Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
File:                     XTIRwmpetGVqxFtni0_0vyQECa4.mft (raw, json)
Hash identifier:          BQRgSsHw5Mlos0wt99LMVy4ln4H4+wFcjeZY4FZ3WOI=
Subject key identifier:   6F:16:EF:18:1C:AA:84:60:64:53:13:BC:75:1A:06:08:DD:AF:CB:B5
Authority key identifier: 5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE
Certificate issuer:       /CN=F3625046AF/serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
Certificate serial:       030D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
Manifest number:          030B
Signing time:             Tue 27 Oct 2026 04:31:09 +0000
Manifest this update:     Tue 27 Oct 2026 04:31:09 +0000
Manifest next update:     Thu 29 Oct 2026 04:31:09 +0000
Files and hashes:         1: XTIRwmpetGVqxFtni0_0vyQECa4.crl (hash: 1/jh7w3wde8FEsnpfmqNQLhOzC9ZFi39OuTxMTT7DQc=)
                          2: 9643C3ACBFEF11F085B1BFE1DAE4EC9C.roa (hash: 2uFOUkSFKVasJhOLfUiTVE3r4VWf4k4tupX7FNxvep4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 781 (0x30d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3625046AF, serialNumber=5D3211C26A5EB4656AC45B678B4FF4BF240409AE
        Validity
            Not Before: Oct 27 04:31:09 2026 GMT
            Not After : Oct 29 04:31:09 2026 GMT
        Subject: CN=6ae0290d-7705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:be:9e:56:76:9e:65:cb:f9:bb:c5:df:d0:ef:
                    73:1d:ee:d4:0f:4e:83:f0:63:ca:56:7f:ba:32:97:
                    0c:9c:56:43:c8:8f:73:d8:a8:80:2b:cb:e9:e2:6d:
                    47:a3:56:d9:22:81:4a:d9:8e:c2:b0:19:08:04:89:
                    eb:6d:f1:84:ac:37:44:b5:9a:14:54:d8:6a:3b:cb:
                    53:49:4b:4d:43:fb:b6:8f:26:81:d1:f4:a1:dd:89:
                    3f:5f:19:8d:ba:83:59:c2:17:48:a1:e5:10:a8:63:
                    44:b6:27:9f:f1:dc:87:00:12:b2:9f:15:c4:76:d0:
                    98:a6:5b:4d:c0:a7:e8:c7:6f:33:3e:60:32:e2:1b:
                    f4:d9:12:ff:38:d7:69:fc:cf:ea:87:e1:23:35:7c:
                    4b:24:00:f4:7d:7b:c4:a3:a7:4a:0d:a8:7a:fc:b5:
                    35:8f:f0:b4:d4:b9:fd:61:b3:3d:60:e4:0d:6b:7c:
                    00:b4:c6:55:1e:7f:84:f3:1f:02:cc:b9:cf:fb:d6:
                    19:f0:66:91:4d:63:53:47:fc:0c:10:f1:45:8b:97:
                    a4:fc:97:66:34:11:db:d8:6e:77:70:36:ac:21:a8:
                    00:09:80:4a:ab:74:91:e9:81:ea:a0:3a:94:11:f7:
                    c9:cb:9a:9c:ae:05:58:f0:80:3f:a4:81:3a:0a:f0:
                    ab:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:16:EF:18:1C:AA:84:60:64:53:13:BC:75:1A:06:08:DD:AF:CB:B5
            X509v3 Authority Key Identifier:
