Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft
File:                     4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft (raw, json)
Hash identifier:          O0SPa1ZZWazy17u8282WL5y9oEf4pj6XkkFcCGWLADw=
Subject key identifier:   1D:1F:28:12:FA:E8:EE:37:5F:2B:3B:FB:CA:A5:B3:76:BA:E0:13:70
Authority key identifier: E0:43:CC:71:14:26:DE:19:A0:D6:14:4C:BE:B2:93:DE:79:B3:82:79
Certificate issuer:       /CN=F368B126AF/serialNumber=E043CC711426DE19A0D6144CBEB293DE79B38279
Certificate serial:       85
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4EPMcRQm3hmg1hRMvrKT3nmzgnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft
Manifest number:          84
Signing time:             Tue 13 Oct 2026 05:40:38 +0000
Manifest this update:     Tue 13 Oct 2026 05:40:37 +0000
Manifest next update:     Thu 15 Oct 2026 05:40:37 +0000
Files and hashes:         1: 4EPMcRQm3hmg1hRMvrKT3nmzgnk.crl (hash: jBUwRTr4RlC3pG9lVoijO7qApG5qPyktgVFTPLurQTY=)
                          2: BFDD710260EB11F1BC4C59C5CE1D38B0.roa (hash: nzHijC1btPOPq+rhPk1w9tV6+iAigyizeq9RqiGh1EI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4EPMcRQm3hmg1hRMvrKT3nmzgnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 05:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368B126AF, serialNumber=E043CC711426DE19A0D6144CBEB293DE79B38279
        Validity
            Not Before: Oct 13 05:40:37 2026 GMT
            Not After : Oct 15 05:40:37 2026 GMT
        Subject: CN=6acdc456-cfbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a7:9a:69:e5:a5:d1:46:98:97:c8:2e:d8:f6:
                    93:6e:13:6e:89:8e:25:ec:2f:42:e4:6d:55:8b:ac:
                    b3:cd:f1:30:c9:da:f1:c7:4a:fe:70:f6:b7:14:39:
                    b2:b8:b3:97:f0:38:23:4c:2d:68:a9:93:2b:55:11:
                    cd:d2:fc:25:ad:de:cb:50:1d:8d:3d:c8:67:43:fe:
                    92:63:aa:c4:b9:97:ec:da:b5:cd:dd:34:8c:74:33:
                    37:e9:57:6f:b7:07:f6:d2:bd:dd:3e:34:bc:43:fb:
                    e6:0c:d3:cd:7d:f3:98:44:24:82:70:2d:63:26:05:
                    0b:01:8b:a6:1f:08:93:f2:0b:73:96:dd:81:07:42:
                    1e:ac:06:8b:96:f6:73:9b:de:28:11:6b:41:c7:f5:
                    64:d0:e8:c6:a9:ab:5b:74:55:b9:70:eb:8b:ce:95:
                    02:8e:d6:4b:38:21:05:a7:d4:cc:fc:7e:41:89:36:
                    31:95:95:c7:8f:ad:77:db:44:ad:7e:bd:6e:a3:91:
                    ff:d9:0e:94:6e:9e:d5:dd:42:f8:6b:b6:6a:72:be:
                    a4:00:7b:10:cc:dd:d9:d6:69:be:b9:3b:cc:37:54:
                    8b:c0:3a:b6:a5:e3:ad:f3:72:7b:ce:a6:79:e7:39:
                    1e:0d:65:cd:1e:72:7a:84:37:f5:ed:84:88:58:61:
                    d2:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:1F:28:12:FA:E8:EE:37:5F:2B:3B:FB:CA:A5:B3:76:BA:E0:13:70
            X509v3 Authority Key Identifier:
                keyid:E0:43:CC:71:14:26:DE:19:A0:D6:14:4C:BE:B2:93:DE:79:B3:82:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4EPMcRQm3hmg1hRMvrKT3nmzgnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368B126/3678BC0660EA11F1865AE3BCCE1D38B0/4EPMcRQm3hmg1hRMvrKT3nmzgnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:68:6d:ad:3e:86:f6:7b:99:ae:64:7d:ca:8b:c2:02:76:a5:
         34:5e:6e:91:df:df:87:ba:69:6c:29:a1:df:6e:e5:d8:d7:37:
         ad:3d:21:33:6f:19:9d:07:94:f4:7c:7b:e3:92:36:5f:0e:7e:
         13:79:8d:c0:1f:62:8b:13:56:47:26:43:47:9f:2c:6a:e7:13:
         60:e4:ba:43:04:8b:45:45:b2:d6:44:b9:48:49:35:e4:73:12:
         8b:2c:89:7a:41:cc:ab:84:39:0c:e8:28:1c:f0:6a:83:ff:7b:
         28:d1:29:aa:93:e1:c6:69:65:92:96:49:c3:ee:21:89:81:76:
         8f:4d:49:ce:55:8c:04:7c:21:a4:9f:af:f6:03:2f:f4:04:d2:
         49:f2:64:11:b2:09:56:42:90:87:5c:43:fb:44:f3:cd:64:a1:
         93:0d:4a:2e:d2:27:6f:d6:72:86:29:ba:ba:88:a5:80:fe:6d:
         b4:da:7f:79:00:42:2d:55:f1:89:a7:9b:8e:7b:0a:07:1a:c0:
         da:35:1c:c7:c6:21:b3:87:22:bf:f8:f3:03:dc:0b:33:ca:ee:
         9b:03:07:dc:42:8e:9a:51:a5:36:67:b8:cd:80:f8:f8:f2:72:
         e5:ba:03:2b:ff:42:32:4e:2c:c4:44:f6:7d:6a:5a:f4:4e:f2:
         c0:4f:9e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----