Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
File:                     kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft (raw, json)
Hash identifier:          hft79yKdKbrO62mzM0He5bfYvuCxfea/GqR8jz6BXcA=
Subject key identifier:   AB:58:2B:37:7E:2F:28:77:84:51:A1:F9:11:FE:FB:04:3A:B8:02:60
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Certificate issuer:       /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial:       0AE1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
Manifest number:          0AD9
Signing time:             Tue 27 Oct 2026 01:23:27 +0000
Manifest this update:     Tue 27 Oct 2026 01:23:27 +0000
Manifest next update:     Thu 29 Oct 2026 01:23:27 +0000
Files and hashes:         1: kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl (hash: mKoLhoJ/BWDhK0YbRQ49C1ngJnDD9fkTn52ABCRwccM=)
                          2: B2B71F48BBB711F0A55267C8DAE4EC9C.roa (hash: kChp13s64I7ds7m3cFb8J8f9uZBGgnrFBEhdaD7OJR0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                          rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2785 (0xae1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AR, serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
        Validity
            Not Before: Oct 27 01:23:27 2026 GMT
            Not After : Oct 29 01:23:27 2026 GMT
        Subject: CN=6adffd0f-99ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:78:5d:1e:f0:52:05:de:9f:8e:f9:24:70:12:
                    66:b5:ce:d7:47:9d:fe:85:2e:d0:13:11:4a:28:e0:
                    8a:f4:96:7c:86:58:03:1a:ce:6a:f5:02:fc:0b:b5:
                    84:49:7a:35:d3:26:ed:42:c9:b5:ee:e7:28:0e:86:
                    26:8b:c0:77:93:a2:3a:1b:08:83:d5:c1:1e:15:7e:
                    99:6c:31:fe:44:55:7a:af:33:4b:a0:91:e1:91:d4:
                    87:7e:22:c3:70:b3:ac:41:76:ec:4b:2f:63:aa:05:
                    b8:ce:96:8b:85:62:a5:64:66:52:06:9b:09:97:45:
                    b5:65:ec:71:58:e4:99:37:c9:fd:45:7e:0b:61:cb:
                    a9:79:de:e2:61:93:1c:b5:ea:8f:d2:ef:ba:c8:15:
                    02:fe:ee:1c:00:f6:85:e4:ca:a7:7e:0e:e7:0d:2e:
                    a3:5f:37:51:dc:26:dc:75:4b:df:f4:51:65:67:37:
                    15:c2:38:7c:3d:74:00:9b:c7:c6:f6:03:89:01:25:
                    1e:fd:d7:1c:55:14:43:00:09:ff:38:7a:2a:82:0a:
                    d5:72:8b:cb:89:47:bd:2c:01:84:6a:a8:f5:f7:be:
                    f7:73:94:1e:37:d9:27:5d:67:db:25:45:e4:7c:f0:
                    ef:4a:0d:79:3d:7c:a2:84:e3:90:a7:42:fb:f5:5b:
                    d2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:58:2B:37:7E:2F:28:77:84:51:A1:F9:11:FE:FB:04:3A:B8:02:60
            X509v3 Authority Key Identifier:
                keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:60:ad:49:00:c4:9e:3a:58:f3:f4:82:1a:16:ac:39:67:c4:
         2a:de:c7:61:92:e9:f4:ef:7b:6d:4f:b7:a7:1a:45:08:70:1c:
         ce:1a:4e:ed:95:49:49:71:15:50:1f:9b:06:fe:fc:96:9a:76:
         68:15:8a:bf:c6:7e:ba:5e:d3:e0:23:f3:cc:1e:f8:50:03:10:
         80:e9:0f:f7:9c:8c:87:ce:f8:51:e0:61:29:e6:15:c9:5c:24:
         34:11:ff:d3:2c:25:b9:5d:2a:62:ed:a3:76:bf:36:cc:18:a0:
         f5:20:9d:1a:16:84:35:76:26:cf:f8:2a:91:52:95:ee:90:a5:
         36:54:d7:7d:3b:da:e5:5e:87:ca:16:5d:70:63:21:c0:97:d7:
         b6:8c:c9:62:18:51:d7:d5:a1:df:69:5b:22:a9:71:2b:3b:c8:
         cc:67:ad:6c:4b:49:b3:7c:7d:7f:ee:67:57:a2:b5:da:54:2c:
         69:8b:90:b6:59:af:0d:a5:b6:98:24:4c:23:aa:0b:87:ee:6d:
         b2:87:f2:d8:cf:ac:34:ae:64:c8:59:29:f4:07:de:ee:56:d8:
         06:43:2b:06:17:a8:d5:ce:4b:ec:5e:27:6c:00:06:f4:75:ce:
         e8:2e:1f:41:1e:17:8a:5e:71:8a:01:8f:ee:ad:56:be:3d:ae:
         c1:bd:7f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----