Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
File:                     x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft (raw, json)
Hash identifier:          YwP2fRSOg+xXHzTYEIC24Gz5qaGd5fuvtMMZXocGL0Y=
Subject key identifier:   2B:14:3D:E6:2B:AF:A7:6F:C2:C3:59:1C:F1:68:55:6D:19:34:00:12
Authority key identifier: C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD
Certificate issuer:       /CN=F36390A9AF/serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
Certificate serial:       02CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
Manifest number:          02CA
Signing time:             Thu 10 Sep 2026 04:33:34 +0000
Manifest this update:     Thu 10 Sep 2026 04:33:33 +0000
Manifest next update:     Sat 12 Sep 2026 04:33:33 +0000
Files and hashes:         1: x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl (hash: WY+S1hcGbgowNpr2o6H7oa1yjq1n1k2rAfgVt48Byok=)
                          2: 2043601A871311EFAA833C47762E951A.roa (hash: 7V2EXwaz5iXOD12PTDbUdoIOuqdno8tko8fgycVsw+8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 04:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 715 (0x2cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A9AF, serialNumber=C7423ED27AFCC10D59829A80B1797162B646FFDD
        Validity
            Not Before: Sep 10 04:33:33 2026 GMT
            Not After : Sep 12 04:33:33 2026 GMT
        Subject: CN=6aa2331e-74da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:87:d4:4b:1b:e3:58:fa:02:5f:65:90:16:8e:
                    74:fc:32:23:f4:d8:c6:ea:6a:83:28:c3:1f:57:e0:
                    a5:d0:3a:85:e9:97:9c:0f:e9:1d:5e:78:ed:c3:67:
                    83:48:ae:88:ce:83:9c:63:23:fb:58:d4:aa:0c:2a:
                    51:55:e0:ab:a0:67:30:7f:79:4b:18:ef:08:5a:df:
                    cc:ab:b8:78:a1:9c:7d:2a:21:2c:ce:df:f5:f8:76:
                    4d:e5:4d:e1:2f:f5:36:68:cb:0c:b2:31:18:52:08:
                    80:80:78:bd:93:8a:8f:0b:23:85:9b:ec:91:ab:4c:
                    9d:b1:c0:c4:8e:e6:6b:3b:f8:17:70:f9:3a:e4:4c:
                    c5:a7:f6:e7:5a:c7:eb:33:1f:e7:e6:e3:3a:11:9b:
                    46:43:a5:ed:57:f4:c1:3a:c4:86:c5:58:d2:d6:73:
                    d6:51:3d:4a:e1:cb:30:c8:83:f4:e0:46:b2:c7:7a:
                    8b:73:32:cb:08:ca:4f:b9:40:36:0e:b4:51:a3:81:
                    42:2b:95:a5:c2:1e:70:fc:eb:92:e2:9f:fe:19:4c:
                    21:20:43:f7:1f:a3:e7:71:61:10:a7:31:69:8a:77:
                    37:2f:7e:d8:78:48:73:da:84:78:5e:59:11:51:c6:
                    d3:c6:6f:e1:2d:a6:53:bb:00:ec:b5:b8:eb:16:0e:
                    69:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:14:3D:E6:2B:AF:A7:6F:C2:C3:59:1C:F1:68:55:6D:19:34:00:12
            X509v3 Authority Key Identifier:
                keyid:C7:42:3E:D2:7A:FC:C1:0D:59:82:9A:80:B1:79:71:62:B6:46:FF:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A9/31A3DDA286E211EFBB3D6C96762E951A/x0I-0nr8wQ1ZgpqAsXlxYrZG_90.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:7f:68:68:65:44:12:20:fe:eb:43:e1:b6:7e:d9:77:57:a1:
         aa:e4:14:cb:b9:20:ff:95:89:a0:02:f3:0e:09:f9:4d:aa:61:
         40:90:d7:14:3e:01:66:12:4b:0e:19:e7:c6:64:5b:9c:3c:87:
         bd:61:4b:ca:25:d5:97:23:f7:d7:e9:7a:d8:2b:e3:47:66:09:
         b8:4e:80:a5:32:10:83:d9:ca:11:46:1c:3d:62:9c:1a:df:25:
         bb:97:05:68:51:03:a4:48:f9:f8:ee:10:51:dd:df:39:94:91:
         52:25:60:af:34:fc:a4:c1:70:98:0d:b3:70:b8:ae:5a:0a:dd:
         3a:b7:6b:f6:15:c8:d1:70:8a:b0:24:8e:d0:c3:71:41:32:ef:
         31:5d:72:8c:75:8c:6c:3a:77:0b:b6:86:a6:58:8f:91:28:2c:
         c4:0f:d9:da:01:94:0c:86:1b:45:80:d6:5b:ac:50:39:1f:39:
         f9:5e:d9:af:98:cb:aa:82:4c:ca:9e:42:e1:27:35:fd:de:af:
         b5:3b:0b:0c:82:73:f1:dc:90:54:20:58:75:ad:2c:23:35:95:
         40:1f:21:7c:90:c7:79:0e:54:8c:aa:5a:cc:80:c8:aa:4b:66:
         e9:09:67:78:67:53:7b:cf:97:10:c2:b7:58:5f:42:b5:1a:6f:
         d7:d1:df:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----