Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
File:                     -_THz17IYtQtyBCgQwAhG6K3xQg.mft (raw, json)
Hash identifier:          o+9Sds5j6G0WHCqyXbnUZyvVP/Cj6rP6qjA9fDKZkII=
Subject key identifier:   6C:D6:2F:9C:A3:1A:ED:35:BC:C7:CF:D7:52:36:F8:62:BD:6D:D7:B7
Authority key identifier: FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08
Certificate issuer:       /CN=F3658583AF/serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
Certificate serial:       0347
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
Manifest number:          0345
Signing time:             Thu 29 Oct 2026 04:20:29 +0000
Manifest this update:     Thu 29 Oct 2026 04:20:28 +0000
Manifest next update:     Sat 31 Oct 2026 04:20:28 +0000
Files and hashes:         1: -_THz17IYtQtyBCgQwAhG6K3xQg.crl (hash: gIhreB48vrQXP2y6wRWAYeT29B2iR4Fpgg4u+hBO1E8=)
                          2: 77F1FD96F30311F0BB59B0B2DAE4EC9C.roa (hash: 27JN0a34HOJqzg6BUQSCN5NuMTh9XjW2kVc8l5WoK4A=)
                          3: CB2EDEFCF30311F09BBA82B6DAE4EC9C.roa (hash: ByzttdB9J3NGHz1Z3lKqffInl1ohB/rmI07GuVpfCBk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 00:08:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839 (0x347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658583AF, serialNumber=FBF4C7CF5EC862D42DC810A04300211BA2B7C508
        Validity
            Not Before: Oct 29 04:20:28 2026 GMT
            Not After : Oct 31 04:20:28 2026 GMT
        Subject: CN=6ae2c98d-0de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:41:f5:03:42:68:92:97:b6:df:65:bf:49:9a:
                    bc:87:8c:a5:57:73:e8:76:1f:33:23:7b:34:51:cc:
                    fd:89:ba:39:2e:81:9d:ce:ee:85:3b:35:80:ca:85:
                    31:1b:9e:ac:d4:42:87:a4:bc:e5:c0:d8:b9:3c:78:
                    29:62:81:27:80:81:99:48:90:80:34:23:86:16:57:
                    6c:7e:25:15:8b:91:83:ba:3c:be:8c:93:ea:50:60:
                    a7:e8:f7:39:11:74:49:6d:8a:5d:c5:02:cf:2d:de:
                    42:1e:13:f2:df:1e:73:9b:9e:fc:d7:c7:08:70:b8:
                    be:ed:75:af:4b:bd:63:3c:57:8f:ae:8b:60:59:e4:
                    42:f8:c9:22:44:2e:84:55:26:6d:28:7f:98:e8:a2:
                    86:45:29:9f:4d:cf:d5:53:9b:9e:5c:1d:53:3e:a8:
                    89:d4:25:1b:5b:6c:f2:8c:fd:8b:57:94:c2:ac:7e:
                    3e:31:43:14:d9:99:3f:e1:d6:d5:cf:3e:c8:35:c0:
                    d7:ff:a3:45:f7:e9:20:4a:dc:da:67:6d:a8:b1:a7:
                    73:c4:91:47:6b:fb:65:e5:4f:05:2e:0b:8f:14:5d:
                    19:30:17:d8:cc:87:70:e9:eb:70:7d:bd:81:82:4d:
                    6b:35:3e:c0:17:aa:f4:80:54:16:82:53:06:40:ba:
                    c4:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D6:2F:9C:A3:1A:ED:35:BC:C7:CF:D7:52:36:F8:62:BD:6D:D7:B7
            X509v3 Authority Key Identifier:
                keyid:FB:F4:C7:CF:5E:C8:62:D4:2D:C8:10:A0:43:00:21:1B:A2:B7:C5:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-_THz17IYtQtyBCgQwAhG6K3xQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658583/6E5589404E4C11EFB3F067AF762E951A/-_THz17IYtQtyBCgQwAhG6K3xQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8e:2d:0f:05:d9:7f:a1:18:aa:4a:33:17:35:03:69:73:67:
         c7:37:0a:d4:0f:6b:49:f3:d1:2d:e1:b3:e7:8c:fc:4d:22:5f:
         28:7d:da:15:2a:6c:68:ee:6c:16:62:0a:90:5c:19:03:33:cc:
         3a:6a:69:a4:d5:12:ee:b5:ce:13:5a:5d:2d:26:b7:2a:9c:86:
         3c:b4:3c:5d:5a:bd:1b:48:88:4a:1f:06:30:8d:16:52:40:1b:
         76:72:3c:46:76:11:a0:95:fd:f4:a6:9f:f3:44:99:3c:b1:c8:
         9a:b7:67:c0:b1:ba:b7:ab:b9:be:a4:d2:af:fe:a3:d9:62:0c:
         c6:97:8e:86:1b:df:0e:9f:6a:14:d6:e4:84:fe:c2:2e:34:d9:
         80:ef:aa:6b:89:33:46:f9:f7:68:82:a5:4d:3c:7c:8c:ad:18:
         89:ad:26:dd:61:ec:15:94:e4:c6:28:5e:81:68:0e:40:58:9b:
         1f:d6:e9:ca:e3:0e:59:c4:87:f9:25:39:14:e7:ba:d9:88:5d:
         86:e4:56:18:6d:64:cb:99:cc:71:3e:8b:41:1a:a3:98:9b:b7:
         7d:6b:05:d4:4f:63:1c:f1:07:2b:1d:96:d7:d6:29:4c:e1:fd:
         8e:28:8c:a2:50:b0:d7:5b:5a:9c:7a:91:a8:5e:f9:4f:49:14:
         4b:bc:f2:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----