Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
File:                     vbHIMkQqFwa_d_xOxDcYGbo_waY.mft (raw, json)
Hash identifier:          NSgiN2dyDfk/ZluH6yGEfvbMgKmnwOisN5q1OS9ye7Q=
Subject key identifier:   EB:39:1F:2B:F3:F8:C7:90:3C:4D:D5:9F:10:7E:CD:49:66:06:83:34
Authority key identifier: BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6
Certificate issuer:       /CN=F36A8AA3AF/serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
Certificate serial:       041B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
Manifest number:          0416
Signing time:             Sat 03 Oct 2026 03:53:12 +0000
Manifest this update:     Sat 03 Oct 2026 03:53:12 +0000
Manifest next update:     Mon 05 Oct 2026 03:53:12 +0000
Files and hashes:         1: vbHIMkQqFwa_d_xOxDcYGbo_waY.crl (hash: X5Af/hXbWumTm3WnJiIHFWWk7mIiTyvil1iYPfhMjgA=)
                          2: 95FB9F72917D11F1ACF5CF0FCF1D38B0.roa (hash: XemA5ELUbJgfLB86Vv/hZUX7L8ka95yo2KAJbRxXzwE=)
                          3: C5678B30917911F18210FDF7CE1D38B0.roa (hash: ngAQVYSoy/nQgR66WjgysPf+z6opjHWeFtwUTiBVTeI=)
                          4: 74CDD684917911F1BCB1E8F7CE1D38B0.roa (hash: 0I0erLU4AW8ZqmplgEqAGN31m3+gj97IY5scRzBt2oQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A8AA3AF, serialNumber=BDB1C832442A1706BF77FC4EC4371819BA3FC1A6
        Validity
            Not Before: Oct  3 03:53:12 2026 GMT
            Not After : Oct  5 03:53:12 2026 GMT
        Subject: CN=6ac07c28-8a68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:af:0b:43:9b:8c:35:73:03:ec:9f:eb:32:
                    26:1b:1d:0e:f7:cb:bc:8b:fa:57:6c:c5:00:78:3e:
                    e5:1e:cb:ad:80:b2:de:13:b9:46:0c:4b:82:f1:d1:
                    81:9d:a6:46:77:ab:d1:1f:25:38:fe:6c:a1:43:d7:
                    41:15:c3:66:2d:02:f8:48:b6:0e:d5:83:93:eb:05:
                    51:30:1b:a7:4e:77:82:fb:1d:21:f8:a4:89:be:34:
                    2f:66:11:83:35:46:0d:b9:93:07:94:f0:a7:38:3f:
                    79:8d:e7:62:29:1f:cd:29:e3:8b:ff:88:79:4b:a4:
                    f6:1d:3e:13:34:7c:80:bf:77:12:8a:46:b2:ea:ce:
                    1b:58:42:10:8c:e7:88:81:e1:87:a4:8d:c5:5d:a3:
                    de:17:59:1e:47:f4:9c:44:66:0e:d7:e8:8d:01:1d:
                    42:db:da:93:cd:4d:64:8c:d7:d9:ea:29:ad:1c:02:
                    f1:54:ff:37:e4:52:43:89:e2:77:47:b8:33:74:c1:
                    6f:d4:05:4d:d0:ca:68:8a:d1:6f:f0:6c:89:00:2c:
                    6b:d3:a0:63:61:34:66:28:7a:e9:da:37:3e:6c:4a:
                    67:14:7a:d5:04:6d:d2:f1:c6:ea:c6:cd:1d:3c:a5:
                    c0:16:a2:21:38:b5:3a:cf:af:9a:da:b7:06:12:96:
                    74:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:39:1F:2B:F3:F8:C7:90:3C:4D:D5:9F:10:7E:CD:49:66:06:83:34
            X509v3 Authority Key Identifier:
                keyid:BD:B1:C8:32:44:2A:17:06:BF:77:FC:4E:C4:37:18:19:BA:3F:C1:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbHIMkQqFwa_d_xOxDcYGbo_waY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A8AA3/947078EC9E5211EEACE10A1AD25BE465/vbHIMkQqFwa_d_xOxDcYGbo_waY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:2c:85:33:54:99:45:1b:17:90:0c:ce:19:ec:5a:a5:9c:
         13:0f:1d:32:61:60:27:22:7c:ed:28:e5:f9:21:0c:82:f9:0e:
         78:b3:6e:a5:43:a4:fd:45:2a:f5:43:dd:be:c8:06:10:10:e4:
         e1:27:d8:3b:d7:3f:53:75:64:f2:b4:13:5f:4b:aa:20:5e:6f:
         0f:c5:c0:9c:bb:82:31:99:6b:d5:37:d5:6d:92:9f:7c:18:3e:
         f4:39:2d:13:f6:80:83:01:fe:14:9d:d2:b0:cd:d9:d2:f7:5a:
         52:00:30:7d:c9:3e:3f:b0:3c:81:e8:8b:9f:e9:36:ef:28:e3:
         ef:12:d5:43:f9:58:67:62:b0:fd:70:46:65:28:2d:c4:42:35:
         c4:35:35:3d:f9:c6:e3:d9:04:ee:ab:9f:3f:2d:e8:bc:f0:0c:
         8b:80:68:65:68:1a:91:f5:0b:27:c9:cf:64:2d:9a:d3:aa:0f:
         63:57:52:5a:eb:c9:64:48:ed:17:6f:e8:32:c4:22:02:41:0b:
         d2:be:38:d7:46:52:6c:b1:5f:5f:eb:30:3d:69:17:84:ee:91:
         5f:5c:58:50:13:54:1c:98:b4:6e:97:6c:70:56:5b:bc:b2:c4:
         5f:93:e4:48:fe:0f:24:e2:74:2c:56:90:b5:72:b0:e2:48:54:
         cf:80:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----