Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
File:                     QSDDG25xyAv3mSJsbVmhC3AhOSE.mft (raw, json)
Hash identifier:          vKaQZKOHLRNHsnUanyxxbVlYYn1gbn2v1hrQT0jvOwc=
Subject key identifier:   43:0A:B2:4E:19:CD:88:26:5C:A3:67:4F:DF:C0:46:AE:06:19:5A:44
Authority key identifier: 41:20:C3:1B:6E:71:C8:0B:F7:99:22:6C:6D:59:A1:0B:70:21:39:21
Certificate issuer:       /CN=F36E5BE1AF/serialNumber=4120C31B6E71C80BF799226C6D59A10B70213921
Certificate serial:       39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QSDDG25xyAv3mSJsbVmhC3AhOSE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
Manifest number:          38
Signing time:             Wed 04 Nov 2026 05:54:50 +0000
Manifest this update:     Wed 04 Nov 2026 05:54:49 +0000
Manifest next update:     Fri 06 Nov 2026 05:54:49 +0000
Files and hashes:         1: QSDDG25xyAv3mSJsbVmhC3AhOSE.crl (hash: LNPJ+KbtZVigeUr3U0a7ysFVLoNT/mhMiPvNmdgmSMM=)
                          2: 58EBB7C4ADFD11F18CEAFDF4CE1D38B0.roa (hash: OZKOlwRZ2oUpIBOzPLN1rbG60TNAmTSPpk5qoo1YOs0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QSDDG25xyAv3mSJsbVmhC3AhOSE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 05:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E5BE1AF, serialNumber=4120C31B6E71C80BF799226C6D59A10B70213921
        Validity
            Not Before: Nov  4 05:54:49 2026 GMT
            Not After : Nov  6 05:54:49 2026 GMT
        Subject: CN=6aeac8aa-949d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e8:ce:fd:a0:2a:3d:75:4a:10:75:7c:5c:3b:
                    24:09:67:ec:37:af:20:c0:7f:6a:41:4f:54:09:04:
                    15:5c:ce:31:3b:72:aa:ab:f5:ef:d0:ae:b8:5a:76:
                    cc:b6:56:a7:c8:ab:c7:6e:4e:cd:ff:90:8d:5e:af:
                    ea:92:59:58:d7:ef:bf:08:aa:17:06:2f:42:b8:f3:
                    84:ac:88:4b:82:08:74:1b:6a:9a:c7:c7:b9:96:1a:
                    28:1a:7b:be:45:5d:52:c0:b0:29:89:8e:6c:8a:08:
                    bc:a1:cb:4f:a8:e2:46:ce:d1:33:71:8a:9d:35:81:
                    bd:45:3f:0a:60:b1:64:7a:38:e8:47:0c:71:39:66:
                    1c:9a:35:d2:4d:67:89:88:4b:af:96:ee:00:52:e6:
                    5a:6e:55:fb:e0:35:7d:6a:e6:c9:fb:05:0c:91:7b:
                    b6:ae:70:ef:b9:1a:45:3b:73:68:68:8f:d2:3c:17:
                    db:c8:f2:12:e7:e3:14:0d:93:96:42:cf:7b:1b:94:
                    a4:7f:98:f7:5b:8b:a6:f8:64:3c:73:c8:36:85:2b:
                    61:8a:0c:04:a3:7e:7d:a3:58:ad:4a:96:66:07:30:
                    19:8e:1d:5f:7c:31:c8:92:0f:25:30:bf:2c:b3:ae:
                    e8:77:77:c4:96:2b:b0:d4:38:93:e8:39:63:fb:62:
                    c6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0A:B2:4E:19:CD:88:26:5C:A3:67:4F:DF:C0:46:AE:06:19:5A:44
            X509v3 Authority Key Identifier:
                keyid:41:20:C3:1B:6E:71:C8:0B:F7:99:22:6C:6D:59:A1:0B:70:21:39:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QSDDG25xyAv3mSJsbVmhC3AhOSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E5BE1/B3C4B4C6ADFC11F1B2BC13F1CE1D38B0/QSDDG25xyAv3mSJsbVmhC3AhOSE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:a1:46:f0:f2:54:c8:44:06:a6:b1:14:bd:70:97:1a:96:fc:
         0f:fa:2d:cf:d6:09:a8:e7:80:23:27:ef:7a:eb:1c:9b:f9:90:
         8d:b3:dd:60:1b:c9:8a:24:8e:28:1c:58:04:ec:b5:fa:6c:8d:
         70:28:fe:51:e6:4c:52:92:58:52:70:c0:3a:6f:a5:6f:16:10:
         e0:7d:42:4c:3a:d5:3f:87:fd:38:c2:e9:24:47:48:01:16:e9:
         3a:3a:17:06:4b:30:2f:df:62:b9:0d:85:b3:a9:94:11:15:4a:
         71:ef:35:a9:39:d2:61:f6:ac:9f:e2:28:41:bd:d5:35:04:20:
         33:55:f0:bd:32:a1:3f:15:26:5e:4d:5e:1d:88:e6:0a:98:79:
         6a:30:b4:cf:f9:07:88:2d:68:6f:41:87:a4:41:45:86:57:a0:
         90:3f:d3:0e:05:18:88:b8:c3:15:53:f5:4f:24:52:3e:c8:db:
         2c:f2:53:75:63:61:3f:91:22:3e:49:4b:a2:64:34:2f:f4:58:
         32:77:a0:ea:04:59:11:36:e3:ab:76:ff:6a:98:e1:3d:4e:ac:
         46:fd:32:6f:c5:0d:27:d6:d5:30:37:92:0f:31:a9:20:2a:a2:
         01:98:b1:be:ea:59:06:80:d2:4b:15:af:b1:df:43:fc:95:11:
         fd:ea:6b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----