Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3662814/602BD4A8B26A11F1AE9DAAC9CE1D38B0/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.mft
File:                     XU3b6mVdWtGeX5bsZ9s7_9t8XnE.mft (raw, json)
Hash identifier:          XFMdUEcyRSGuvlJQgXlvJrR+Mma2+tJ5gIETPiWHFhw=
Subject key identifier:   B4:4B:2C:EA:2E:DD:F0:96:0E:EA:5D:4B:18:ED:C3:D9:0C:9F:C5:EF
Authority key identifier: 5D:4D:DB:EA:65:5D:5A:D1:9E:5F:96:EC:67:DB:3B:FF:DB:7C:5E:71
Certificate issuer:       /CN=F3662814AF/serialNumber=5D4DDBEA655D5AD19E5F96EC67DB3BFFDB7C5E71
Certificate serial:       36
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662814/602BD4A8B26A11F1AE9DAAC9CE1D38B0/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.mft
Manifest number:          35
Signing time:             Wed 04 Nov 2026 05:56:25 +0000
Manifest this update:     Wed 04 Nov 2026 05:56:24 +0000
Manifest next update:     Fri 06 Nov 2026 05:56:24 +0000
Files and hashes:         1: XU3b6mVdWtGeX5bsZ9s7_9t8XnE.crl (hash: RjWooNFiKqRmmGGS2JQa6F01AHfhrVVRF+GwBmvzJJU=)
                          2: 5949038AB26B11F19A18B0CFCE1D38B0.roa (hash: 4wF/KDgf7C5li7PZu5exkfWouR3YO66W2nCBdpnhstw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662814/602BD4A8B26A11F1AE9DAAC9CE1D38B0/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662814/602BD4A8B26A11F1AE9DAAC9CE1D38B0/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 05:56:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662814AF, serialNumber=5D4DDBEA655D5AD19E5F96EC67DB3BFFDB7C5E71
        Validity
            Not Before: Nov  4 05:56:24 2026 GMT
            Not After : Nov  6 05:56:24 2026 GMT
        Subject: CN=6aeac909-d973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:2c:38:2f:e3:69:67:80:cc:73:99:61:d6:b3:
                    82:d0:af:c7:31:e2:9a:e2:51:48:79:0e:f8:2d:d9:
                    39:79:a7:f6:2a:e7:61:99:bb:0e:38:02:d3:90:e4:
                    f8:46:48:d8:c9:8f:86:bd:bd:ce:33:3a:bb:51:82:
                    c0:b7:b5:48:de:dd:63:28:c9:6c:f5:02:ed:30:5d:
                    d2:91:0b:dc:87:8e:c1:19:0a:68:8d:86:cb:f0:9a:
                    85:0b:12:e7:b5:ce:8f:80:21:ad:1b:d5:9c:f6:c2:
                    53:5e:e9:b6:2d:ce:fd:ca:36:f9:aa:fd:44:fa:cc:
                    38:3c:1e:7b:54:f1:fa:c1:0b:13:21:82:39:96:79:
                    f6:a2:02:23:9f:b8:c0:6b:10:df:5d:66:02:ad:b9:
                    bf:95:a1:08:c4:f8:53:2a:58:30:84:39:95:3b:b7:
                    fe:61:16:60:62:5a:50:5a:1f:5e:6b:26:a8:17:21:
                    00:45:26:b0:69:51:75:95:4b:bf:cc:09:54:0a:bc:
                    27:99:d1:0b:ee:4e:51:1e:77:27:6a:4c:c7:6f:ea:
                    88:ab:40:d3:5b:af:c8:d0:b4:7b:b7:2d:4e:6d:47:
                    bd:92:b1:ce:0c:3c:e8:fb:e6:0a:8f:47:fc:75:f3:
                    00:63:67:f1:7b:50:75:1b:20:98:86:f2:13:7c:ba:
                    c0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4B:2C:EA:2E:DD:F0:96:0E:EA:5D:4B:18:ED:C3:D9:0C:9F:C5:EF
            X509v3 Authority Key Identifier:
                keyid:5D:4D:DB:EA:65:5D:5A:D1:9E:5F:96:EC:67:DB:3B:FF:DB:7C:5E:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662814/602BD4A8B26A11F1AE9DAAC9CE1D38B0/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662814/602BD4A8B26A11F1AE9DAAC9CE1D38B0/XU3b6mVdWtGeX5bsZ9s7_9t8XnE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:d1:9f:21:27:c9:04:16:b7:17:bb:76:eb:82:a1:44:e4:4b:
         7c:71:69:e1:d3:a8:81:d6:67:f1:0b:98:b0:09:4d:e9:57:76:
         da:fe:62:da:08:cc:6e:a7:f7:db:8b:8d:d6:38:70:a3:91:2e:
         01:e7:6a:03:5e:8e:10:05:c9:8c:51:cf:ab:bf:c1:c8:9e:b5:
         8d:2a:ca:86:5f:23:0d:01:42:84:35:85:64:7c:aa:0e:7f:54:
         df:0a:d2:98:44:ca:4e:5c:26:9e:90:86:6c:15:54:27:f4:61:
         5c:4c:8d:24:10:55:d9:f7:4e:82:4e:20:a9:d6:72:a6:da:ec:
         8c:c6:b1:cc:68:2d:b2:64:7e:e0:46:f8:fd:0b:2f:e3:66:43:
         9d:99:a3:53:26:12:ae:41:99:16:ac:b9:3e:2b:c6:90:cb:11:
         bc:95:b9:7e:2f:fd:7d:6a:77:2a:a1:dd:49:d0:bd:d5:4b:a5:
         95:a8:a3:a5:a0:c1:da:6c:2c:94:92:57:ad:52:2c:eb:c4:71:
         4a:e6:a6:a7:65:3c:bf:97:7d:7b:ae:f7:73:15:d8:7d:fd:aa:
         64:eb:84:b3:8d:b7:9b:da:c8:09:08:e1:1c:e8:ea:32:4d:04:
         f0:af:dd:a3:90:9b:54:c4:8f:59:b4:9f:e2:ca:5c:41:83:23:
         4a:29:c0:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----