Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
File:                     Pw7qWRltFKMq812hcQ8VDV-d3dg.mft (raw, json)
Hash identifier:          KEvMYIhVYBjz5l7d1RaRopFbgDURCdaxCPO/EMhDX8k=
Subject key identifier:   61:39:97:E8:86:A8:63:C3:67:F9:8A:40:D8:7B:6C:FD:B0:C4:24:8A
Authority key identifier: 3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8
Certificate issuer:       /CN=F3652C3AAF/serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
Certificate serial:       0435
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
Manifest number:          0431
Signing time:             Sun 25 Oct 2026 03:53:54 +0000
Manifest this update:     Sun 25 Oct 2026 03:53:53 +0000
Manifest next update:     Tue 27 Oct 2026 03:53:53 +0000
Files and hashes:         1: Pw7qWRltFKMq812hcQ8VDV-d3dg.crl (hash: 0BTGkji0xnbJWOTlUMjpH4hTLA1G4nBqiZbagBcBXIk=)
                          2: D15451B8AEF411EE804D56A3775412E6.roa (hash: YBWjlP8F+YdvA9ozU69TQggPOcEWkXW+zdvhhb0CYsA=)
                          3: 9DB45F1AAEF411EEBD21E1A2775412E6.roa (hash: zk4qjNpUR6ox7pi92CW344nHF3kKf96YYdu89XzhQ3o=)
                          4: B918F940B04E11EEBBD2E697775412E6.roa (hash: ZrUlsRanFtsZhQlEVluoYbwWKfggdoIE9yZOZzdy4S4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 03:53:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077 (0x435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652C3AAF, serialNumber=3F0EEA59196D14A32AF35DA1710F150D5F9DDDD8
        Validity
            Not Before: Oct 25 03:53:53 2026 GMT
            Not After : Oct 27 03:53:53 2026 GMT
        Subject: CN=6add7d52-2ee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:0e:cf:d6:8e:21:b8:cf:79:5f:fb:56:5f:
                    00:9d:e6:83:e9:f6:58:bb:5d:ef:b5:f7:17:98:cf:
                    0d:84:3c:fd:2e:c9:db:b2:b8:73:d6:a8:3e:ca:3c:
                    ad:7d:c2:4c:8a:10:8d:99:37:d3:54:84:78:32:72:
                    cc:6e:d7:00:5d:24:04:40:c6:8a:51:b9:33:8a:ad:
                    25:e4:90:86:a9:99:2a:8c:61:dd:26:06:09:5c:48:
                    93:6f:6f:86:27:00:44:aa:9a:8c:9e:4c:ea:bd:e3:
                    26:b1:dc:59:98:80:e2:25:bd:19:a0:09:ef:91:98:
                    f2:97:54:26:a3:bf:18:27:cf:dd:eb:52:49:1d:1e:
                    74:6f:0e:24:28:df:2c:49:16:df:5b:44:40:91:bc:
                    f7:f1:08:76:1d:52:54:f3:c9:2e:85:51:16:81:67:
                    ed:80:5a:4a:ab:7c:62:e8:42:41:84:c6:4d:36:2c:
                    1d:9e:08:9a:24:d5:cd:00:cb:3e:95:18:ba:a4:fc:
                    9d:dc:2d:d4:25:57:ae:43:c0:bf:f5:13:03:45:06:
                    4f:bb:e7:a0:ac:49:fe:24:8d:0d:8a:12:00:6a:16:
                    b8:69:ce:5c:1b:8b:d8:b7:d0:38:fe:a2:6f:97:8b:
                    3b:ca:49:dc:47:23:58:93:71:27:a7:b2:c7:43:ba:
                    15:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:39:97:E8:86:A8:63:C3:67:F9:8A:40:D8:7B:6C:FD:B0:C4:24:8A
            X509v3 Authority Key Identifier:
                keyid:3F:0E:EA:59:19:6D:14:A3:2A:F3:5D:A1:71:0F:15:0D:5F:9D:DD:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Pw7qWRltFKMq812hcQ8VDV-d3dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652C3A/D607CF289A8111EE8A7BF12BD25BE465/Pw7qWRltFKMq812hcQ8VDV-d3dg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:9d:65:fa:f3:6f:c7:3d:70:ca:26:86:f8:28:67:6d:fb:a2:
         2a:62:a7:ed:a4:33:09:1b:5b:2c:f0:01:a6:e8:6e:df:db:18:
         d2:95:c4:32:55:79:6c:b6:16:d1:9b:d5:b9:83:36:e8:61:48:
         ba:7b:4b:3c:2b:df:51:f0:75:10:1f:8a:43:c2:d1:02:01:14:
         a9:42:d7:48:e3:18:5a:22:74:59:46:2d:14:c7:5f:48:5d:70:
         20:07:0b:88:e7:b6:41:7f:a4:44:a9:0b:26:81:cf:7d:f2:8d:
         3a:f8:f0:65:45:a5:5d:c3:05:34:69:e2:df:78:42:58:0a:e3:
         39:03:01:d2:32:66:1c:40:0b:ae:90:d3:25:6f:ca:bc:4b:b2:
         48:ad:9a:33:d3:10:10:db:a5:81:95:88:aa:20:46:06:df:ca:
         05:4b:8c:19:cb:3b:b2:3b:22:62:77:01:a6:18:41:57:0d:5e:
         a8:5b:80:21:c8:aa:a5:ff:02:bf:38:93:f5:fe:c6:f5:61:33:
         b4:5d:8b:bd:6c:da:c0:12:c0:26:55:25:30:11:c5:61:cf:7b:
         fd:e0:74:b7:be:65:12:3c:4a:58:5e:1a:ce:f6:7d:d1:e4:58:
         54:69:7b:55:11:1f:9f:c7:ff:3a:9a:d8:ef:a9:4a:fc:08:5e:
         31:77:8c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----