                keyid:5D:32:11:C2:6A:5E:B4:65:6A:C4:5B:67:8B:4F:F4:BF:24:04:09:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XTIRwmpetGVqxFtni0_0vyQECa4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3625046/9BC19E3079C811EF9E0A858F762E951A/XTIRwmpetGVqxFtni0_0vyQECa4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:79:ef:98:45:a2:35:7a:84:2a:68:04:54:b1:57:5e:89:19:
         22:cf:0e:57:8e:87:8a:88:de:f1:09:e4:67:d7:0c:28:c9:5a:
         58:3c:ca:37:23:da:94:a5:69:1c:d6:81:49:1a:9e:88:59:92:
         ab:a1:75:f3:27:19:4a:ad:c7:ec:7f:93:a2:e4:88:5c:72:5a:
         5d:b7:a4:77:dc:96:71:e9:54:9f:8b:8e:25:5e:ee:21:39:ab:
         ee:5f:93:e0:d9:0c:03:e9:85:08:fc:cb:98:37:f4:23:9c:d8:
         c6:f2:e0:be:67:87:16:48:b8:13:45:3c:b2:07:57:c6:38:5c:
         4c:88:b3:67:98:fe:14:8e:0a:7d:e6:ef:eb:d3:49:81:1b:92:
         0a:8a:82:56:c7:39:1e:a9:81:65:c2:5d:11:48:a6:83:eb:b1:
         7d:d7:2d:ef:8f:4d:5b:90:62:7c:cf:14:73:f7:51:6e:6a:bc:
         64:27:d7:68:c5:6b:af:b8:c0:db:87:b6:fd:38:96:d5:39:11:
         45:a8:25:97:20:ea:3a:8b:41:cd:68:ae:8b:41:ab:90:53:92:
         c9:70:51:0d:93:8b:dc:a3:d5:db:82:14:89:1b:d5:f1:b0:da:
         a7:ff:5d:ef:35:8f:3d:e7:3a:f8:5a:18:64:d3:13:24:53:0d:
         09:19:d7:ed
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAw0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjUwNDZBRjExMC8GA1UEBRMoNUQzMjExQzI2QTVFQjQ2NTZBQzQ1QjY3OEI0RkY0
QkYyNDA0MDlBRTAeFw0yNjEwMjcwNDMxMDlaFw0yNjEwMjkwNDMxMDlaMBgxFjAU
BgNVBAMTDTZhZTAyOTBkLTc3MDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCvp5Wdp5ly/m7xd/Q73Md7tQPToPwY8pWf7oylwycVkPIj3PYqIAry+ni
bUejVtkigUrZjsKwGQgEiett8YSsN0S1mhRU2Go7y1NJS01D+7aPJoHR9KHdiT9f
GY26g1nCF0ih5RCoY0S2J5/x3IcAErKfFcR20JimW03Ap+jHbzM+YDLiG/TZEv84
12n8z+qH4SM1fEskAPR9e8Sjp0oNqHr8tTWP8LTUuf1hsz1g5A1rfAC0xlUef4Tz
HwLMuc/71hnwZpFNY1NH/AwQ8UWLl6T8l2Y0EdvYbndwNqwhqAAJgEqrdJHpgeqg
OpQR98nLmpyuBVjwgD+kgToK8KsBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbxbv
GByqhGBkUxO8dRoGCN2vy7UwHwYDVR0jBBgwFoAUXTIRwmpetGVqxFtni0/0vyQE
Ca4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI1MDQ2LzlCQzE5RTMwNzlDODExRUY5RTBBODU4Rjc2MkU5NTFBL1hUSVJ3
bXBldEdWcXhGdG5pMF8wdnlRRUNhNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1hUSVJ3bXBldEdWcXhGdG5pMF8wdnlRRUNhNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjUwNDYvOUJDMTlFMzA3OUM4MTFFRjlFMEE4NThGNzYy
RTk1MUEvWFRJUndtcGV0R1ZxeEZ0bmkwXzB2eVFFQ2E0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWee+YRaI1eoQqaARUsVdeiRkizw5X
joeKiN7xCeRn1wwoyVpYPMo3I9qUpWkc1oFJGp6IWZKroXXzJxlKrcfsf5Oi5Ihc
clpdt6R33JZx6VSfi44lXu4hOavuX5Pg2QwD6YUI/MuYN/QjnNjG8uC+Z4cWSLgT
RTyyB1fGOFxMiLNnmP4Ujgp95u/r00mBG5IKioJWxzkeqYFlwl0RSKaD67F91y3v
j01bkGJ8zxRz91FuarxkJ9doxWuvuMDbh7b9OJbVORFFqCWXIOo6i0HNaK6LQauQ
U5LJcFENk4vco9XbghSJG9XxsNqn/13vNY895zr4Whhk0xMkUw0JGdft
-----END CERTIFICATE-----