Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
File:                     Sh_na037AXO28xt_NqWpguCNnBk.mft (raw, json)
Hash identifier:          2n20k8gsCGFeXFLgItK7v4p2jQM7d3JK7COsigWUyqQ=
Subject key identifier:   DC:FB:F5:32:55:47:62:E6:17:23:A6:70:73:C7:C2:0E:AE:7E:FC:EE
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Certificate issuer:       /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial:       0907
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
Manifest number:          08E4
Signing time:             Sun 04 Oct 2026 01:54:46 +0000
Manifest this update:     Sun 04 Oct 2026 01:54:46 +0000
Manifest next update:     Tue 06 Oct 2026 01:54:46 +0000
Files and hashes:         1: Sh_na037AXO28xt_NqWpguCNnBk.crl (hash: wEs+d+ynddwfvNqjQaNqvEMh1OEqftXEVaX4I/wIJzc=)
                          2: 17DD0894877211F08B8BA7D2DAE4EC9C.roa (hash: whOLduQqVVvaNHj/zrflF8U3oey5iDbkzbCNZuEmZJ4=)
                          3: F9C82400D97B11EF9B0C96BA762E951A.roa (hash: M9e20X5bFGzfJk5f5uvwTRlfX+u30RyUqYb0LXotErI=)
                          4: B0B04848877111F082E051D0DAE4EC9C.roa (hash: 74qQsA+Ms/dUW8F7lYzjX4TOcPR5wk7mYH0t6ff8jWs=)
                          5: 69691B06B32911F19D1DC1D0CE1D38B0.roa (hash: vK7XUK3u9Wq4n4aCldwnq1lQVYjE9TxqKIXqdg64R9U=)
                          6: FA871C00CF9011F081C8E7BEDAE4EC9C.roa (hash: Qw22VWx53kROqvg7YWX2kY0qe6pgMedjuoyj+qgxaOk=)
                          7: D281CD16877111F0896D7AD2DAE4EC9C.roa (hash: cWLTUW9RzJIuddIOIavrO3/ylPwsJ44raIrYkxapM14=)
                          8: FA451D540E5311F0AD34E842762E951A.roa (hash: v4Hnu/zBr9ZJXzMlo/mymcexhZgGmTK0xB97wv2VfiQ=)
                          9: 27DA075C0E5411F094C60A43762E951A.roa (hash: uSWwhbpaM7heLFZrX193ZEyM5nKa4FeuK+VjWT68aec=)
                          10: F9141722877111F0858E99D2DAE4EC9C.roa (hash: Y+12zI5R5Z7kAuY1RuQtOSmt2tT8o0fgCSk0gO8Ktlw=)
                          11: 3C2CF984877211F0A9B2A8D4DAE4EC9C.roa (hash: PGGmmBj6elL5Cx7UgU1F5kqdSEnECnDaQb7vXaqB20E=)
                          12: 7D6077E4868E11F0AF530F88DAE4EC9C.roa (hash: pUZkioyU/9imSW0EM5QU9OmW3QOk9L2q8xE1jtVTtPg=)
                          13: 48022F76970D11F19B84D7C7CE1D38B0.roa (hash: GPb+oEUk29+9AvfORiOrSL4nV5hr5La8BYm8p5oMGu0=)
                          14: DE56B006B40E11F08B0A0092DAE4EC9C.roa (hash: BeZrjqtTx/d/Uc+fKo5UXnfAqQ+DGhZvKjC4lkw0Bpo=)
                          15: CC57F9FE802911F18C6173B5CE1D38B0.roa (hash: Hckwq9V90vbLABfQHm6j3qtGP+ab2XK8+TXEgPcon/Q=)
                          16: A2715940868E11F08FA82F88DAE4EC9C.roa (hash: E4UOsaNzKSmSmQti7WTsZ5F69ADkj1yaGvZKWgLvBSA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 01:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2311 (0x907)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
        Validity
            Not Before: Oct  4 01:54:46 2026 GMT
            Not After : Oct  6 01:54:46 2026 GMT
        Subject: CN=6ac1b1e6-6269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4b:8c:0d:20:07:ce:89:fa:f0:fd:fa:d0:4c:
                    7b:be:4c:4e:64:d2:67:96:87:24:a6:e4:25:38:9d:
                    e1:31:d4:01:50:3b:6e:fb:7b:c0:f5:aa:5f:f3:e3:
                    17:24:9c:b9:3d:34:43:c8:f6:c2:6c:72:e4:41:59:
                    09:52:dc:19:dc:89:c3:7a:67:ca:f0:39:23:ef:05:
                    d4:94:ee:1a:6a:d6:76:11:ad:04:51:75:64:36:7b:
                    f2:67:a6:29:c1:f7:9c:0d:a9:28:f0:f3:f4:1f:0d:
                    28:b0:3d:5a:b1:57:d8:db:b8:75:7e:5e:be:c8:8e:
                    c1:90:56:7a:34:c4:22:aa:ac:18:81:87:ac:38:66:
                    8a:69:73:cc:96:27:db:2a:63:01:6e:4b:8a:74:e4:
                    ee:f7:b4:cc:25:ee:3a:f3:50:34:2b:f1:25:e9:85:
                    7c:d9:f1:42:60:de:bb:1d:e5:0e:00:25:b3:84:ea:
                    9a:53:be:3f:02:27:5a:d8:05:29:8f:52:57:21:2c:
                    12:28:62:2a:03:17:51:6c:c6:bf:b6:24:02:a6:80:
                    6a:80:ac:42:88:89:3b:39:46:1d:7a:13:55:b3:d5:
                    15:67:2f:28:d4:04:45:6d:7d:3d:82:89:08:b8:b8:
                    22:0e:c8:af:89:84:5e:d3:05:19:17:83:61:1b:c1:
                    a9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FB:F5:32:55:47:62:E6:17:23:A6:70:73:C7:C2:0E:AE:7E:FC:EE
            X509v3 Authority Key Identifier:
                keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:b3:c5:0c:3c:69:0a:b4:66:51:64:a4:88:b8:8c:90:d1:73:
         aa:f6:9c:10:1c:02:4b:90:e6:10:de:91:a3:d9:bd:4e:fe:5d:
         62:d4:97:1d:f3:32:ce:11:8d:46:1b:ad:54:21:45:de:1f:35:
         b4:3e:8f:fd:31:62:a6:7d:ce:9e:78:4c:4a:b1:5d:84:95:68:
         35:4b:92:c3:cb:f9:1a:98:2c:32:19:85:56:e4:b7:43:00:09:
         16:ee:43:10:ba:66:fd:88:7f:c1:22:b6:0a:ee:d6:fd:fc:db:
         c5:52:96:52:84:3b:20:6c:42:70:04:a3:e7:97:38:df:18:f4:
         74:a4:fb:88:1c:70:b1:85:c5:4e:cb:95:c2:4a:29:fb:4a:27:
         9d:e6:21:18:44:bb:ad:38:ac:9b:63:d6:48:63:9d:6b:fc:35:
         23:99:44:eb:1f:79:23:7f:2f:d2:f5:80:70:74:bb:a8:06:ad:
         2f:2b:c8:bd:ce:79:6e:d2:0d:f4:07:00:42:73:0d:4a:2b:d5:
         28:e2:2d:a4:51:40:d8:e7:15:95:28:87:c1:57:f2:95:36:13:
         72:ff:58:c1:a0:c7:cc:88:16:da:79:52:65:e9:d2:1a:a3:53:
         8f:c1:56:0e:de:1a:62:cb:a0:6f:06:d2:b1:7d:d8:34:59:ce:
         c8:41:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----