Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
File:                     hbCxijGOWnXQTRoKp37_lQUiiSQ.mft (raw, json)
Hash identifier:          f+p5DHSxLD1YtZ8nGTNHjCVtkve5p136ktmvPhoWQX0=
Subject key identifier:   FE:1A:AF:B5:1E:D1:6D:B1:12:92:B0:9B:E6:1E:3D:D5:97:C4:43:F6
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Certificate issuer:       /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial:       08AF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
Manifest number:          08A6
Signing time:             Mon 12 Oct 2026 01:57:36 +0000
Manifest this update:     Mon 12 Oct 2026 01:57:35 +0000
Manifest next update:     Wed 14 Oct 2026 01:57:35 +0000
Files and hashes:         1: hbCxijGOWnXQTRoKp37_lQUiiSQ.crl (hash: JEPL1fHd42EBut06pfCQd4Ld3OEiheqZs2l15+wN18Y=)
                          2: 67B8C7B20B7311EF82634D34017001B1.roa (hash: gTnze+sNFy8wfWQuqCuoldModdIZeS9lmW2uAevzSyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 01:57:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2223 (0x8af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD4F1AF, serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
        Validity
            Not Before: Oct 12 01:57:35 2026 GMT
            Not After : Oct 14 01:57:35 2026 GMT
        Subject: CN=6acc3e90-36fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d8:13:55:0c:ba:31:cb:26:3a:dd:c9:f7:48:
                    ae:2e:29:ea:56:fc:48:39:9c:9f:9e:75:79:75:42:
                    de:7b:a0:9c:bf:e1:d9:a1:46:41:30:4f:1a:d8:c9:
                    c5:0a:e5:0a:20:f5:34:98:2a:34:5a:ee:57:8a:12:
                    c8:e6:0b:51:23:ed:c2:b2:f9:79:bb:5f:de:06:6d:
                    92:b2:6f:92:eb:6d:0e:24:01:ed:fd:c2:cf:2d:d8:
                    67:63:aa:c3:2c:2c:b6:a5:97:60:c7:54:eb:b9:39:
                    00:d2:61:1f:13:bb:37:fc:61:3d:f3:3a:b3:56:28:
                    9a:ca:40:83:07:ee:fa:22:5d:6e:a6:63:79:c7:0c:
                    62:b9:0d:92:42:a6:86:53:a3:39:c6:93:db:f1:a5:
                    32:e6:43:60:19:46:d0:9a:b7:05:66:d5:fd:4f:bf:
                    c8:3a:07:59:50:6a:f9:4f:05:ea:79:2d:ce:0e:ed:
                    2d:08:c0:9c:2f:13:ea:cc:0c:6d:ef:2d:52:d5:5e:
                    47:39:ba:0e:19:e9:e7:7f:19:c0:dc:3d:9f:6b:4e:
                    43:d3:06:60:bd:66:fb:b0:00:43:fc:0c:e4:e5:21:
                    53:8c:1d:6a:53:84:81:4e:a9:91:5d:53:11:23:b0:
                    e4:ec:e9:24:a9:47:b2:44:6e:c1:6b:e3:23:ce:43:
                    d4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:1A:AF:B5:1E:D1:6D:B1:12:92:B0:9B:E6:1E:3D:D5:97:C4:43:F6
            X509v3 Authority Key Identifier:
                keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:aa:15:73:2c:91:38:d0:3c:28:23:cd:ae:95:3b:1d:88:e7:
         14:52:a2:1b:36:cc:ea:23:4a:78:70:db:fe:ef:66:88:4c:21:
         37:a5:89:c9:b7:75:df:c5:b6:ce:06:dd:1e:37:17:76:bc:72:
         a8:92:0e:a6:bc:36:2b:31:56:4a:98:11:04:54:c2:cf:88:b9:
         90:c1:32:cc:41:87:a1:4b:22:88:b8:69:82:55:3e:0d:e4:bd:
         85:64:20:d0:4e:18:19:7e:2e:57:73:1c:bc:bf:1a:4e:cb:4b:
         02:ad:16:ee:b6:e3:af:06:98:d1:f9:ec:fb:e1:fd:5b:f9:3c:
         e4:c8:72:8a:ed:67:15:29:d3:2b:48:07:b1:23:f8:e5:74:09:
         6f:d5:35:41:35:55:0c:61:f4:d1:94:5f:9d:5b:97:39:31:4f:
         fb:08:41:c0:d9:2c:87:22:65:b3:c5:68:a7:0f:9c:0d:7b:2c:
         0c:c9:af:d9:f8:6d:c5:32:a4:48:3a:c5:2d:b2:cd:fc:9d:75:
         1b:f8:e9:7e:e0:cd:78:e8:db:d8:ef:fa:35:81:fb:35:6e:31:
         a0:8e:95:77:e5:1a:d7:c8:44:90:49:5c:0d:54:08:60:d9:af:
         af:ec:a7:66:73:33:f3:91:5c:6a:01:ed:b0:a4:c9:69:ad:a3:
         56:9f:f9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----