Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File:                     zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier:          NfrJyzVO2QaB9wzBkspdVVU59RD+WpcSeyN42xkL9yQ=
Subject key identifier:   8D:20:55:42:FD:49:6B:F6:69:8E:17:09:1F:7B:95:8D:16:90:DE:23
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer:       /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial:       0354
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number:          0350
Signing time:             Thu 29 Oct 2026 04:20:05 +0000
Manifest this update:     Thu 29 Oct 2026 04:20:04 +0000
Manifest next update:     Sat 31 Oct 2026 04:20:04 +0000
Files and hashes:         1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: 844+axLelWcsvdk9uiUtPMOg4V31T0Ejc4x6yv9x1D0=)
                          2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 31 Oct 2026 04:20:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 852 (0x354)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
        Validity
            Not Before: Oct 29 04:20:04 2026 GMT
            Not After : Oct 31 04:20:04 2026 GMT
        Subject: CN=6ae2c975-d7ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:0b:c1:99:a8:47:95:74:26:a2:99:2d:64:ee:
                    59:a4:23:32:30:63:8e:5f:05:10:49:6e:78:a6:a7:
                    37:7e:09:b8:f7:eb:c4:9e:c1:06:dd:2e:ac:2d:d2:
                    14:43:59:0b:0d:39:37:03:95:6d:95:52:50:d7:94:
                    6a:c1:0f:68:3b:da:a6:2f:8d:4c:54:4a:0b:37:a0:
                    0f:a3:c9:f3:41:0a:1e:39:4a:e4:fe:32:bc:cf:b3:
                    1f:5b:1e:1b:7a:62:e3:51:4a:07:b0:de:12:5c:2a:
                    80:d2:09:1d:02:a3:73:0a:d4:c9:85:58:58:79:46:
                    d0:68:c6:50:1d:38:53:7f:08:bb:97:d5:95:49:33:
                    eb:b6:93:60:09:64:ac:bf:83:24:d7:58:a5:00:37:
                    d2:db:00:da:b6:93:31:13:f4:65:fc:eb:2b:af:6b:
                    ef:7b:47:76:86:98:7e:19:f8:34:85:77:3c:d6:c5:
                    26:26:92:02:7f:4f:79:70:cd:69:af:76:9e:6d:90:
                    a4:38:f5:2a:4e:21:02:ef:84:72:06:32:f4:54:76:
                    64:dc:75:68:12:55:c3:ea:d1:77:d9:d1:04:06:28:
                    5a:88:b7:d5:14:52:0a:2e:26:f5:2a:5f:49:08:3f:
                    5a:2f:1e:cb:4c:8d:42:21:cf:89:98:98:95:18:aa:
                    3f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:20:55:42:FD:49:6B:F6:69:8E:17:09:1F:7B:95:8D:16:90:DE:23
            X509v3 Authority Key Identifier:
                keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:0a:9c:56:1b:fe:11:cf:be:7d:b0:2f:4e:55:c7:23:c8:5b:
         36:ad:22:b2:8f:e0:f8:eb:94:96:4d:b2:eb:98:ac:20:a8:42:
         28:ca:c3:b8:f7:a5:d6:2d:a7:64:87:1b:17:4c:20:04:b3:f1:
         e8:e1:03:8f:07:a9:76:2c:f9:e3:9a:79:c2:b0:16:e2:6b:6e:
         4f:7f:db:33:b3:69:91:e3:6e:4f:f7:80:b9:76:cd:d5:f8:44:
         b0:e4:e9:49:46:78:e7:43:2c:76:ff:7f:d5:8f:c7:a8:34:f9:
         97:8e:2f:11:0b:2b:0c:d5:43:dd:d5:98:e4:f6:dc:60:f5:3f:
         80:54:a9:e8:c4:e9:a5:bc:e3:d1:d9:be:a8:bc:0c:a8:bc:55:
         88:61:3e:63:84:10:84:17:06:07:61:ea:13:29:62:5e:a1:d9:
         c2:50:b6:e6:83:cb:d4:52:fb:44:48:f4:1a:19:b5:74:81:5a:
         9b:1f:2d:6b:30:68:cf:94:6b:d8:0b:52:27:c4:47:0f:7d:48:
         e9:fd:59:6f:4e:0f:bf:5f:e1:15:72:76:20:2d:bc:62:6f:7a:
         91:ae:39:38:69:79:8c:e1:03:d9:71:0a:bb:e4:50:16:88:75:
         b7:00:62:07:5f:f2:91:7c:c1:05:db:8b:22:1f:e7:fe:df:c9:
         71:8b:c2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----