Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
File:                     9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft (raw, json)
Hash identifier:          EONZQFWFhFkwBC06inuFFtUq11r3gy62mZ0pxBONlEU=
Subject key identifier:   C5:58:C9:6F:9C:C0:0A:76:09:87:B7:53:ED:AE:A2:F0:A0:BA:28:AD
Authority key identifier: F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5
Certificate issuer:       /CN=F3656BB8AF/serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
Certificate serial:       0464
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
Manifest number:          0459
Signing time:             Fri 30 Oct 2026 03:50:23 +0000
Manifest this update:     Fri 30 Oct 2026 03:50:22 +0000
Manifest next update:     Sun 01 Nov 2026 03:50:22 +0000
Files and hashes:         1: 9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl (hash: UVBb7eyVKuDVLiIhl/xwS12ickdqM99gGUGD8/SlDOU=)
                          2: 771608343F6511EFB9F4EABA762E951A.roa (hash: 9Q+GZAt0BfDQgU00GMZWd99zLhXCbOr7gAEaYiC7Dyo=)
                          3: 5A705AB83F6511EFB113C3BA762E951A.roa (hash: 46y6LOxfLG2hpzs8KqldDqb+T4CZAqoGN7kv9ge6l2Q=)
                          4: C37677449B4211EE97C01A0BD25BE465.roa (hash: BAmmlnMHUybbiPHqjjkYtKpac8mib54JfOVw/2b2OnA=)
                          5: 9C2FB4D49B4211EE82B8CF0AD25BE465.roa (hash: RKm1ONyaKM8MZ2trCs9RLFoAoaY0CDYQpfQjdSvu7io=)
                          6: D91B9FD2905311EF97DBC8B6762E951A.roa (hash: //pQLXl186UK+YngQ4Oqc4YBM5xFv+Ww/aM3Yp8J0R4=)
                          7: ACB50F14905311EF9F4DCCB4762E951A.roa (hash: 57inawtVdw1IaHCvXR36yukcxfO3Teh83tMpkhTAd4M=)
                          8: 5AA6ED769BE611EE88684334D25BE465.roa (hash: J9soXt+A2SzJz6ium1VPFEErWV44KnKWZA3DTIrB3Z8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 01 Nov 2026 03:50:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1124 (0x464)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656BB8AF, serialNumber=F67066439ACD9EAFD4899FC68C6075C70CE39AD5
        Validity
            Not Before: Oct 30 03:50:22 2026 GMT
            Not After : Nov  1 03:50:22 2026 GMT
        Subject: CN=6ae413ff-9103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3c:7a:5e:f3:08:47:78:d8:b1:97:5d:89:5e:
                    73:5f:c9:96:21:08:43:68:ec:14:cf:91:6d:f4:2f:
                    07:31:b4:72:2d:a5:89:ca:9b:a2:e8:9f:c1:64:ab:
                    29:34:22:84:07:8f:5c:45:bd:7c:21:a5:8b:b0:46:
                    c9:56:81:83:e3:cc:8a:15:fb:b7:5a:52:21:43:a8:
                    d6:48:ff:e2:8a:93:8d:82:7f:b9:f5:55:74:82:23:
                    0e:7d:7a:18:d2:60:f1:36:dd:0b:8c:e1:71:16:76:
                    48:3f:76:f4:89:4d:07:29:c2:a9:ce:ba:b6:7e:59:
                    4c:b5:f9:a5:49:1a:4f:9b:c7:59:5e:77:9d:6f:40:
                    92:99:58:90:ad:4c:0e:6f:33:9d:79:42:f7:f3:e9:
                    1e:45:db:f0:8d:69:69:2d:50:57:70:70:7a:46:80:
                    56:f7:3a:9b:2d:1c:73:e0:ef:14:c5:df:bb:e8:f9:
                    0e:37:e6:c0:da:5d:06:34:5f:9f:5a:3d:c2:6c:55:
                    81:f3:69:b8:5f:a4:92:27:cf:70:06:2a:87:68:c8:
                    b4:1e:28:54:7f:cc:7f:2d:1f:e7:7e:49:02:7c:8a:
                    df:69:b4:08:3a:d9:62:37:c0:c2:f1:ad:bd:9a:ab:
                    ce:bf:ea:ac:5c:ab:08:ad:70:6e:f8:80:7e:8b:2f:
                    5c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:58:C9:6F:9C:C0:0A:76:09:87:B7:53:ED:AE:A2:F0:A0:BA:28:AD
            X509v3 Authority Key Identifier:
                keyid:F6:70:66:43:9A:CD:9E:AF:D4:89:9F:C6:8C:60:75:C7:0C:E3:9A:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656BB8/D79EEB94891C11EEAF65C7604AD9E6FC/9nBmQ5rNnq_UiZ_GjGB1xwzjmtU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5d:b3:24:47:75:13:a8:f8:54:e7:d9:2f:62:53:f3:7f:3c:
         43:b4:1c:a8:bb:b2:ae:44:1d:7c:9e:7b:af:2c:e8:e0:37:49:
         aa:2c:79:01:94:48:d3:89:79:c9:15:36:78:bf:bf:ce:55:37:
         44:e7:dc:ba:7a:8a:f7:9d:1e:d4:55:d8:26:e8:01:2d:66:68:
         c8:2e:c6:82:ed:9c:4d:07:80:ee:db:f7:15:e0:0b:d2:6e:53:
         58:46:48:6e:65:c8:6f:8b:95:42:e6:45:54:c0:33:eb:b4:ea:
         75:4e:66:b8:21:0d:7c:38:af:30:d3:6b:43:81:96:d3:a1:d4:
         ee:72:8c:03:de:84:13:3f:4a:0d:b9:27:70:4a:9d:43:b2:55:
         50:0f:a9:6e:5c:1f:f0:07:37:0c:e4:aa:9f:a0:c8:7a:70:90:
         ba:c2:af:2e:20:1c:a4:6a:dd:30:ab:ee:ad:ec:6b:1c:38:08:
         40:58:cc:de:e9:75:5b:e6:76:fd:24:5f:76:02:7b:5d:c5:cc:
         ea:a0:0f:d7:bd:da:1b:df:32:67:b0:9e:60:75:61:14:ae:15:
         f6:55:9a:77:74:6c:ca:49:61:dc:fe:46:85:7c:54:a3:63:76:
         ad:f4:9f:5d:81:24:63:82:9a:6f:d1:71:a6:10:e2:fa:6f:51:
         98:cb:28:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----