Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
File:                     ksorQe7D4BoZOJ4iIIisP8OhSO0.mft (raw, json)
Hash identifier:          LFL/h1GzQx7XAZ/rXWaOhWyUzPVlD0ENhdXkgzbwr3Y=
Subject key identifier:   14:65:86:C8:49:93:2B:BE:66:24:AF:D0:CC:28:CC:31:59:BF:E4:E1
Authority key identifier: 92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED
Certificate issuer:       /CN=F3624132AF/serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
Certificate serial:       0298
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
Manifest number:          0295
Signing time:             Sun 25 Oct 2026 04:43:15 +0000
Manifest this update:     Sun 25 Oct 2026 04:43:14 +0000
Manifest next update:     Tue 27 Oct 2026 04:43:14 +0000
Files and hashes:         1: ksorQe7D4BoZOJ4iIIisP8OhSO0.crl (hash: 1g4ylE9aZJYeMz1arXmdasflbntEncFY/vz7alXBhlI=)
                          2: C70D3CD6CAC811F18E355D19CF1D38B0.roa (hash: 9Aws68q26O5OPREc2ABkUrqzrNk23ol5933YTYpYr9k=)
                          3: 2C6E0438D1B111EFAE9F9072762E951A.roa (hash: B0CbiM/bAowuKqrYGTi8MxK8c+r/1xQQXbcFOdolRIY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 664 (0x298)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624132AF, serialNumber=92CA2B41EEC3E01A19389E222088AC3FC3A148ED
        Validity
            Not Before: Oct 25 04:43:14 2026 GMT
            Not After : Oct 27 04:43:14 2026 GMT
        Subject: CN=6add88e3-ffe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4b:c2:24:52:96:42:1f:58:06:ed:b9:fd:da:
                    fa:32:52:ad:b9:8e:f8:91:81:51:1a:20:6f:99:cb:
                    19:86:49:42:11:c2:82:88:22:1a:7d:0b:51:09:d3:
                    03:5a:0d:46:60:82:5c:e6:f6:4a:31:f8:e5:1b:92:
                    85:a2:48:a1:b7:41:1a:e1:de:2c:9b:01:5d:63:a1:
                    90:2a:24:44:9b:ec:1c:10:3d:a4:e1:62:77:ac:f1:
                    26:fe:4c:e7:79:8b:14:43:f0:e3:81:70:59:06:8e:
                    4c:ba:e1:bb:2b:96:4c:5f:12:37:37:e6:0d:22:3d:
                    6a:e7:f4:49:c4:93:3b:6f:d1:33:51:52:68:de:0e:
                    9e:05:c0:8f:52:cb:0d:49:3f:e3:9e:c0:d1:6e:e9:
                    26:19:d9:38:9d:e0:3b:0c:85:92:96:e4:b6:28:39:
                    aa:b3:de:7d:4a:3c:fc:ce:a2:6a:44:c3:36:1a:e6:
                    10:c4:67:0e:66:49:0d:98:ee:e6:67:1a:44:ed:9b:
                    02:e3:48:23:b7:58:02:a8:74:97:96:55:d7:e2:fb:
                    2b:83:4d:41:09:0c:88:45:88:20:1d:83:d2:7d:59:
                    43:6a:12:13:12:49:ed:6d:88:08:0a:88:eb:ed:46:
                    54:22:86:4b:ac:20:c7:ba:79:48:cc:d9:24:99:f5:
                    f4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:65:86:C8:49:93:2B:BE:66:24:AF:D0:CC:28:CC:31:59:BF:E4:E1
            X509v3 Authority Key Identifier:
