Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
File:                     hPAfwzjdLBQepF0xeyEfds9dABU.mft (raw, json)
Hash identifier:          IuDc1ubJSFefKFQ4aRYYRmoQnldLVLm92NJIQP9dlB4=
Subject key identifier:   C1:8A:9C:C3:7F:A7:A3:97:4E:C7:5D:3C:31:BC:8B:D3:DC:0B:A5:15
Authority key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
Certificate issuer:       /CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
Certificate serial:       0346
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
Manifest number:          0344
Signing time:             Fri 09 Oct 2026 04:17:59 +0000
Manifest this update:     Fri 09 Oct 2026 04:17:59 +0000
Manifest next update:     Sun 11 Oct 2026 04:17:59 +0000
Files and hashes:         1: hPAfwzjdLBQepF0xeyEfds9dABU.crl (hash: +RCJPToTyGX1IMjLUm08RHLV0l8pNQYgrE/NN4nQqhc=)
                          2: D2DEEBB23F6111EF86F2D8A2762E951A.roa (hash: AlCe+r5bA6wxPrWSPJ60MOFRAHZSRAZJTKh0IUzq6Is=)
                          3: A69C50CE3F5E11EF9DDD6C8C762E951A.roa (hash: 80ny1NpqsV9rSVRUHTW3nCJZGXl2CugmUA2kHB+WbzU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 04:17:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1AF, serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
        Validity
            Not Before: Oct  9 04:17:59 2026 GMT
            Not After : Oct 11 04:17:59 2026 GMT
        Subject: CN=6ac86af7-1ec6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:60:ef:23:f8:8f:f5:f1:d1:32:5a:a6:53:95:
                    f2:66:24:5e:a0:99:38:4a:4d:9f:ef:ee:bb:33:81:
                    3e:44:6d:ea:77:cc:ba:79:c4:60:fd:15:60:5f:81:
                    29:6f:b4:7a:7e:26:f4:56:7f:e6:55:6b:48:bd:d1:
                    ce:1d:d8:05:2c:8b:7b:d0:8a:02:89:92:52:ad:8f:
                    e8:9a:19:7b:86:b4:6d:32:84:9a:f7:a0:4e:61:92:
                    20:33:07:82:fd:a3:db:ea:fc:dc:c1:b2:a8:b7:b7:
                    71:1a:13:c6:92:72:f1:5e:6b:6f:2b:ac:c7:9a:1d:
                    ec:2c:67:64:12:5e:f8:e9:1c:17:4a:f7:74:6a:d0:
                    ee:63:e5:61:0d:a0:e8:2f:2b:82:95:67:f8:d5:46:
                    ba:ed:f5:8a:ac:c0:3b:88:3d:90:0f:3c:79:b1:49:
                    b3:27:81:cb:e2:6b:1f:80:b3:e4:46:ad:77:2d:c2:
                    6c:98:84:68:45:c8:28:b3:ff:0a:6d:0c:4e:0f:c2:
                    da:7e:92:3a:ab:6c:8a:a7:4e:75:77:03:8e:07:61:
                    a9:12:31:22:06:47:1a:59:c8:46:e0:b7:75:26:38:
                    23:d1:1b:0d:5e:3c:86:6e:e8:fb:21:8b:ca:61:1d:
                    89:99:b0:b1:54:10:18:48:a9:da:e7:d5:94:de:54:
                    d5:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8A:9C:C3:7F:A7:A3:97:4E:C7:5D:3C:31:BC:8B:D3:DC:0B:A5:15
            X509v3 Authority Key Identifier:
                keyid:84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:c1:de:1e:7e:3f:f9:c0:63:39:69:c9:1d:27:28:29:eb:5c:
         62:3f:63:55:34:47:0a:b6:20:20:0d:d5:84:da:71:84:6e:97:
         0c:e7:92:80:68:84:d3:cf:df:9a:18:b7:48:a5:ee:bc:43:5e:
         1a:96:6c:25:1c:d3:d7:cc:a5:ca:fe:38:e3:d0:7c:44:0e:82:
         84:cd:8a:4a:16:59:7d:e8:f8:99:a3:5b:57:73:e8:29:fe:b3:
         4b:d2:c7:54:a8:98:4d:59:e4:90:16:79:14:42:17:5a:4a:29:
         d3:c6:8a:28:9f:04:df:12:4f:10:29:13:a9:f7:3c:b1:f9:66:
         18:6d:a3:2b:9e:73:12:00:88:91:84:f5:a6:c0:4b:df:9e:78:
         43:36:d8:92:42:a9:35:08:f0:f8:4d:34:94:45:2c:0a:d0:dd:
         35:fe:d1:ea:52:e3:6c:3c:0b:36:1e:47:cb:c2:2b:63:bb:d3:
         df:cc:43:c7:9f:bd:98:4b:55:60:3f:7e:85:08:ba:9d:e6:89:
         13:06:19:85:a0:9b:c5:e1:bd:9b:b8:eb:55:78:22:ee:7c:18:
         20:de:f9:a9:4a:92:a7:44:76:a0:e6:7b:d0:9b:eb:e3:dc:e8:
         bd:f1:44:de:fa:38:99:9b:01:42:76:86:61:db:fb:49:1e:b2:
         a0:35:ec:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----