Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
File:                     -RyaVXksG3JGcT_syDoE0La_EpE.mft (raw, json)
Hash identifier:          exIIYPLTLhNRvo+vuatNRT5mN0j6YwQGYTR+BNft0RA=
Subject key identifier:   58:F8:13:B8:B4:75:2C:90:1D:12:C8:26:A4:EC:0A:81:04:B2:96:A2
Authority key identifier: F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91
Certificate issuer:       /CN=F36D9765AF/serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
Certificate serial:       042E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
Manifest number:          0429
Signing time:             Tue 06 Oct 2026 03:53:08 +0000
Manifest this update:     Tue 06 Oct 2026 03:53:07 +0000
Manifest next update:     Thu 08 Oct 2026 03:53:07 +0000
Files and hashes:         1: -RyaVXksG3JGcT_syDoE0La_EpE.crl (hash: 4rgWvuwozTiFj0Vq0tmt7vjEu4XQw3Yj8W3Im5lh0AM=)
                          2: F85FFC4692E611EEB2D6445FD25BE465.roa (hash: muWneFlHYojsneBSKzrZDz/udMZ/g3nNGVbhuecawWo=)
                          3: 68052C5292E611EEB89A3D5ED25BE465.roa (hash: tfitjgyPV0bS1mdpb1R7yScmPtiSMrRxv3bQMLGjivw=)
                          4: 76838CE4E21211EEBB0FD29E775412E6.roa (hash: 83ixyn1DFACr3ZBupHAVOvYjpWf5hCNkOy2h0/nKuTw=)
                          5: 60DEE4F2E21111EEA9BF3698775412E6.roa (hash: kpV5c+Nm73LzjUsY4W/31mKZBHaBOvnt5Onm6QECScM=)
                          6: FFF44596E21111EE97790E9B775412E6.roa (hash: 3jeCnY7r5+OaUOOC086aUVH8hGb0UpeugYE741gqr+8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 03:53:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D9765AF, serialNumber=F91C9A55792C1B7246713FECC83A04D0B6BF1291
        Validity
            Not Before: Oct  6 03:53:07 2026 GMT
            Not After : Oct  8 03:53:07 2026 GMT
        Subject: CN=6ac470a4-293a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e5:82:81:86:49:91:32:e9:5c:9d:c2:e6:1e:
                    fe:de:b9:56:d1:6f:15:78:70:70:6a:fb:49:ac:ad:
                    60:fe:5d:4e:ac:f1:38:f2:4e:e4:eb:09:b1:68:64:
                    ca:37:71:d8:ea:ec:29:f1:97:11:1b:9e:91:27:bf:
                    09:2d:29:16:db:3d:06:ea:64:19:d0:03:f2:c6:7f:
                    a3:c8:db:fc:66:2e:a5:42:5d:9c:17:2d:5a:0b:13:
                    d9:4d:62:f7:03:53:6e:7a:53:64:dc:08:8d:00:d2:
                    56:a9:4e:8c:d6:37:3a:d8:57:4c:c5:90:ad:83:34:
                    cb:53:06:25:d6:ef:ef:7f:9f:47:28:ac:d2:b3:8f:
                    7d:a2:8f:97:0c:6b:ca:0b:82:67:55:6d:6e:9b:79:
                    bf:06:45:02:44:f8:64:34:5f:ba:5d:e0:96:db:ed:
                    fc:5a:ae:38:29:6b:c8:e1:c9:bf:7d:ff:b1:ef:85:
                    a3:b7:8c:98:b8:62:c4:81:c5:40:f9:19:13:83:43:
                    f6:cd:5c:61:d8:07:fb:37:93:6f:85:b7:98:86:b1:
                    8f:f5:e5:61:6e:29:0c:8e:89:aa:25:2b:26:35:28:
                    f9:db:75:0e:92:5f:30:f7:a0:40:35:d4:c7:29:c5:
                    0d:b3:f5:16:dd:a9:d0:71:8d:e3:22:6d:f3:33:ec:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F8:13:B8:B4:75:2C:90:1D:12:C8:26:A4:EC:0A:81:04:B2:96:A2
            X509v3 Authority Key Identifier:
                keyid:F9:1C:9A:55:79:2C:1B:72:46:71:3F:EC:C8:3A:04:D0:B6:BF:12:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-RyaVXksG3JGcT_syDoE0La_EpE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D9765/17D92B5C92DC11EEBFDD584DD25BE465/-RyaVXksG3JGcT_syDoE0La_EpE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:07:5f:b0:5d:51:97:d6:04:33:06:b6:a0:96:26:b0:85:1e:
         51:a4:fe:57:de:11:e9:44:91:7e:49:ed:04:20:6f:0f:4d:a0:
         2e:a9:01:55:24:8f:47:cb:55:02:2e:3a:78:93:78:01:59:56:
         1d:af:41:da:eb:7d:e2:0d:09:7e:b0:26:c4:4c:07:d8:30:2e:
         41:54:fb:29:9d:1b:45:21:26:e9:00:be:b6:f8:4f:7e:f2:08:
         d2:21:34:cd:fc:ef:ec:f1:0b:b4:7c:14:aa:57:a4:17:da:cc:
         f5:0f:38:a5:bf:98:57:7e:5f:21:c6:26:7e:ce:29:0c:41:ab:
         e2:a9:5d:0f:24:8c:f3:4d:bd:75:aa:00:e9:28:bc:04:c4:e9:
         98:85:6e:d3:25:5b:e8:57:71:6d:8c:69:b9:0c:19:99:30:b0:
         d3:2e:f4:34:7d:d0:ef:c2:fd:7f:67:5a:74:00:89:a5:58:a1:
         22:b8:4d:19:01:95:8d:6d:72:fb:9e:a4:0c:df:61:86:0e:c9:
         e0:93:e2:92:5b:ff:f4:0e:d2:c8:9d:7e:cc:a4:15:4a:87:cc:
         71:d9:66:77:d1:27:f7:c7:b2:26:7a:b2:e8:3e:6e:2d:df:25:
         e3:ba:a1:61:5c:70:84:c3:00:c2:ee:2f:16:cb:b9:aa:c5:72:
         28:01:0a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----