Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
File:                     A7HsVImnJFpUDQglPfhVKV6iF1s.mft (raw, json)
Hash identifier:          8Q6tmnmpgAcH6elxtIbOeNu+An6mEm8RvvfIuKFqQFM=
Subject key identifier:   18:F5:C5:BC:7A:22:11:19:D9:66:70:3D:4B:30:6F:D8:F7:9D:FF:3B
Authority key identifier: 03:B1:EC:54:89:A7:24:5A:54:0D:08:25:3D:F8:55:29:5E:A2:17:5B
Certificate issuer:       /CN=F361B707AF/serialNumber=03B1EC5489A7245A540D08253DF855295EA2175B
Certificate serial:       01E8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
Manifest number:          01E4
Signing time:             Tue 27 Oct 2026 04:58:39 +0000
Manifest this update:     Tue 27 Oct 2026 04:58:38 +0000
Manifest next update:     Thu 29 Oct 2026 04:58:38 +0000
Files and hashes:         1: A7HsVImnJFpUDQglPfhVKV6iF1s.crl (hash: QyKR7g9/kVRoO/X67kLFhWJ8caBZ1YHd7IvamlR/m0k=)
                          2: CB94846E5D6211F0B1684ACBDAE4EC9C.roa (hash: q7K9u94mHC6e9oaI7qiGUP+yKcVwp0btej/mCAe6shI=)
                          3: ADE00A565D6211F098A518CBDAE4EC9C.roa (hash: jpOBdkhBjVVYI3nmszZNhPcIYkBWvx4dgsFhzZiXUPs=)
                          4: 75866D765D6211F093F8A7CADAE4EC9C.roa (hash: UWso/XNlMKwadlU6ptT5mDWK+nIqDiP9OSyNwe4vkPQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 04:58:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 488 (0x1e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B707AF, serialNumber=03B1EC5489A7245A540D08253DF855295EA2175B
        Validity
            Not Before: Oct 27 04:58:38 2026 GMT
            Not After : Oct 29 04:58:38 2026 GMT
        Subject: CN=6ae02f7f-cbf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1c:5e:3d:30:eb:f8:5d:0a:52:95:6d:b9:a7:
                    65:a3:6e:5c:e5:b1:6b:43:bb:98:4a:85:93:85:e1:
                    6b:f5:e1:b0:d0:13:0a:3f:50:1c:70:93:a6:20:a6:
                    9f:67:e4:9f:b7:f4:97:66:ed:88:16:e9:bd:30:5d:
                    b3:5c:93:77:f0:c7:b8:19:e6:0a:65:2d:a4:d6:b4:
                    03:7d:ba:5d:58:ba:9b:1d:e8:01:bb:bb:31:55:dc:
                    f7:47:67:2f:e7:40:4d:76:71:dd:3d:67:15:1e:6a:
                    6b:9e:b9:06:e3:64:15:55:53:56:ff:26:2e:74:d7:
                    2e:af:f2:ee:44:6d:7f:c9:b7:f5:41:31:56:33:65:
                    6e:44:2a:82:b0:cb:3f:e4:ba:f4:74:63:9a:92:f2:
                    7f:9c:a3:9e:af:ed:e6:bf:13:59:02:42:c1:11:41:
                    a2:ab:e9:17:96:87:d8:2d:e9:72:68:19:24:a0:5d:
                    7b:eb:22:54:bc:53:90:6c:81:cc:f9:20:5a:ed:26:
                    d5:05:5e:52:1f:43:62:6e:5e:2b:ae:b4:09:fd:b0:
                    b6:27:dc:27:59:20:cb:65:ae:ed:38:01:d5:6f:f1:
                    b0:92:4c:8d:66:6d:a6:a8:ef:60:3e:59:c2:2b:c3:
                    df:38:82:04:73:2d:c7:64:a9:a0:57:d7:03:15:1f:
                    56:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F5:C5:BC:7A:22:11:19:D9:66:70:3D:4B:30:6F:D8:F7:9D:FF:3B
            X509v3 Authority Key Identifier:
                keyid:03:B1:EC:54:89:A7:24:5A:54:0D:08:25:3D:F8:55:29:5E:A2:17:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:86:1e:21:82:b2:eb:c0:ec:d2:94:d8:87:21:41:4a:95:86:
         7b:b6:39:48:00:98:16:01:06:e8:b5:ff:da:e7:1c:59:0c:17:
         0c:da:45:e4:64:d1:a3:e9:88:13:4d:60:67:8a:2c:c9:b6:90:
         6c:26:64:e9:f1:8f:87:df:04:58:0e:47:f7:6a:63:63:46:38:
         aa:7a:25:b3:b9:9f:02:97:71:f0:07:76:96:95:42:cb:08:6b:
         b5:c1:3d:5d:ca:2b:f2:bc:51:ef:d5:13:da:97:46:38:7e:1a:
         71:e3:e7:6f:0b:7c:6c:29:2a:cf:67:8d:87:56:10:cb:17:32:
         1b:42:91:29:a6:3b:7a:63:36:3b:7e:f4:7e:ee:a2:ea:2f:84:
         76:61:e6:b7:e7:b4:80:f3:93:b9:34:96:68:4a:05:6d:60:cc:
         21:39:76:a0:99:fc:e7:94:77:45:63:e1:f6:b6:5b:19:92:14:
         ff:32:62:3e:95:01:b9:3f:79:3d:18:a2:e0:05:a0:55:e5:36:
         72:5e:58:74:48:f0:4e:ed:5d:06:78:3d:2f:1e:ab:53:e6:be:
         3d:f5:78:f5:87:c5:ab:49:e6:a2:d7:59:02:06:09:f7:cc:f4:
         b4:be:9e:5b:8f:09:cf:03:ff:56:fb:55:fb:57:2b:f1:f5:df:
         1e:56:80:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----