Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
File:                     XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft (raw, json)
Hash identifier:          XkmEsGOPJi+TMY+EFaDHtmSQ2T4qDe4d7qWrleCZ0wA=
Subject key identifier:   48:94:0B:6E:2D:16:7A:13:0D:A9:C7:EA:35:47:5C:F7:96:0E:63:9F
Authority key identifier: 5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F
Certificate issuer:       /CN=F3678967AF/serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
Certificate serial:       0995
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
Manifest number:          098F
Signing time:             Wed 14 Oct 2026 01:44:19 +0000
Manifest this update:     Wed 14 Oct 2026 01:44:18 +0000
Manifest next update:     Fri 16 Oct 2026 01:44:18 +0000
Files and hashes:         1: XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl (hash: WpuhG3zyVLg6FNgLz6ztsKzZgqrUFdri+fesRxeBgq0=)
                          2: 77D590F096FC11F1A67B51E1CE1D38B0.roa (hash: N/uAtR74JfNpLcsvPKuPQbec3Fmc8dUXoAgKh+1azoE=)
                          3: 420B22A27D0111F0BA56A0A5DAE4EC9C.roa (hash: FgbgmTnolN1lRJKNhlZr9zZr69rYAV0zr0aJY9PwsCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 01:44:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2453 (0x995)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678967AF, serialNumber=5CAA982C03179326332D6B770A58E8795CB8459F
        Validity
            Not Before: Oct 14 01:44:18 2026 GMT
            Not After : Oct 16 01:44:18 2026 GMT
        Subject: CN=6acede73-ea4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a5:0e:3e:a1:73:8d:67:94:4f:a2:62:a6:ad:
                    3a:af:95:61:5e:14:7f:91:39:9c:1c:6c:45:a7:bc:
                    f4:17:43:aa:c5:b7:ae:43:bf:93:6c:a2:67:6d:5e:
                    ef:b5:6c:16:eb:f2:d7:de:54:be:e3:14:8b:6f:98:
                    5a:1c:a3:0e:bd:a1:7d:75:87:23:e4:7f:bd:5d:fb:
                    af:df:2b:2f:86:83:70:d3:d6:7a:20:a7:64:e6:c2:
                    2a:80:b6:09:98:98:61:cc:ed:85:f8:93:9c:4d:13:
                    a0:26:aa:fe:84:f4:cf:bb:9b:da:de:2b:42:42:c3:
                    90:dd:39:ec:07:55:f6:6f:c9:0c:fd:2e:03:72:e8:
                    d4:c9:c8:b2:86:12:09:c6:2e:4e:c1:65:a0:32:59:
                    40:e1:d7:16:8b:18:54:4c:59:c5:43:09:fa:ec:2f:
                    d1:c4:47:76:50:54:5f:3c:94:6d:0c:75:f3:22:50:
                    4f:0c:10:25:a0:ab:98:45:24:75:06:aa:6a:96:d0:
                    e5:6e:98:04:ce:b4:6d:ec:86:27:e0:e4:98:a4:47:
                    a8:42:1d:6d:f8:09:a6:ef:d6:c6:1b:89:5d:01:54:
                    af:fb:0d:2e:63:f1:66:80:c9:41:c7:5e:a7:6e:22:
                    51:c3:fa:54:75:b4:5e:ad:55:83:f6:18:3d:d1:39:
                    20:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:94:0B:6E:2D:16:7A:13:0D:A9:C7:EA:35:47:5C:F7:96:0E:63:9F
            X509v3 Authority Key Identifier:
                keyid:5C:AA:98:2C:03:17:93:26:33:2D:6B:77:0A:58:E8:79:5C:B8:45:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XKqYLAMXkyYzLWt3CljoeVy4RZ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678967/4AA442F478D911EA9A80955CF8AEA228/XKqYLAMXkyYzLWt3CljoeVy4RZ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:de:02:f9:aa:38:db:b4:5a:fc:65:9c:0a:fe:26:ad:ee:5e:
         8d:bb:14:8f:4e:ae:db:19:11:8e:31:42:48:eb:bf:ed:fd:aa:
         9a:e9:18:29:b2:47:b0:88:fa:82:34:7b:79:63:89:ab:be:b1:
         e7:0f:af:bf:6e:0e:1c:16:f7:26:eb:46:89:8e:e8:69:28:d9:
         e1:bf:78:1d:cb:a0:a3:59:6e:fa:ec:f1:2d:c2:02:32:5e:7e:
         17:ac:1e:a2:b0:99:cf:ca:4a:6e:57:f4:e9:7d:ef:86:47:44:
         3c:d7:3f:0a:7f:0b:43:35:43:d4:9c:b0:e5:59:68:5c:44:9a:
         3a:84:8a:59:ed:55:49:90:52:84:a7:b1:90:0b:f2:46:61:f5:
         30:d1:1c:58:9a:22:8b:c5:db:c4:5e:f0:85:23:5c:b1:ef:fa:
         8e:d1:17:3a:3c:9e:84:8a:69:c3:8f:df:62:86:1b:3a:7b:e7:
         d0:df:31:b5:94:ca:0f:13:39:7b:aa:40:1b:11:88:80:db:38:
         d5:8f:1e:b6:57:61:03:96:45:bb:a2:b2:7a:f8:49:73:e0:cf:
         09:f3:69:30:a5:d9:7d:b1:02:c1:25:03:a3:be:80:68:d7:bb:
         ca:b9:49:72:df:1e:46:2c:ca:06:95:52:6f:e5:e2:db:16:e9:
         62:0e:43:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----