Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
File:                     iO95xkHBXokYHnKdSKj-bnPOJac.mft (raw, json)
Hash identifier:          yg+9TRtgqdkPCj20bvyGgrCSWQPd2VGHM3EBneJDNjg=
Subject key identifier:   83:3D:E9:82:CD:B5:82:92:42:54:F2:4D:54:B5:2D:A7:53:DF:7B:82
Authority key identifier: 88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7
Certificate issuer:       /CN=F363C396AF/serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
Certificate serial:       0385
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
Manifest number:          0384
Signing time:             Fri 30 Oct 2026 04:12:24 +0000
Manifest this update:     Fri 30 Oct 2026 04:12:23 +0000
Manifest next update:     Sun 01 Nov 2026 04:12:23 +0000
Files and hashes:         1: iO95xkHBXokYHnKdSKj-bnPOJac.crl (hash: 8j71MhI6wLMWQmighoN9nREmkbq7F47xHP9AhSLE5o4=)
                          2: AB00E3321E9D11EFAD20E30A7DDC24C2.roa (hash: jczqBl4rLfWV3D8zqP6XHofdCAQZu3xZe0wHy+hc42o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 01 Nov 2026 00:07:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 901 (0x385)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363C396AF, serialNumber=88EF79C641C15E89181E729D48A8FE6E73CE25A7
        Validity
            Not Before: Oct 30 04:12:23 2026 GMT
            Not After : Nov  1 04:12:23 2026 GMT
        Subject: CN=6ae41928-8432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6b:ea:93:f3:54:df:91:46:9d:6f:0e:ca:0d:
                    dd:7b:74:72:d9:18:5b:60:12:ae:d4:b3:a6:ff:93:
                    a7:07:a0:e2:57:b6:c0:d3:7f:0c:5a:43:3d:44:b1:
                    60:c1:a7:9b:4b:4e:cc:7c:4d:4e:68:76:6e:2e:32:
                    11:b3:a2:ef:9c:68:7d:6a:68:be:ae:d2:73:8f:de:
                    a4:66:5d:19:b4:5d:85:68:6d:88:ad:8b:11:50:64:
                    3a:2b:6f:2e:63:02:8c:44:d4:f6:51:66:e7:26:89:
                    03:9f:ea:8d:88:05:6c:76:c3:10:98:4a:40:98:a3:
                    66:24:b9:e8:e8:a1:15:7c:d1:50:0d:27:35:d5:22:
                    3d:92:78:60:28:b7:c5:c1:c2:94:2e:d1:9a:90:61:
                    64:b3:b8:eb:61:6a:0c:63:d6:9c:39:76:59:ed:37:
                    ce:19:7b:1c:1a:f8:ab:b6:17:43:fe:66:32:4e:7f:
                    cf:d4:83:74:0b:77:20:a0:8b:82:60:26:d7:74:5d:
                    6b:94:42:0d:86:38:93:55:6d:61:3b:e0:73:92:1d:
                    2b:d0:46:0c:61:7a:5e:a3:73:73:84:ce:95:44:fc:
                    fc:8e:df:48:c3:a6:40:7c:38:4d:8d:9a:d5:8e:d7:
                    0a:c5:e7:77:d0:ea:f7:53:5a:08:c9:8c:57:0c:c5:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3D:E9:82:CD:B5:82:92:42:54:F2:4D:54:B5:2D:A7:53:DF:7B:82
            X509v3 Authority Key Identifier:
                keyid:88:EF:79:C6:41:C1:5E:89:18:1E:72:9D:48:A8:FE:6E:73:CE:25:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iO95xkHBXokYHnKdSKj-bnPOJac.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363C396/CAE0D4D81E9C11EFBCA1A4227DDC24C2/iO95xkHBXokYHnKdSKj-bnPOJac.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:bb:a4:f0:2d:10:87:c0:2f:fb:70:e5:48:75:43:95:55:81:
         ff:73:35:9a:60:77:39:f5:cd:10:55:60:a7:75:25:4e:bc:3d:
         35:50:66:c0:2f:bb:f7:35:2f:c3:d5:20:69:09:6b:dc:d6:b4:
         70:14:de:6a:ed:85:df:0b:58:a4:e1:3f:84:12:b4:54:3d:81:
         53:75:69:d6:23:b0:fe:3c:8a:41:42:3a:2c:28:66:63:4e:41:
         11:f6:63:8c:92:a9:7f:67:32:85:02:f7:6b:c5:50:45:d7:07:
         b1:1e:fb:e6:fe:72:4c:ac:0a:ff:3a:fc:47:03:e0:2f:ee:ee:
         39:75:0b:dc:eb:4f:be:22:1a:3b:ed:3e:92:52:ee:ff:70:37:
         f7:07:fe:ec:f1:98:0c:c8:12:12:bc:c3:d9:b9:ee:44:f9:e9:
         31:ed:cd:8b:d4:98:0d:89:2b:3a:a4:cb:5a:63:bd:0a:91:1e:
         48:fc:6b:93:80:c0:be:b7:58:18:42:dd:36:17:49:1d:47:86:
         ac:93:7c:da:bd:95:fc:36:ac:f6:2a:d8:3e:c8:58:a4:df:ad:
         a2:a9:ec:71:c6:1b:c0:35:64:81:49:41:b3:6b:1e:0a:26:21:
         e0:dc:4a:a0:fb:76:eb:c4:00:f2:95:5a:41:e7:68:c4:ff:34:
         74:24:84:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----