Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
File:                     zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft (raw, json)
Hash identifier:          DJYqgCT9miZhdc5IYpJXiVojG1W6mCcVr4Zev9gJ4RQ=
Subject key identifier:   0C:95:A4:28:50:E2:07:C0:D7:C2:B0:D6:0B:D9:46:C8:49:5F:33:D1
Authority key identifier: CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
Certificate issuer:       /CN=F36831A0AF/serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Certificate serial:       01AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
Manifest number:          01A8
Signing time:             Thu 05 Nov 2026 05:09:17 +0000
Manifest this update:     Thu 05 Nov 2026 05:09:16 +0000
Manifest next update:     Sat 07 Nov 2026 05:09:16 +0000
Files and hashes:         1: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl (hash: 0NuEX1U8r8CZdW6K3nWtduBl8iu3PO9oaoTyrrYFjQM=)
                          2: E2260ED092F711F0A755CCC9DAE4EC9C.roa (hash: Db2CiRM4uTKtHBAzQvrLoynjynVhOmVsLHGoU4aqlVA=)
                          3: CAA0A8CA92F611F08941CFC1DAE4EC9C.roa (hash: cZYmCRPcuK5aw4+CfGix0WDAzqJ34AZ7hKPsTZ/sAy4=)
                          4: A2111EC092F711F0BD7EB2C9DAE4EC9C.roa (hash: O/Z3Ckngn3+2t7fcmEz+onvx7IwbPvoP3rUMyC0EVL4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 427 (0x1ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36831A0AF, serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
        Validity
            Not Before: Nov  5 05:09:16 2026 GMT
            Not After : Nov  7 05:09:16 2026 GMT
        Subject: CN=6aec0f7d-4190
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:42:49:20:09:f6:13:9e:aa:3e:dd:6b:cb:9e:
                    b3:ec:ca:d2:e4:45:da:b8:b6:ad:53:d2:50:c1:ef:
                    a2:74:a7:03:78:0b:9d:f7:48:cf:5d:81:57:c6:18:
                    e0:55:76:78:f7:f1:4a:02:0a:67:97:3b:94:d7:a4:
                    19:6c:89:cb:cf:8d:c2:df:98:d8:5a:9d:74:42:3a:
                    d4:28:0a:fd:db:4d:38:62:aa:14:27:a6:7f:1c:08:
                    c1:cc:b4:5a:28:3f:6c:bd:78:8c:1e:95:00:8a:7b:
                    e9:37:94:9b:d2:35:f4:b2:10:ea:2a:61:42:e9:7e:
                    bf:07:2a:cc:11:de:3a:f4:73:db:de:c5:75:3c:f5:
                    9c:8b:ea:47:72:93:9a:7f:c7:14:4e:a8:b5:19:11:
                    ad:de:dd:7f:99:74:e5:f2:69:f3:00:50:bf:55:9d:
                    ae:58:1b:66:50:7b:ec:ef:9c:20:c1:c8:f6:01:da:
                    0c:fc:f4:48:65:d9:d4:db:74:17:63:3a:7d:2e:16:
                    02:d2:e2:60:f1:55:fc:44:31:8b:26:28:f5:d1:bb:
                    9a:9b:6f:6d:3f:fd:9e:97:6e:3d:64:6b:f0:3e:da:
                    ab:82:ce:d2:32:7c:d7:87:71:23:2f:6c:01:57:60:
                    db:65:46:7c:02:ea:03:22:03:fe:2a:53:96:27:6c:
                    67:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:95:A4:28:50:E2:07:C0:D7:C2:B0:D6:0B:D9:46:C8:49:5F:33:D1
            X509v3 Authority Key Identifier:
                keyid:CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:38:7c:bd:fb:c6:56:7e:de:0c:39:e4:f8:31:e7:f7:0a:15:
         50:49:b3:bd:0a:d5:28:fd:10:5c:49:c3:c0:8a:8a:a6:9c:ed:
         8a:c1:ef:45:22:1e:8b:23:d8:20:74:30:38:d1:07:66:e2:41:
         d2:46:0d:58:bf:72:91:02:4e:d4:f3:22:6d:48:a6:d6:15:aa:
         92:f5:98:6a:6a:7b:91:ed:48:1f:f0:30:9e:ae:77:2e:2c:34:
         6b:cb:93:2e:d5:ac:6e:33:a1:43:cc:ed:44:96:3f:40:2c:b6:
         4f:54:66:87:31:c2:01:24:fd:2e:1d:a4:40:f7:e3:a5:84:b1:
         d0:52:44:02:50:b0:7f:b8:f8:dd:25:20:c1:73:21:8e:57:f9:
         42:c0:72:b4:12:da:84:a5:73:d2:26:da:22:fa:0c:19:1a:59:
         f6:8b:92:08:01:60:7c:64:45:bd:14:aa:3d:c7:05:1c:01:0a:
         7a:08:75:01:5c:e4:f6:96:89:27:40:2d:04:99:ff:23:56:0f:
         b6:97:bc:19:59:7e:00:11:73:69:d1:51:09:cd:1f:6d:ee:24:
         77:35:ab:6a:3a:55:37:b4:9e:58:17:78:98:39:96:de:ac:30:
         80:de:ee:f1:d1:7b:bc:b0:a0:3b:17:64:e5:40:df:07:27:1a:
         25:03:09:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----