                keyid:92:CA:2B:41:EE:C3:E0:1A:19:38:9E:22:20:88:AC:3F:C3:A1:48:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ksorQe7D4BoZOJ4iIIisP8OhSO0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624132/8BFBD952D1AC11EFA5D11655762E951A/ksorQe7D4BoZOJ4iIIisP8OhSO0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:11:93:3b:3a:09:5e:fa:88:df:8d:97:e1:c9:c2:f0:93:8e:
         b1:1a:1e:b5:4e:70:04:fe:78:25:f5:68:0f:bb:10:c8:0f:35:
         e8:e9:78:48:0e:88:14:46:87:5a:65:9f:9b:a8:55:54:89:37:
         9a:bd:0f:36:f1:8a:62:89:7a:8b:0d:2a:9c:fe:ec:82:c7:de:
         de:39:9b:5a:d5:e1:c4:eb:70:fa:6d:62:89:54:c0:aa:bf:fd:
         6c:fa:c3:cd:fa:eb:0d:54:b7:29:30:00:14:45:89:8f:1a:71:
         14:a6:b0:c5:ec:15:fa:29:a4:5d:87:78:04:92:28:ee:21:3c:
         6b:af:24:90:f1:a7:b6:fe:2c:1b:1d:f7:84:5d:0c:ea:a3:e9:
         71:34:26:88:f8:37:ca:70:73:ae:97:8b:71:17:0f:d2:ba:76:
         85:92:59:89:e4:8d:69:21:36:1f:a0:a2:8f:65:30:60:b0:51:
         88:34:f8:43:84:bd:5c:0d:23:cf:d2:41:07:f4:b6:6e:4d:82:
         b2:1b:fd:b4:2d:14:59:f2:4a:6d:e5:ae:8c:55:40:73:72:f6:
         20:0f:93:a3:bd:84:91:48:56:e7:b9:03:05:51:29:97:ac:8f:
         95:47:b4:35:d5:9a:10:60:9d:8b:de:05:28:f7:8e:98:64:a0:
         37:04:f4:8b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICApgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjQxMzJBRjExMC8GA1UEBRMoOTJDQTJCNDFFRUMzRTAxQTE5Mzg5RTIyMjA4OEFD
M0ZDM0ExNDhFRDAeFw0yNjEwMjUwNDQzMTRaFw0yNjEwMjcwNDQzMTRaMBgxFjAU
BgNVBAMTDTZhZGQ4OGUzLWZmZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJS8IkUpZCH1gG7bn92voyUq25jviRgVEaIG+ZyxmGSUIRwoKIIhp9C1EJ
0wNaDUZgglzm9kox+OUbkoWiSKG3QRrh3iybAV1joZAqJESb7BwQPaThYnes8Sb+
TOd5ixRD8OOBcFkGjky64bsrlkxfEjc35g0iPWrn9EnEkztv0TNRUmjeDp4FwI9S
yw1JP+OewNFu6SYZ2Tid4DsMhZKW5LYoOaqz3n1KPPzOompEwzYa5hDEZw5mSQ2Y
7uZnGkTtmwLjSCO3WAKodJeWVdfi+yuDTUEJDIhFiCAdg9J9WUNqEhMSSe1tiAgK
iOvtRlQihkusIMe6eUjM2SSZ9fSDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFGWG
yEmTK75mJK/QzCjMMVm/5OEwHwYDVR0jBBgwFoAUksorQe7D4BoZOJ4iIIisP8Oh
SO0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0MTMyLzhCRkJEOTUyRDFBQzExRUZBNUQxMTY1NTc2MkU5NTFBL2tzb3JR
ZTdENEJvWk9KNGlJSWlzUDhPaFNPMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2tzb3JRZTdENEJvWk9KNGlJSWlzUDhPaFNPMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjQxMzIvOEJGQkQ5NTJEMUFDMTFFRkE1RDExNjU1NzYy
RTk1MUEva3NvclFlN0Q0Qm9aT0o0aUlJaXNQOE9oU08wLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALEZM7Ogle+ojfjZfhycLwk46xGh61
TnAE/ngl9WgPuxDIDzXo6XhIDogURodaZZ+bqFVUiTeavQ828YpiiXqLDSqc/uyC
x97eOZta1eHE63D6bWKJVMCqv/1s+sPN+usNVLcpMAAURYmPGnEUprDF7BX6KaRd
h3gEkijuITxrrySQ8ae2/iwbHfeEXQzqo+lxNCaI+DfKcHOul4txFw/SunaFklmJ
5I1pITYfoKKPZTBgsFGINPhDhL1cDSPP0kEH9LZuTYKyG/20LRRZ8kpt5a6MVUBz
cvYgD5OjvYSRSFbnuQMFUSmXrI+VR7Q11ZoQYJ2L3gUo946YZKA3BPSL
-----END CERTIFICATE-----