Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3679C5D/1EA35C903BFF11F18F2AEEE0CE1D38B0/E7Khk2FY9LdNJ05YbKHdOald6TY.mft
File:                     E7Khk2FY9LdNJ05YbKHdOald6TY.mft (raw, json)
Hash identifier:          DXRMEWm2+Hgb2FxuwhUusKhy5DPzBt/pT5jzO5Xmjq4=
Subject key identifier:   32:6E:9B:64:91:5F:46:82:AC:D1:2A:88:F8:AF:69:B9:DD:85:BE:8F
Authority key identifier: 13:B2:A1:93:61:58:F4:B7:4D:27:4E:58:6C:A1:DD:39:A9:5D:E9:36
Certificate issuer:       /CN=F3679C5DAF/serialNumber=13B2A1936158F4B74D274E586CA1DD39A95DE936
Certificate serial:       B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/E7Khk2FY9LdNJ05YbKHdOald6TY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679C5D/1EA35C903BFF11F18F2AEEE0CE1D38B0/E7Khk2FY9LdNJ05YbKHdOald6TY.mft
Manifest number:          B1
Signing time:             Sat 10 Oct 2026 05:36:13 +0000
Manifest this update:     Sat 10 Oct 2026 05:36:12 +0000
Manifest next update:     Mon 12 Oct 2026 05:36:12 +0000
Files and hashes:         1: E7Khk2FY9LdNJ05YbKHdOald6TY.crl (hash: hL+i1avsy374pvBmrEUnWDJJ9hYDriWeA3MPppQUe1M=)
                          2: C84F69DA3C2E11F19351E9FACE1D38B0.roa (hash: JTiyDr+BPnV+iWLl31rjRDSZljo6336haFDyUifLeJ4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679C5D/1EA35C903BFF11F18F2AEEE0CE1D38B0/E7Khk2FY9LdNJ05YbKHdOald6TY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679C5D/1EA35C903BFF11F18F2AEEE0CE1D38B0/E7Khk2FY9LdNJ05YbKHdOald6TY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/E7Khk2FY9LdNJ05YbKHdOald6TY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 178 (0xb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679C5DAF, serialNumber=13B2A1936158F4B74D274E586CA1DD39A95DE936
        Validity
            Not Before: Oct 10 05:36:12 2026 GMT
            Not After : Oct 12 05:36:12 2026 GMT
        Subject: CN=6ac9cecc-575e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:28:b6:03:92:47:db:85:15:11:5b:be:2b:2f:
                    ad:7a:32:47:95:73:8d:d9:3e:db:96:41:5c:ed:79:
                    33:3f:49:61:1d:81:d0:d0:1f:75:28:47:b9:22:19:
                    56:c5:59:fb:59:14:f9:95:f4:7b:cc:bb:47:09:a2:
                    6f:da:af:3b:2b:8b:f2:e7:b6:8e:1a:b5:3a:08:d6:
                    cf:36:dc:63:86:23:34:74:45:22:d2:fb:41:9d:99:
                    eb:17:f2:5d:e3:97:c2:10:2d:33:15:7f:40:03:c6:
                    fb:4d:ce:de:dc:49:68:45:50:61:5d:83:e4:72:49:
                    0c:ce:8a:b9:a4:b0:d6:72:34:06:c8:6e:d5:a5:06:
                    7f:bf:a4:59:ea:b4:83:76:46:db:6d:85:29:31:85:
                    ec:00:f0:12:28:05:55:eb:a8:80:e4:cc:1c:8d:58:
                    13:86:4e:a4:e1:a5:ec:08:9e:aa:d4:f5:79:8e:86:
                    7e:c0:a2:59:06:19:27:76:7c:82:89:8f:21:97:27:
                    18:5a:3d:eb:7c:9a:fb:2e:1b:f3:bf:bd:02:c1:c9:
                    46:54:28:67:71:37:ed:cc:7d:02:c9:2d:e3:7c:af:
                    d2:f1:65:16:e0:f8:d7:83:b8:bd:b3:a4:ab:1a:ae:
                    06:10:e3:19:48:a5:ae:19:d8:2c:69:b5:a1:81:a6:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:6E:9B:64:91:5F:46:82:AC:D1:2A:88:F8:AF:69:B9:DD:85:BE:8F
            X509v3 Authority Key Identifier:
                keyid:13:B2:A1:93:61:58:F4:B7:4D:27:4E:58:6C:A1:DD:39:A9:5D:E9:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679C5D/1EA35C903BFF11F18F2AEEE0CE1D38B0/E7Khk2FY9LdNJ05YbKHdOald6TY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/E7Khk2FY9LdNJ05YbKHdOald6TY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679C5D/1EA35C903BFF11F18F2AEEE0CE1D38B0/E7Khk2FY9LdNJ05YbKHdOald6TY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:be:ae:22:b9:22:03:cb:2f:b1:9a:1c:2d:f2:6a:01:f1:44:
         02:1c:6a:07:5d:17:10:40:cf:85:fa:f2:93:54:66:cc:24:89:
         66:cf:54:6f:e9:3f:33:08:40:2c:7a:3f:9a:8a:ee:e4:8e:15:
         bb:7c:60:eb:e8:33:f4:22:50:06:a4:f4:82:73:dc:82:bc:57:
         64:2b:73:f1:99:70:44:8d:39:b5:f4:19:37:3c:48:f8:6f:03:
         d9:ac:ec:d3:67:44:68:2c:46:f8:e2:39:5f:d7:22:05:6a:5e:
         dc:be:b0:a0:d9:58:0e:ff:d9:3c:a8:87:7a:88:f5:00:09:f2:
         79:3d:57:08:0c:44:ab:d5:5f:c9:88:51:24:06:bd:a1:20:79:
         31:dc:98:91:5f:92:13:a9:5f:1a:77:67:b7:84:79:dc:d9:8d:
         88:20:d8:b1:64:ed:88:1f:e4:54:d2:22:1f:31:e1:f4:a3:48:
         7f:ff:46:27:20:cd:e5:45:a1:c9:22:da:d3:24:a2:c5:13:18:
         4b:49:9b:d6:c8:4d:fe:91:73:b2:c0:a0:41:19:21:f4:36:34:
         36:bc:6b:04:9b:90:32:a0:ca:cb:24:a5:b2:6c:8f:30:08:b6:
         a8:71:b1:d0:10:47:49:19:12:cd:87:f1:17:4c:19:85:9c:4b:
         67:d3:c0:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----