:d5:b1:9b:6f:
         9d:f7:ea:ba:d3:96:18:74:e5:be:e2:dc:37:28:6b:88:66:6d:
         2f:4e:26:d7:0b:cb:d5:03:cc:90:ad:6b:09:6a:33:02:e1:3f:
         a9:b0:b8:9e:aa:82:53:95:d3:9e:8d:11:14:e2:9c:73:ec:73:
         3c:4b:2b:20:01:7e:0f:6e:ad:0a:17:48:24:a7:ba:39:79:be:
         b0:01:db:11:50:7d:a9:77:55:28:9d:8c:87:48:88:96:d6:18:
         93:f9:27:b5:70:62:c9:db:5d:b9:1c:d7:1d:ea:f1:1d:52:f6:
         dc:a2:31:57:c5:e4:e2:74:56:8b:ec:78:ec:a9:60:81:7f:fd:
         a1:b4:2a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----