Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
File:                     zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft (raw, json)
Hash identifier:          g1f6cTGoyDLhAHPeMRtL4qIbDyYIFPxc5L1DvIGXYnQ=
Subject key identifier:   2D:2D:AF:DC:E6:83:C1:B2:9D:C1:D2:C6:CD:86:45:F9:71:42:A3:28
Authority key identifier: CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3
Certificate issuer:       /CN=F36D70D9AF/serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
Certificate serial:       0688
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
Manifest number:          0686
Signing time:             Sat 10 Oct 2026 02:41:33 +0000
Manifest this update:     Sat 10 Oct 2026 02:41:32 +0000
Manifest next update:     Mon 12 Oct 2026 02:41:32 +0000
Files and hashes:         1: zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl (hash: Cn0jRVduiSG1mWOnXhG0IynW5B1YcDq5GZX8qzyj8Y0=)
                          2: 1276AD646A6211F19EC4A6C6CE1D38B0.roa (hash: H7W6p0/KeMOWTk3DtLdG+krMnptu7xkOg7u0jb5Kx3k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1672 (0x688)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D70D9AF, serialNumber=CD74ED3658334CA28132D696EF70E90CA3F667C3
        Validity
            Not Before: Oct 10 02:41:32 2026 GMT
            Not After : Oct 12 02:41:32 2026 GMT
        Subject: CN=6ac9a5dd-ca4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d0:e2:23:2d:cf:e1:fb:8d:f1:bd:97:c7:6b:
                    51:43:df:c5:a8:d4:bd:30:a3:78:ed:d8:37:12:4e:
                    ee:8f:ca:17:f3:16:db:38:0d:13:c0:24:91:6b:57:
                    cf:80:7c:12:e4:10:02:e3:b8:87:a7:4a:79:91:36:
                    ad:2a:ac:ab:3d:6a:05:f7:70:05:64:8a:b4:f6:85:
                    27:fb:87:c8:de:69:ec:07:17:a0:32:47:24:73:63:
                    ac:10:99:44:bc:b7:1b:98:60:41:3d:50:aa:37:73:
                    17:70:ef:93:03:ee:5f:43:a4:bd:88:ab:86:b1:30:
                    dd:70:37:29:e4:f0:b2:2f:b3:3b:77:b8:82:93:96:
                    54:b0:41:46:5a:3f:41:8f:39:b9:85:6b:8e:0a:df:
                    a4:ec:ae:8c:54:91:48:41:51:7d:ee:4d:4e:de:6d:
                    45:20:16:4b:6d:8b:1a:74:70:ad:f6:ef:73:9b:00:
                    c0:56:de:81:78:8a:85:90:98:7c:4a:bf:97:66:ff:
                    1c:df:13:6b:2d:2b:3d:57:cd:a3:46:1f:32:82:45:
                    63:8e:5a:00:48:0e:ed:4d:d1:7b:69:9a:75:7b:cb:
                    88:b0:a5:fa:97:6a:53:a3:ed:7f:14:4d:a3:eb:c6:
                    c5:59:ae:aa:9a:76:c8:7b:46:86:3f:90:56:3e:f5:
                    9a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:2D:AF:DC:E6:83:C1:B2:9D:C1:D2:C6:CD:86:45:F9:71:42:A3:28
            X509v3 Authority Key Identifier:
                keyid:CD:74:ED:36:58:33:4C:A2:81:32:D6:96:EF:70:E9:0C:A3:F6:67:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zXTtNlgzTKKBMtaW73DpDKP2Z8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D70D9/3A34B348C78511EC9432BE98F1222468/zXTtNlgzTKKBMtaW73DpDKP2Z8M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:29:7f:07:a3:8a:47:11:08:80:e0:ca:55:d4:a0:72:60:6b:
         7a:c4:86:29:bf:70:76:01:29:8b:ab:5e:ee:7c:02:d5:88:60:
         5e:37:69:f0:34:31:fc:ae:ef:6a:0f:f2:75:c4:6b:6d:0c:a4:
         a1:8c:79:26:6a:d0:25:9a:f9:43:d1:c5:51:5f:50:d0:a8:8f:
         34:31:2c:0d:81:b0:d1:82:fb:79:bc:16:60:65:00:c7:79:82:
         d8:53:ea:aa:93:9a:ac:6e:71:08:71:9c:e8:d5:82:4f:67:2c:
         03:23:69:5c:94:9c:7e:60:c0:f8:cf:83:ec:a7:38:c9:fb:9d:
         55:38:43:0b:5d:0e:04:ff:75:50:69:27:ba:9d:2f:52:f9:5a:
         c5:02:78:de:34:3f:95:be:07:94:9c:03:a9:7d:2c:bf:20:1c:
         cc:06:aa:2c:2f:3a:dc:23:09:aa:82:f0:70:8e:1d:1e:12:a0:
         4d:9a:43:29:30:53:17:4b:cf:82:44:75:ef:da:7f:92:01:fe:
         66:79:96:d0:b8:42:16:a2:14:d8:55:01:ec:c2:b7:87:3f:94:
         1a:21:e4:c0:ba:35:cc:04:34:a9:9d:13:84:2a:16:9e:b8:0e:
         4f:23:e3:6c:1e:38:59:0e:fa:52:a7:b0:4a:b3:9d:8c:c7:e1:
         3d:0f:91:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----