Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
File:                     AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft (raw, json)
Hash identifier:          WTPYPOS7lW2YPNcOjZ9V1r5LO8dDdvoALmHcceE4ZrY=
Subject key identifier:   3D:80:04:BD:84:4C:F8:E2:62:B4:03:CE:52:B3:4B:1C:81:BC:50:54
Authority key identifier: 00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53
Certificate issuer:       /CN=F3695947AF/serialNumber=006E0BE21090792D18356197510AD340EC042353
Certificate serial:       01B3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
Manifest number:          01B3
Signing time:             Sat 17 Oct 2026 05:04:23 +0000
Manifest this update:     Sat 17 Oct 2026 05:04:22 +0000
Manifest next update:     Mon 19 Oct 2026 05:04:22 +0000
Files and hashes:         1: AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl (hash: EtqrOnfDE+W6dZ0sS1/bk+cx8kpUYpt+oNSpWMuRlWs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 19 Oct 2026 00:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3695947AF, serialNumber=006E0BE21090792D18356197510AD340EC042353
        Validity
            Not Before: Oct 17 05:04:22 2026 GMT
            Not After : Oct 19 05:04:22 2026 GMT
        Subject: CN=6ad301d7-278c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:25:b3:47:d4:cd:bb:03:58:02:be:f9:db:79:
                    86:23:9c:a0:97:f3:d7:6f:9d:88:ce:9c:a4:69:9e:
                    82:71:d6:a1:c0:3b:83:b6:b2:63:77:f5:6c:af:c9:
                    ec:c9:db:f7:5d:a7:14:a1:04:01:39:16:68:6c:2a:
                    da:f7:c9:d3:b2:9a:60:d2:f8:c4:37:61:4c:67:50:
                    df:4c:74:70:61:77:13:e4:b0:26:76:cc:64:e8:49:
                    af:b2:f3:14:50:18:d9:ac:c0:c4:c4:68:12:d3:eb:
                    97:bc:84:84:9a:f3:15:d7:5b:9d:f0:f9:a3:73:27:
                    ea:8d:69:ce:d1:cd:f8:15:b5:4e:80:38:c7:e4:f5:
                    9d:1f:26:ef:f7:24:52:85:c0:27:6e:29:12:32:22:
                    58:57:75:72:71:95:82:93:8c:28:64:83:b4:8a:b3:
                    ea:70:49:e3:1b:f5:f7:aa:4c:8c:24:e7:df:09:fd:
                    3a:08:36:2d:db:6c:a7:7f:3e:78:ae:af:41:58:e3:
                    de:f6:70:ed:14:ac:f3:12:1c:47:7b:7a:20:5d:42:
                    c1:4d:b3:27:ab:f2:8f:f7:42:94:9a:01:69:60:8b:
                    99:86:7d:e1:fc:4d:d6:f5:02:7d:b2:fe:8e:70:94:
                    27:9a:f4:f7:05:bc:00:b7:ed:1f:c0:60:0c:36:52:
                    b1:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:80:04:BD:84:4C:F8:E2:62:B4:03:CE:52:B3:4B:1C:81:BC:50:54
            X509v3 Authority Key Identifier:
                keyid:00:6E:0B:E2:10:90:79:2D:18:35:61:97:51:0A:D3:40:EC:04:23:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/AG4L4hCQeS0YNWGXUQrTQOwEI1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3695947/057E5C08784E11F0B3BF327DDAE4EC9C/AG4L4hCQeS0YNWGXUQrTQOwEI1M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:f8:1e:bd:8b:97:b7:bc:9b:7d:7f:71:6e:ca:ac:00:18:f1:
         13:f6:26:d0:ba:6c:69:43:c0:e3:a0:1a:c5:50:ac:11:b6:65:
         28:99:02:78:e7:eb:aa:49:1f:fb:36:a0:31:ad:37:49:1e:28:
         ee:25:18:82:46:12:25:fc:13:e5:ce:6e:65:e8:c8:a7:39:64:
         b8:b2:0d:d0:a1:0a:7c:86:d0:0c:ab:d8:56:eb:0b:a9:37:cc:
         64:d1:fe:0e:8c:78:89:1e:e0:34:e0:f0:d9:71:2b:46:47:b7:
         0a:e6:f5:55:c5:fd:b8:82:73:ad:5d:e9:f0:e9:a5:f8:48:cf:
         35:93:62:14:d4:12:d1:a7:64:d2:ca:6f:3b:e5:29:9e:02:88:
         3b:7c:15:4e:99:c9:71:fd:61:8f:47:cb:24:d3:e3:b8:cb:1d:
         e4:af:b3:f7:47:5b:8f:91:12:6b:e7:97:e5:2d:df:c9:9f:0c:
         27:c7:24:c6:67:f3:ca:2e:10:f7:b9:d9:8d:21:9b:70:4f:51:
         5d:07:af:4a:91:b7:17:fd:c8:31:45:0e:05:2f:82:e1:fc:d9:
         f4:e7:06:ec:77:ed:40:fa:0c:a6:db:31:68:09:f7:99:cb:7f:
         d8:16:50:fd:23:75:56:3b:3a:cc:00:4f:08:33:d3:4f:5c:cd:
         ea:b6:dd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----