Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
File:                     rhKLIvUdxljVXiFW669z1satdio.mft (raw, json)
Hash identifier:          x9GTEb8fpfqGrEvqhw0VK2Tk43+24r7s9tF/gjV6ebk=
Subject key identifier:   41:1D:7A:B6:15:19:99:E5:2C:B2:0B:CB:AC:45:8F:65:36:11:D7:74
Authority key identifier: AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A
Certificate issuer:       /CN=F3656B95AF/serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
Certificate serial:       0540
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
Manifest number:          0540
Signing time:             Sun 25 Oct 2026 03:20:31 +0000
Manifest this update:     Sun 25 Oct 2026 03:20:30 +0000
Manifest next update:     Tue 27 Oct 2026 03:20:30 +0000
Files and hashes:         1: rhKLIvUdxljVXiFW669z1satdio.crl (hash: CLuUTxW2OWBB7imA7UcjEsnl7/0qy2N1RU3K0h/zRS0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                          rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1344 (0x540)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656B95AF, serialNumber=AE128B22F51DC658D55E2156EBAF73D6C6AD762A
        Validity
            Not Before: Oct 25 03:20:30 2026 GMT
            Not After : Oct 27 03:20:30 2026 GMT
        Subject: CN=6add757f-4822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:6c:88:5f:c5:8a:e8:42:3a:d7:9f:ac:48:40:
                    ab:a7:ff:fd:d3:e9:94:32:3c:09:22:e9:da:75:83:
                    3c:13:93:5b:09:91:ad:5c:47:28:1e:89:45:01:f1:
                    e6:1a:77:6c:e6:3f:43:02:2c:f9:bb:76:14:58:1b:
                    25:a8:4a:9f:20:46:fb:c5:b2:e2:01:e8:e3:26:b4:
                    ea:e7:65:c1:fa:34:3c:66:b5:3c:28:8a:47:ca:c9:
                    88:a4:e9:0e:9a:3e:eb:17:88:d3:d3:47:89:f6:76:
                    1e:62:ee:ba:3e:3e:5e:93:3b:88:14:16:b2:cc:cf:
                    f0:c4:0e:6a:e9:b8:86:f0:a7:c0:d4:36:b3:29:97:
                    96:f6:e4:7e:83:3c:70:51:88:5d:04:b6:94:ba:f5:
                    be:ea:56:6d:6e:cc:3e:d7:84:c2:64:88:23:42:b8:
                    0f:67:46:a0:b8:0f:70:9e:ed:bf:21:1b:42:75:f4:
                    09:3c:7e:19:bf:ea:8c:31:56:6a:3c:06:9b:62:43:
                    b0:f6:da:5d:c0:66:f9:a3:6b:bd:39:3a:71:68:1b:
                    02:57:11:8b:47:18:82:fa:37:15:00:3a:97:31:a2:
                    65:63:54:82:af:8f:8e:b3:e1:c1:23:43:c0:3c:5d:
                    1d:f7:65:fc:77:11:b8:9c:04:34:29:21:d1:30:28:
                    7c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:1D:7A:B6:15:19:99:E5:2C:B2:0B:CB:AC:45:8F:65:36:11:D7:74
            X509v3 Authority Key Identifier:
                keyid:AE:12:8B:22:F5:1D:C6:58:D5:5E:21:56:EB:AF:73:D6:C6:AD:76:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/rhKLIvUdxljVXiFW669z1satdio.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656B95/62412AC0CA2611ED92E9C98FF1222468/rhKLIvUdxljVXiFW669z1satdio.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:5f:d6:9a:c0:d8:1c:65:62:fa:01:26:cb:81:a7:09:e5:
         e7:b7:d7:95:4d:95:84:fd:21:6b:e8:19:d7:97:e6:4f:2c:e9:
         46:02:fa:30:c7:e3:a2:8c:58:1d:f7:78:6a:6c:11:32:b1:30:
         3a:cc:47:6a:fc:bd:53:df:37:ca:95:53:39:5a:43:62:b5:81:
         47:62:c4:0b:3e:25:ac:99:a0:91:bf:d4:3d:2d:af:de:ea:d9:
         32:e6:15:c3:03:12:c1:0e:9e:35:e2:d1:f8:d4:9d:71:72:3e:
         bc:5c:e4:8a:53:d7:6e:b6:5d:e5:b5:1d:02:38:15:8d:a3:f8:
         ee:33:d8:35:3f:12:bc:62:64:53:58:50:52:90:bb:98:a5:9d:
         4a:d9:63:26:c9:d3:73:7e:b9:c8:93:24:df:68:a4:5c:55:cc:
         d6:9a:55:0a:df:ec:93:ea:59:56:80:d1:2e:84:cb:31:43:81:
         14:84:d3:26:9c:ec:fb:5d:1c:cf:dc:48:c4:35:46:71:84:95:
         0f:18:4f:be:71:1f:f6:40:10:50:87:d0:d9:1e:27:3e:a4:91:
         d3:4a:d3:f0:dd:e4:66:31:fd:e4:c5:7a:93:79:dc:c7:c0:8f:
         1b:ef:54:a7:e2:87:5e:0a:d2:a5:08:7c:fc:5a:2b:1b:d8:ab:
         f0:6f:ea:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----