Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
File:                     qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json)
Hash identifier:          SonqdOEwYGAYC+n9ZJL1pp73AtnY3I8jQybR+FQ95ME=
Subject key identifier:   F3:19:95:7C:B7:8B:9D:BE:D4:05:58:84:F7:92:E2:E9:53:13:C7:D5
Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Certificate issuer:       /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Certificate serial:       04EA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
Manifest number:          04D2
Signing time:             Mon 02 Nov 2026 03:38:07 +0000
Manifest this update:     Mon 02 Nov 2026 03:38:06 +0000
Manifest next update:     Wed 04 Nov 2026 03:38:06 +0000
Files and hashes:         1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: /FWSeM2hANa6XArLyuUGOYn7y5HNkk4ehcsWvkQWTvo=)
                          2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=)
                          3: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=)
                          4: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=)
                          5: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=)
                          6: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=)
                          7: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=)
                          8: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=)
                          9: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=)
                          10: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=)
                          11: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=)
                          12: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=)
                          13: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=)
                          14: C07457B08A3711F0A002C2E7DAE4EC9C.roa (hash: Pe7GZmcC+gV4uLFF5b8V8YgWqeJmXfjZci1uqWUJRZA=)
                          15: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=)
                          16: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=)
                          17: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=)
                          18: 1C0B2122019C11F1BBDB0E7FDAE4EC9C.roa (hash: xwJRkcjKrYUbtrVrTZw0KB8n5igOjLaAbAqiU+HglAk=)
                          19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=)
                          20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 03:38:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1258 (0x4ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
        Validity
            Not Before: Nov  2 03:38:06 2026 GMT
            Not After : Nov  4 03:38:06 2026 GMT
        Subject: CN=6ae8059f-d6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5a:3d:84:6d:ba:eb:51:22:4e:d5:0e:da:91:
                    21:3c:59:3e:84:de:e8:8b:05:c1:22:42:12:d6:e8:
                    74:b5:12:24:c5:c0:59:d6:cb:bf:e5:d3:61:d1:35:
                    27:94:ae:a6:2e:9b:b1:f5:ed:e4:72:05:87:5e:5b:
                    02:75:b3:cf:f0:62:75:7f:1f:88:2e:ec:d1:5b:6a:
                    df:76:be:3a:b1:b7:00:6b:f3:77:c3:3e:ee:5f:01:
                    60:e5:13:26:6b:80:46:7b:f2:15:83:ff:c3:5a:59:
                    ed:13:8b:ea:ca:70:14:d4:64:2c:86:0e:ae:27:94:
                    7d:37:55:d8:76:86:96:4f:a8:05:2e:8b:89:03:ea:
                    95:bb:86:a0:bb:7d:42:d7:1d:99:cf:40:55:70:60:
                    43:da:2f:dd:a4:17:20:0f:26:5e:08:5c:27:f8:02:
                    41:0d:04:2c:de:d4:eb:de:6a:e9:fe:8f:12:bf:2e:
                    b4:06:bb:92:05:82:20:a0:42:91:1c:a1:1a:d8:65:
                    98:ad:0a:47:e7:f3:c4:1f:19:77:4b:cb:82:96:1e:
                    26:ff:d5:2d:7e:c2:24:c2:89:05:bd:cc:26:b7:3b:
                    3f:ae:19:e7:a3:93:8e:1b:12:6b:d6:e1:94:9b:b7:
                    93:f4:1e:6c:06:3a:14:dd:18:f3:7c:aa:93:09:2c:
                    ca:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:19:95:7C:B7:8B:9D:BE:D4:05:58:84:F7:92:E2:E9:53:13:C7:D5
            X509v3 Authority Key Identifier:
                keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:06:c0:7d:cf:12:64:46:c9:47:19:e6:ef:e7:7f:2a:3a:45:
         d6:31:d6:49:49:55:52:13:40:61:86:db:23:8f:72:ba:46:e2:
         7c:6a:62:35:b2:f7:d9:9f:9e:51:b2:2d:e8:da:a4:67:ad:60:
         0c:87:af:02:b9:ea:bb:68:16:f4:c6:5a:01:2e:a2:19:6b:7f:
         42:45:98:58:18:fb:f0:2e:46:59:7e:38:aa:c0:c5:df:7a:39:
         90:cc:d4:75:60:43:5f:2d:67:c6:21:bb:18:7d:57:23:fa:08:
         f6:30:d2:d1:3a:ec:56:2a:ef:66:57:91:cc:c7:22:7d:f4:b3:
         e9:93:69:d1:4f:18:a2:be:c0:5c:01:3d:48:97:76:9d:7f:f9:
         c2:72:a0:1c:13:88:7b:3b:97:2a:e3:de:29:64:07:7c:77:c1:
         61:cd:bb:bb:7a:f5:c5:fd:9b:87:bd:52:c0:d9:1e:4c:2b:91:
         96:32:b3:e9:a8:b9:99:53:7e:44:93:af:d3:f2:27:c3:e5:34:
         b0:eb:7f:c8:98:52:13:c5:bc:92:7b:b3:03:ce:74:7a:65:8e:
         8c:3d:ef:b6:68:7a:59:86:63:33:8b:4c:c1:2f:85:20:40:96:
         49:ee:7a:af:46:56:77:56:aa:9d:73:d8:41:cb:33:28:a4:6a:
         dc:ff:cf:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----