Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File:                     l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier:          1cBQllsEPMwczLHwU1qLLgg/L4r/DvKAtBQKnnk/0l4=
Subject key identifier:   D9:46:51:DF:39:6B:87:4A:5B:42:5A:DC:AD:D1:0C:02:B3:9F:FD:78
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer:       /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial:       0512
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number:          0511
Signing time:             Tue 27 Oct 2026 03:23:54 +0000
Manifest this update:     Tue 27 Oct 2026 03:23:54 +0000
Manifest next update:     Thu 29 Oct 2026 03:23:54 +0000
Files and hashes:         1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: Y1EhPIiIVs6sSaHfLs49V9qcKiLy3/ZcwEdT0RvRsE0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 03:23:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1298 (0x512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AF, serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
        Validity
            Not Before: Oct 27 03:23:54 2026 GMT
            Not After : Oct 29 03:23:54 2026 GMT
        Subject: CN=6ae0194a-e919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:67:fc:e9:74:6c:29:0c:e6:b7:79:0c:4e:
                    9b:8c:b1:cc:1b:ed:cf:4d:1e:12:4e:4d:a1:e5:e4:
                    0d:07:a9:ea:73:57:3e:99:bb:63:e2:72:b1:b7:dd:
                    18:6a:a2:c1:0d:16:fa:07:9c:52:56:b7:7a:28:cb:
                    c9:f5:a6:b0:5c:c9:23:e2:39:e0:bc:f4:12:53:5f:
                    fc:ae:bf:9c:fc:0b:fe:e9:3d:96:73:2c:fc:fb:9a:
                    ff:3d:8e:8d:2a:15:10:6e:12:61:c9:13:03:e8:d9:
                    6e:12:be:36:e3:a7:42:bd:26:40:b1:0e:a7:c8:e2:
                    31:b1:3c:fd:7a:e5:85:46:aa:bd:31:e7:91:90:87:
                    c5:cb:c2:d2:be:bb:6c:40:a5:2a:d0:03:3d:74:73:
                    98:94:d3:ca:f0:6e:5e:32:c5:7d:d9:a9:31:da:53:
                    c8:b6:59:bb:65:3a:25:21:c5:7a:ec:5c:36:70:c3:
                    76:c0:cb:82:50:3c:0c:80:5b:f1:df:60:61:a5:55:
                    74:e4:c1:44:7a:31:86:7c:61:91:af:1d:fa:67:20:
                    b1:4b:61:3a:34:49:45:9d:b9:2a:49:43:ba:a8:0e:
                    3e:8d:02:6e:b8:7b:02:16:f8:be:64:36:bf:94:ea:
                    25:79:98:20:55:eb:7c:23:3b:69:95:66:27:26:a3:
                    0d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:46:51:DF:39:6B:87:4A:5B:42:5A:DC:AD:D1:0C:02:B3:9F:FD:78
            X509v3 Authority Key Identifier:
                keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:ab:5c:bb:f3:bf:c7:e4:c3:42:99:09:06:88:fe:e1:0c:33:
         42:89:b6:1e:20:96:8c:d4:40:d6:85:8a:12:79:5c:8f:c9:2d:
         10:3c:22:fa:e0:48:1f:4c:99:ff:64:27:c9:0b:f4:e0:7d:b2:
         d6:e2:d9:6e:68:a7:6a:cc:8b:3f:a3:f8:62:b4:ba:b4:44:06:
         94:61:26:66:57:41:49:06:4f:23:cc:14:dd:35:4a:27:8d:26:
         dd:fd:96:ef:bc:05:7c:0c:34:a7:1e:b1:9b:e7:cc:bf:a9:c4:
         1c:86:38:14:c1:8e:35:12:ae:e6:f9:54:dd:80:2b:59:51:c0:
         f0:e1:1b:1f:f0:ec:07:bf:41:29:3d:a9:b4:6b:aa:55:5f:d2:
         58:4b:53:66:b8:b5:b9:6f:cb:17:9d:c7:7c:98:88:f9:2f:74:
         29:94:67:35:72:05:e6:ee:7f:de:7a:9c:7c:9b:22:e0:79:e1:
         a0:eb:cf:d2:ef:60:6f:1f:7e:93:21:e0:85:af:1e:99:38:69:
         6e:db:b9:65:db:3f:34:1c:90:28:2d:72:be:f1:5f:92:e2:9b:
         9a:0d:ae:da:99:40:77:9e:bf:55:9d:e6:0d:1f:01:99:09:d2:
         86:c4:f7:be:1b:a2:d2:24:10:db:df:e1:99:52:b5:b1:50:43:
         2d:6c:37:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----