Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
File:                     I78EX4uOm-g4553TEsyV7LjMYQs.mft (raw, json)
Hash identifier:          uGA9AVufcveE5a8/y2CDcvVXCKdeuCuovWGJfGaukfc=
Subject key identifier:   27:C8:D3:CD:BC:B8:BB:05:5A:33:86:57:C3:F2:D3:F5:1D:FD:6A:90
Authority key identifier: 23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B
Certificate issuer:       /CN=F369671EAF/serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
Certificate serial:       0AFC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
Manifest number:          0AED
Signing time:             Wed 14 Oct 2026 01:21:31 +0000
Manifest this update:     Wed 14 Oct 2026 01:21:30 +0000
Manifest next update:     Fri 16 Oct 2026 01:21:30 +0000
Files and hashes:         1: I78EX4uOm-g4553TEsyV7LjMYQs.crl (hash: pF/4P1mcknqr4QXLLn+M/r9s6Xj0i/XgvAEozqaWnwM=)
                          2: D8C79F3E1B8211F18515F8AADAE4EC9C.roa (hash: mvotxfQuCAYVtuvZF60nRPCy3L7GuZHseVrsuaXjoeU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 01:21:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2812 (0xafc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369671EAF, serialNumber=23BF045F8B8E9BE838E79DD312CC95ECB8CC610B
        Validity
            Not Before: Oct 14 01:21:30 2026 GMT
            Not After : Oct 16 01:21:30 2026 GMT
        Subject: CN=6aced91a-d686
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a6:fe:85:17:f1:8d:1b:da:8e:8c:a7:26:22:
                    e7:91:cf:8d:06:66:88:4d:55:81:c5:66:3f:40:59:
                    82:0d:34:6e:93:ce:f4:a1:b5:ff:bd:ec:05:16:2f:
                    7a:c7:dc:3b:dd:35:8f:58:cd:dc:3b:08:88:1a:44:
                    37:10:c0:45:7b:53:01:62:f3:36:a4:c9:80:13:d5:
                    07:d6:59:94:4d:a6:6a:69:99:c5:49:63:64:87:4c:
                    74:bf:b3:e0:e6:31:10:ef:bf:e2:fd:ba:51:f6:fa:
                    92:b0:d4:f0:e9:0c:08:21:48:19:3b:8d:42:3d:a7:
                    6c:14:bb:c1:22:4f:a6:e1:75:7a:27:68:89:fd:dc:
                    ea:56:2c:fe:ba:56:b5:e9:a3:41:6a:68:29:39:2b:
                    ff:80:71:57:76:b6:0a:f4:f4:c5:a6:67:5c:b6:f1:
                    d6:4b:c9:91:55:85:35:ed:7e:91:a3:6c:96:65:d7:
                    3b:a3:a8:4e:2e:31:a9:b1:cd:26:af:92:36:c9:34:
                    41:52:20:37:b8:12:87:b3:54:ad:5b:37:67:f2:5f:
                    0a:f7:6c:b5:0d:5d:de:ca:f4:35:78:7d:84:11:1f:
                    ab:5a:6c:47:21:52:7e:43:31:de:04:12:dd:79:6d:
                    e8:fb:de:d9:df:f2:7e:37:42:8a:4b:e6:f3:ed:06:
                    39:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C8:D3:CD:BC:B8:BB:05:5A:33:86:57:C3:F2:D3:F5:1D:FD:6A:90
            X509v3 Authority Key Identifier:
                keyid:23:BF:04:5F:8B:8E:9B:E8:38:E7:9D:D3:12:CC:95:EC:B8:CC:61:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/I78EX4uOm-g4553TEsyV7LjMYQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369671E/B069B1587BB111E99DBED243F8AEA228/I78EX4uOm-g4553TEsyV7LjMYQs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:74:76:35:a5:9a:f1:44:5e:9a:40:0f:37:95:14:24:58:
         99:8e:ad:c9:b0:71:ee:2e:f6:ba:6d:87:a5:f6:9f:43:73:60:
         c6:ae:61:64:83:a4:40:20:d4:30:c4:21:ad:e8:49:2c:3a:8e:
         f2:6e:90:de:d7:d3:91:47:ab:d4:35:7b:3f:bb:db:c9:04:02:
         e6:11:93:c7:32:29:af:51:c1:cc:15:c9:90:be:ee:ee:59:0f:
         68:a6:2f:bc:c2:4c:96:be:99:f5:7e:55:55:b3:e0:8e:f1:de:
         be:61:45:16:c8:17:50:94:af:8e:19:03:b0:16:a2:45:a9:09:
         e3:10:6c:88:6d:a7:a5:6f:ba:1b:73:87:f9:98:b0:4b:7a:46:
         30:a1:5e:43:9c:df:16:39:5f:9e:7a:00:88:ec:da:0f:3b:0d:
         b9:13:9e:6c:42:ab:d4:3b:d0:84:76:55:98:6f:4e:0d:a6:51:
         92:30:0a:00:c4:03:f0:6e:56:71:9e:4e:2a:e7:0f:5d:65:65:
         be:18:f3:44:24:ea:56:2f:e3:69:ae:27:51:3b:41:9d:37:c6:
         73:6e:00:90:48:64:d9:f3:c6:72:8d:71:f2:24:dd:1c:13:e2:
         ff:61:33:5d:58:a2:61:bc:f7:bf:8e:d3:bf:0f:c2:3d:fd:07:
         b7:c8:f2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----