Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
File:                     q1UdEIRQYI699UDKEhmyuEf2Xr0.mft (raw, json)
Hash identifier:          XIdbQCB1BElnleN8T8f9iDV8pfxIxPhoIHOirLO8Ih4=
Subject key identifier:   75:17:04:0A:35:BF:CC:EF:0B:55:B7:21:17:A3:0D:D4:C2:F5:B5:F7
Authority key identifier: AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD
Certificate issuer:       /CN=F36145DBAR/serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
Certificate serial:       0528
Authority info access:    rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
Manifest number:          0525
Signing time:             Sun 27 Sep 2026 03:21:37 +0000
Manifest this update:     Sun 27 Sep 2026 03:21:36 +0000
Manifest next update:     Tue 29 Sep 2026 03:21:36 +0000
Files and hashes:         1: q1UdEIRQYI699UDKEhmyuEf2Xr0.crl (hash: r/TH6LVnrGqoMXlMWP8OqIFdLAaBkPkZwB7OZOIpCw8=)
                          2: DCEF064806A011F1B36287C7DAE4EC9C.roa (hash: ajagmqaYlHIhmUkcnu2Tjo9dtK+0faaL3lJJd/HPb1o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
                          rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1320 (0x528)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36145DBAR, serialNumber=AB551D108450608EBDF540CA1219B2B847F65EBD
        Validity
            Not Before: Sep 27 03:21:36 2026 GMT
            Not After : Sep 29 03:21:36 2026 GMT
        Subject: CN=6ab88bc1-8966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b8:69:f9:46:01:54:88:bb:af:d1:f6:94:15:
                    2e:e1:b3:dc:13:0e:af:1a:c5:7a:fb:7b:0d:8f:c1:
                    25:ed:aa:96:66:14:27:32:7a:97:03:e9:fb:35:7e:
                    4c:f5:b1:b9:a1:54:94:ed:66:6a:31:29:a0:c9:2e:
                    3d:00:52:2c:69:ba:ea:30:06:94:2e:f8:45:03:43:
                    da:58:a0:cd:92:f6:a3:66:4e:d4:91:3a:bf:cf:57:
                    dd:f3:f6:38:07:ff:8d:56:c9:86:4f:b9:28:cd:eb:
                    cd:88:37:f7:5e:b5:a3:76:de:99:91:d8:87:1e:91:
                    1d:9a:a9:ed:07:fb:36:76:1f:a3:d1:3d:1a:96:6e:
                    a3:c6:c6:8f:62:c3:1d:b8:71:3e:db:f7:c6:b9:50:
                    95:85:13:da:5b:1c:49:de:ef:fd:9d:66:27:34:5e:
                    da:f0:76:61:c8:19:88:b0:cf:73:f3:02:cf:47:4e:
                    29:75:ea:57:a3:86:d2:91:fe:ae:a8:06:07:a6:2d:
                    ae:56:41:a2:f2:fe:02:ba:8e:10:4f:56:39:1e:94:
                    f5:70:95:7c:d9:22:fb:5b:9e:30:63:bf:34:6f:64:
                    14:c0:70:d7:02:b0:d1:f6:3c:73:8e:48:ee:a5:5d:
                    aa:a5:53:10:b9:b6:0b:bf:22:3b:5d:13:40:46:86:
                    0b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:17:04:0A:35:BF:CC:EF:0B:55:B7:21:17:A3:0D:D4:C2:F5:B5:F7
            X509v3 Authority Key Identifier:
                keyid:AB:55:1D:10:84:50:60:8E:BD:F5:40:CA:12:19:B2:B8:47:F6:5E:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/q1UdEIRQYI699UDKEhmyuEf2Xr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36145DB/7A6622D4CA2811ED8C0AD095F1222468/q1UdEIRQYI699UDKEhmyuEf2Xr0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:22:c1:7c:1c:b9:07:29:f0:a3:37:d2:1c:bc:a1:5e:ac:5e:
         87:29:5b:ab:92:0c:ae:9e:57:6c:14:23:eb:39:b3:b3:cc:ad:
         5e:23:0d:40:e2:a7:28:9a:d4:91:a0:ad:b7:c6:bc:1c:36:1c:
         49:74:0b:b7:0f:00:21:36:ba:a5:c5:ff:ac:02:20:77:03:b7:
         fb:47:70:cd:85:5f:0a:31:c5:6e:06:ab:70:8f:b9:57:d7:75:
         88:8e:52:e8:3f:57:68:6e:09:e2:13:31:50:20:cb:65:d2:b0:
         77:fe:36:65:52:45:d8:96:10:26:4c:28:35:85:46:b1:ad:50:
         2a:2c:54:aa:85:e8:8f:9e:52:ff:45:80:54:f2:ac:f4:d9:0a:
         48:5b:37:e2:18:d6:0b:eb:d8:f0:40:84:00:b6:87:05:33:a9:
         b5:c6:f5:71:22:0d:4d:70:37:c4:e1:be:53:5b:2e:af:07:e3:
         a7:11:3b:30:1e:9c:79:ce:87:2b:61:68:d0:07:60:b8:2a:b8:
         f4:5c:6e:16:f0:85:4a:f1:8a:18:03:8a:41:c0:dd:16:34:36:
         9b:53:db:68:b3:a5:20:27:83:b5:e8:79:b6:63:17:7d:24:66:
         80:94:e5:56:85:ac:9b:35:5e:b6:42:4c:94:d6:1a:7d:98:86:
         de:36:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----