Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
File:                     UJroMu1ribFqno9wWdMQAuvfVRY.mft (raw, json)
Hash identifier:          huDxOttsORSLT6jTXDivdlZFND07BOjBHBPcShIKCVk=
Subject key identifier:   38:2C:34:51:B9:A2:6F:36:F4:D7:20:7B:06:EE:7B:CD:FD:98:8D:A7
Authority key identifier: 50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16
Certificate issuer:       /CN=F3652893AF/serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
Certificate serial:       032A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
Manifest number:          0325
Signing time:             Sun 11 Oct 2026 04:25:17 +0000
Manifest this update:     Sun 11 Oct 2026 04:25:16 +0000
Manifest next update:     Tue 13 Oct 2026 04:25:16 +0000
Files and hashes:         1: UJroMu1ribFqno9wWdMQAuvfVRY.crl (hash: Owuqly1zQsivTeQ9mulP89m+rfA3DonwWQzCtaBH5qo=)
                          2: 25947A965EEF11EFA8CE8E84762E951A.roa (hash: w3FPrtTUNywICvBHUNi6Z9IDVeEht1kgjHG+aqy64j8=)
                          3: 0B46727E5EF011EF8D699F89762E951A.roa (hash: nreAgp5N7RBReJoLfOebgUnXd2HE0IWmlaF+azLEc+E=)
                          4: D1B2AC1C5EEF11EF93C62C89762E951A.roa (hash: vRmvo/WQ/7K1j/7ZFTOcVY6BLEhOIM6uf+eDFKl2Nlc=)
                          5: D2BD519A6F5F11EFB5A556BC762E951A.roa (hash: eDObOCF32CjsmNceS5K7zEOzteA210reg1RT/KbBTaY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 810 (0x32a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652893AF, serialNumber=509AE832ED6B89B16A9E8F7059D31002EBDF5516
        Validity
            Not Before: Oct 11 04:25:16 2026 GMT
            Not After : Oct 13 04:25:16 2026 GMT
        Subject: CN=6acb0fad-d9b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:dc:2a:c3:6b:2b:ed:ed:9b:db:1d:c0:c5:
                    41:e7:ce:e0:98:ac:22:c7:ed:67:43:ac:0f:68:ef:
                    04:f9:a4:6a:2c:34:56:bd:87:f3:ba:9d:79:83:a8:
                    ca:1f:79:88:8f:06:6e:46:6a:98:af:d8:b8:ca:9f:
                    b1:85:b6:96:bc:3b:f8:e8:34:bc:84:1b:f1:13:3b:
                    7e:41:a4:8c:64:73:a7:bd:f7:f4:53:6d:81:c7:8f:
                    21:4f:8f:f0:7e:05:53:e8:7c:54:68:7a:5d:66:79:
                    9c:0a:8e:fa:c6:4c:aa:ed:1e:d1:5c:ec:05:ee:f6:
                    b1:f3:d7:26:c3:70:92:0c:71:d4:5e:55:e0:b0:9d:
                    73:06:be:35:f5:56:18:ee:f3:55:f5:e5:52:2d:77:
                    44:8e:1d:26:3f:23:61:59:b2:cd:78:c1:4d:d6:96:
                    dd:ab:a3:29:f8:03:93:6f:26:b1:59:8e:bc:ca:cf:
                    18:5a:b8:a4:e3:1f:84:92:0b:b6:5a:bc:09:1d:74:
                    43:54:50:df:06:00:7f:91:ad:3b:50:da:fc:9d:71:
                    ec:59:9e:8f:24:03:7f:8d:d7:00:c2:f8:a5:a7:1e:
                    3d:78:89:08:ef:fa:2d:0c:6e:57:04:e3:fb:4f:98:
                    36:aa:fe:b0:e9:15:f9:b6:eb:1c:42:a6:2d:d9:b9:
                    ed:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:2C:34:51:B9:A2:6F:36:F4:D7:20:7B:06:EE:7B:CD:FD:98:8D:A7
            X509v3 Authority Key Identifier:
                keyid:50:9A:E8:32:ED:6B:89:B1:6A:9E:8F:70:59:D3:10:02:EB:DF:55:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UJroMu1ribFqno9wWdMQAuvfVRY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652893/9742A64C5EED11EF8C934379762E951A/UJroMu1ribFqno9wWdMQAuvfVRY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:bd:57:dd:31:ff:a8:53:79:e9:af:2c:88:46:8c:d4:9a:15:
         d5:25:47:f2:a4:5d:10:56:a3:89:18:0e:86:af:2b:b9:ac:bf:
         61:6c:3e:44:68:d7:d8:f5:d8:b5:35:74:75:16:b5:22:06:f9:
         a4:0b:75:95:a5:d6:07:4d:42:4a:df:fa:cb:7f:a1:5b:ca:d6:
         9a:d6:20:f8:a3:84:3c:c3:0b:65:37:27:94:d1:0b:ad:34:95:
         cf:08:cf:a1:a3:b3:aa:c7:35:7d:55:8f:d9:6a:5c:7a:35:0a:
         4e:38:28:c6:08:17:5d:e9:38:32:78:f7:55:0c:4a:d7:1a:3b:
         33:fd:27:60:11:9a:e2:5a:d4:f7:13:8d:9b:14:02:8c:15:7b:
         0c:b8:14:27:f3:37:46:25:74:53:4b:88:cf:bb:87:e6:0f:89:
         3a:60:1c:94:bc:f5:8f:46:2e:3b:a5:33:fd:5a:20:39:bf:53:
         00:2a:6d:5b:db:c2:54:78:68:b7:a6:2d:c7:4e:27:db:e7:a6:
         25:6d:98:b2:3d:07:65:72:39:71:98:a3:5e:f0:ad:fc:73:44:
         e6:3b:ec:bf:97:32:9c:c9:a3:a0:4d:0d:27:7c:4c:84:d9:1a:
         76:c7:e3:fb:51:98:d5:43:8b:67:e8:83:ae:7c:32:92:ad:47:
         ea:47:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----