Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
File:                     cvCHQUzi30S8T03_W-EUenpxqa4.mft (raw, json)
Hash identifier:          ZSXcGt6ewvzOjlY8sE7/NNnV9Pybjy73nptexVO80fc=
Subject key identifier:   CA:53:7E:4E:6A:E0:30:19:3F:40:C7:FC:75:DD:7D:B1:84:89:BD:0E
Authority key identifier: 72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE
Certificate issuer:       /CN=F3617560AP/serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
Certificate serial:       0659
Authority info access:    rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
Manifest number:          0653
Signing time:             Wed 07 Oct 2026 02:47:21 +0000
Manifest this update:     Wed 07 Oct 2026 02:47:20 +0000
Manifest next update:     Fri 09 Oct 2026 02:47:20 +0000
Files and hashes:         1: cvCHQUzi30S8T03_W-EUenpxqa4.crl (hash: mA24otDm7iNBg7LoaNzrnJby5xSU8FkYRZ+gNcJC1bo=)
                          2: 146B573C60AD11F1AA74EDCDCE1D38B0.roa (hash: b44hl5ns1GejqBDlBZqqeabDZjHSwkcNtGvmLapzA6g=)
                          3: A0ACF8CC60AD11F198FD15D2CE1D38B0.roa (hash: D1G83oNUfroyGNdogOzA5OFUfJuI2+DJ1eGJKNjaIbo=)
                          4: 875A2E2860AB11F1B54351C5CE1D38B0.roa (hash: ivxFjeduGSxxhWdAOPw6gvRhK1fIbKwK86DvK7nxOdw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                          rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.crl
                          rsync://rpki.afrinic.net/repository/apnic/bxoQPhQn_wNIOr_Z402svhUk_4s.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/apnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 00:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1625 (0x659)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617560AP, serialNumber=72F087414CE2DF44BC4F4DFF5BE1147A7A71A9AE
        Validity
            Not Before: Oct  7 02:47:20 2026 GMT
            Not After : Oct  9 02:47:20 2026 GMT
        Subject: CN=6ac5b2b9-76cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:f5:b9:99:0c:10:f1:a6:62:b2:84:92:57:ea:
                    dc:28:c7:5a:e7:b2:39:32:b9:10:76:f5:a4:0a:25:
                    6d:bb:c4:6b:99:03:2d:ed:0c:a1:e7:df:ed:9e:fb:
                    76:a9:b1:a1:35:2d:bc:70:b7:fb:b4:14:1e:82:b1:
                    95:f7:fe:68:2f:22:fe:52:fd:b3:4a:73:fb:e0:17:
                    be:f7:94:7b:c6:38:aa:51:c6:00:cd:bf:96:f5:b4:
                    1f:db:b5:7c:66:66:a5:fb:5f:98:5b:b3:51:84:37:
                    04:90:b0:b1:3a:7b:27:1c:df:b2:5d:9e:a1:28:7a:
                    9d:b2:07:b9:52:49:e6:e4:0a:a8:4c:03:9a:ec:89:
                    f3:7e:9e:1a:78:b8:cb:62:13:3f:63:97:c7:ec:84:
                    b0:30:72:a6:dc:75:d2:13:ad:02:da:c6:88:b1:34:
                    87:16:5a:e4:19:d2:ea:9b:03:9d:fe:34:33:18:4d:
                    de:6e:fd:7f:63:d8:0f:dd:18:d4:83:3d:2a:3b:5a:
                    2c:18:c5:a1:ff:c3:99:d5:6c:28:3c:fd:18:c8:d8:
                    87:5b:ce:92:c5:1c:68:ed:71:6b:0c:ba:61:d4:30:
                    d9:8f:99:f7:72:57:60:a2:0b:c1:76:d4:3d:86:8e:
                    d6:d9:53:53:97:d2:9e:cf:fe:0c:01:b5:ae:ee:65:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:53:7E:4E:6A:E0:30:19:3F:40:C7:FC:75:DD:7D:B1:84:89:BD:0E
            X509v3 Authority Key Identifier:
                keyid:72:F0:87:41:4C:E2:DF:44:BC:4F:4D:FF:5B:E1:14:7A:7A:71:A9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/apnic/cvCHQUzi30S8T03_W-EUenpxqa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617560/1E87958AF25911ECB1BDF2C1F1222468/cvCHQUzi30S8T03_W-EUenpxqa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:ce:41:5a:43:ad:63:ad:b4:52:bb:3e:c3:b0:54:1f:84:2b:
         8f:3b:75:39:95:29:c0:35:4f:8b:76:39:31:f3:45:49:4a:b7:
         4d:0c:af:ae:c2:52:de:93:4d:ce:42:8f:43:96:57:02:ad:4c:
         38:52:8c:0e:cc:93:85:da:b7:62:4c:f7:b3:cb:ce:a1:06:f9:
         de:84:96:63:04:40:21:27:6d:ba:53:1c:68:12:b0:5b:0e:69:
         70:46:22:15:83:6e:60:e5:c9:2b:72:82:a3:e4:8a:25:bf:4b:
         9d:ce:3e:67:52:44:7d:b9:3f:7c:0f:1c:d1:83:e9:e9:94:8a:
         80:cd:5e:b2:53:7a:89:09:de:00:c4:e7:75:6e:fe:4c:dc:35:
         4d:ad:bf:eb:ae:70:36:72:6d:e6:63:58:17:56:4f:18:0c:7b:
         51:26:d7:41:7c:ff:81:fe:c8:cb:46:6e:7f:96:52:b5:09:76:
         50:30:36:fe:34:5e:c4:03:23:fd:20:e3:4a:ba:2a:c8:10:b8:
         2c:34:26:ad:64:92:8e:a3:3d:92:43:6a:d6:ec:ff:b7:48:54:
         5d:9a:d1:37:67:0b:67:08:7c:38:86:bb:21:53:24:45:23:3b:
         5c:2b:a7:06:0e:b4:1a:44:29:23:28:b2:ce:ef:7d:43:e6:8b:
         0c:ed:02:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----