Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
File:                     165kWvnltuIirj4ZQpl0u9hlaUE.mft (raw, json)
Hash identifier:          ebxOtKPrO0/imsA/2pd2iBwR9hX9d2E1RSw+jWLimqk=
Subject key identifier:   05:D9:61:BE:A0:DC:A6:13:AB:FB:DF:E8:D0:31:03:C4:3B:F1:95:F6
Authority key identifier: D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41
Certificate issuer:       /CN=F36A9688AF/serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
Certificate serial:       0788
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
Manifest number:          0786
Signing time:             Sun 11 Oct 2026 02:21:40 +0000
Manifest this update:     Sun 11 Oct 2026 02:21:40 +0000
Manifest next update:     Tue 13 Oct 2026 02:21:40 +0000
Files and hashes:         1: 165kWvnltuIirj4ZQpl0u9hlaUE.crl (hash: RIVwhffjlhb3r9KRJ0TG8QEqACLrYQ6JWGsSwGQu4wM=)
                          2: 944BDCAA1C3E11F19E04AAF5DAE4EC9C.roa (hash: /Spr3dkWLzeHjhA4/jneuEhVkXk19YABMTLgIxm7Vko=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1928 (0x788)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9688AF, serialNumber=D7AE645AF9E5B6E222AE3E19429974BBD8656941
        Validity
            Not Before: Oct 11 02:21:40 2026 GMT
            Not After : Oct 13 02:21:40 2026 GMT
        Subject: CN=6acaf2b4-a83d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dc:ad:22:3c:84:4d:aa:83:08:fb:92:6e:41:
                    f9:57:81:2f:ea:b4:e9:f0:b4:7b:87:f2:3e:8f:c3:
                    d8:a7:7f:02:0e:50:d0:cb:a4:16:fa:1e:ec:fc:98:
                    0a:65:ab:74:98:ae:9f:cd:f6:21:54:7a:b0:18:9e:
                    54:a9:a0:01:0a:d7:a6:6d:44:51:e2:33:83:ce:37:
                    60:13:6e:4b:d5:4c:1d:e6:9b:25:9b:1a:cd:5d:51:
                    ae:d9:56:31:1e:9e:8e:c5:ef:1f:30:d9:22:30:28:
                    04:c7:a8:c2:fc:e6:5d:65:c4:2e:dc:ce:35:b7:a8:
                    e5:81:33:3a:88:dc:b5:d3:ca:56:2a:63:90:4e:8e:
                    8d:3c:0e:1c:f0:c0:4c:15:05:0f:44:9b:38:be:fe:
                    7b:f9:a4:a1:1d:52:b5:a2:f2:38:3f:c0:0d:a2:1b:
                    ad:01:e5:b5:d9:f7:99:b0:da:4b:c9:ff:04:76:fa:
                    c0:4b:4a:6d:2f:6b:30:95:be:40:ed:c2:36:44:07:
                    d7:02:ed:7a:4e:7a:02:48:a0:7a:8c:79:67:69:bd:
                    cf:aa:97:09:eb:4c:50:20:05:25:e4:40:7a:2d:91:
                    68:dd:c7:ee:61:55:d0:f0:07:fd:d7:01:75:06:59:
                    cb:ce:ba:f9:1c:1b:50:78:6a:10:9d:5e:36:12:d6:
                    5c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:D9:61:BE:A0:DC:A6:13:AB:FB:DF:E8:D0:31:03:C4:3B:F1:95:F6
            X509v3 Authority Key Identifier:
                keyid:D7:AE:64:5A:F9:E5:B6:E2:22:AE:3E:19:42:99:74:BB:D8:65:69:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/165kWvnltuIirj4ZQpl0u9hlaUE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9688/12072FE6FFE811EBB192FB09D8A014CE/165kWvnltuIirj4ZQpl0u9hlaUE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:6e:87:cc:3c:73:f5:7b:d6:3c:c8:95:36:ab:bf:07:59:0d:
         18:90:ec:ef:ae:33:9d:bb:16:3c:e1:e4:d3:5d:70:53:ae:30:
         21:ce:23:31:c8:5f:b7:9f:e0:93:f6:b5:d7:9a:f2:84:ae:95:
         48:bf:f3:cd:26:c2:6d:16:41:eb:b4:2a:a0:3c:64:b1:53:9a:
         59:02:33:99:dd:49:1f:72:a4:80:f0:3e:5c:0e:e0:5e:9d:f5:
         cb:94:ca:26:71:c1:44:a0:5d:f8:e7:30:0f:60:6a:25:36:8f:
         dd:09:39:15:75:d0:01:a9:1b:5b:a2:0e:53:26:59:26:f0:a2:
         e0:80:24:ba:57:88:4c:ce:03:c0:7b:cf:61:2b:9c:b2:ff:ec:
         a5:8c:8a:6f:e1:60:4d:08:b0:88:89:f1:c5:d0:46:18:d8:6a:
         b3:12:e6:c5:08:8d:68:d3:ad:58:0e:3c:5f:bc:64:c6:ad:9c:
         15:9a:a5:a8:cc:eb:1a:f7:d9:f4:0d:1a:b0:f6:c7:54:b8:07:
         4d:85:37:17:e2:14:55:b8:a9:a3:75:76:4b:66:3e:93:da:0f:
         bc:ad:03:00:21:e9:22:c3:96:2a:d0:ee:49:89:d9:d6:9c:af:
         e7:23:9f:d3:71:6d:ab:e7:c7:bc:ce:e9:5c:59:4d:fc:a9:84:
         9d:f4:b7:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----