Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
File:                     FUgKw-djfPKntoh6_VGlPwPmrUc.mft (raw, json)
Hash identifier:          E72YqoriJ4I8Z/1MD0vIhW1V5gQxcxY2s3T93UsWmtg=
Subject key identifier:   3E:BA:B3:82:38:FB:73:2D:7F:B9:16:CA:AD:18:42:D9:A4:EB:DA:A7
Authority key identifier: 15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47
Certificate issuer:       /CN=F36D289CAF/serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
Certificate serial:       0AA5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
Manifest number:          0AA1
Signing time:             Mon 12 Oct 2026 01:32:15 +0000
Manifest this update:     Mon 12 Oct 2026 01:32:14 +0000
Manifest next update:     Wed 14 Oct 2026 01:32:14 +0000
Files and hashes:         1: FUgKw-djfPKntoh6_VGlPwPmrUc.crl (hash: xE3sG01TW0fpNlWYYlAVmub/ectpJ+J+w5+nqAqn3Dc=)
                          2: 967E592CF1E611EFBCF7DD4F762E951A.roa (hash: OyrLKAFW3d4E09yYEW9wskKKqknjSYiMg4ra/6illO4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 14 Oct 2026 01:32:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2725 (0xaa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CAF, serialNumber=15480AC3E7637CF2A7B6887AFD51A53F03E6AD47
        Validity
            Not Before: Oct 12 01:32:14 2026 GMT
            Not After : Oct 14 01:32:14 2026 GMT
        Subject: CN=6acc389f-59af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:a2:f2:c3:b3:60:4d:8c:54:32:7a:d4:86:af:
                    7d:8b:fc:65:a7:15:49:55:ca:b8:a3:a4:46:bb:48:
                    b7:db:c9:e2:87:f4:79:7f:fe:91:55:d0:69:dd:ab:
                    12:49:92:d7:cf:82:42:df:49:d2:80:78:7b:cd:09:
                    bb:28:32:eb:81:a6:d4:3e:06:64:af:69:79:7e:0f:
                    5b:b9:1d:fb:c1:67:9f:f5:f0:5b:3d:99:b4:3a:ef:
                    3a:4b:56:34:57:8a:07:da:77:ca:bf:4e:8a:9d:ab:
                    2c:67:6c:f5:ac:c9:a2:9a:24:53:97:46:71:21:68:
                    62:42:b7:58:0f:07:0f:e1:a2:9a:cd:cc:40:ec:ff:
                    25:41:dd:89:c6:38:55:80:4b:d4:45:35:bb:fa:ac:
                    58:92:40:a7:f5:64:18:21:63:05:14:e0:5c:31:c0:
                    c0:ba:72:1f:65:7b:af:c7:43:2b:b2:4f:56:f6:4d:
                    02:e1:4f:99:6e:ae:4b:d2:11:39:fd:6b:69:cf:bb:
                    9e:fd:32:0f:9e:6c:45:05:bc:9a:84:7a:a8:4b:10:
                    b5:5c:3c:40:c3:c1:31:68:b6:88:f9:44:38:06:d8:
                    d3:b0:5f:ab:0b:45:d8:0a:24:5e:e9:ea:94:5a:37:
                    2c:a3:0c:30:e8:cf:af:aa:72:d2:7f:ac:1e:d7:65:
                    97:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BA:B3:82:38:FB:73:2D:7F:B9:16:CA:AD:18:42:D9:A4:EB:DA:A7
            X509v3 Authority Key Identifier:
                keyid:15:48:0A:C3:E7:63:7C:F2:A7:B6:88:7A:FD:51:A5:3F:03:E6:AD:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/FUgKw-djfPKntoh6_VGlPwPmrUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/FB7081DCA87411E9AC77AB45F8AEA228/FUgKw-djfPKntoh6_VGlPwPmrUc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:af:40:15:9e:51:13:ef:d8:c3:6c:b0:a9:1a:30:f6:d5:e5:
         48:2c:b3:86:9d:a6:16:56:bf:34:8d:a2:6b:8b:09:3b:33:25:
         e2:5d:92:2a:63:ac:c3:6e:c2:30:11:87:05:5d:e8:4c:e6:c6:
         77:26:bd:6a:32:29:5b:60:90:e7:88:69:4e:4d:d4:2d:b9:79:
         02:3d:57:df:1b:b5:81:17:dd:d2:3c:b1:6e:2c:ae:f4:02:b1:
         93:8e:3e:45:1a:a8:06:c6:0b:f5:17:98:11:90:ae:5c:68:8b:
         1f:e4:2b:f2:6c:ed:e3:db:17:ed:95:b0:2c:3e:94:94:e8:d3:
         db:2c:f9:e6:84:78:79:68:8f:84:57:7e:f0:8d:2b:4f:cc:ea:
         2b:d7:4d:ae:3f:0c:22:38:8f:db:dc:b4:e8:de:61:8b:1d:fe:
         90:cd:df:23:c5:62:fd:7d:32:2b:e6:e0:51:37:ff:7d:ca:24:
         1b:4b:71:c8:7b:b4:ad:3b:e2:62:4b:e1:ae:0c:f0:a2:a8:40:
         73:6e:c8:68:8a:16:95:a1:3b:ba:41:ca:e5:f1:b2:b2:cf:b5:
         a5:e8:66:33:64:ea:a6:ea:72:5e:76:26:90:2c:d1:48:c1:ab:
         51:e6:22:8e:05:93:a9:90:ab:54:3f:46:7a:01:e0:a9:cb:b4:
         2d:3b:7c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----