Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
File:                     27tnLt0H4F5FzAKFWwHIE75xXoE.mft (raw, json)
Hash identifier:          DUYo7YbvQ44Z9sbK8Wdc7V/GS2ix7OeK2pzRM+D0qwk=
Subject key identifier:   38:79:B9:C4:1B:EE:1D:F7:4D:62:82:D8:42:05:98:49:DE:4F:5B:0D
Authority key identifier: DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81
Certificate issuer:       /CN=F366A8BFAF/serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
Certificate serial:       02D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
Manifest number:          02D1
Signing time:             Sat 24 Oct 2026 04:39:09 +0000
Manifest this update:     Sat 24 Oct 2026 04:39:08 +0000
Manifest next update:     Mon 26 Oct 2026 04:39:08 +0000
Files and hashes:         1: 27tnLt0H4F5FzAKFWwHIE75xXoE.crl (hash: Jx5t0PL5c+Q3S4XbyyjZHD9WcSpuCki+Qtjg+Z1x6Vo=)
                          2: 0C2C5B02A38F11EF9EE69A89762E951A.roa (hash: ECtKxH32G5BPQeuP9KuP/2ILf6so8Vog6XvAyzLxNpo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 722 (0x2d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A8BFAF, serialNumber=DBBB672EDD07E05E45CC02855B01C813BE715E81
        Validity
            Not Before: Oct 24 04:39:08 2026 GMT
            Not After : Oct 26 04:39:08 2026 GMT
        Subject: CN=6adc366d-d59d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d2:20:bb:01:63:d8:98:3b:1e:56:08:bd:e1:
                    0e:58:b3:08:57:4b:0d:69:21:86:8b:09:04:11:60:
                    6a:6e:00:70:98:11:d2:4b:a5:60:7d:b6:49:b9:f3:
                    2a:b4:ec:c4:8a:e0:0d:dc:4c:39:52:57:67:bc:04:
                    dd:7d:13:6a:f1:84:ec:d3:44:e9:09:9a:83:02:84:
                    1e:8a:ac:0b:2c:63:6e:02:c8:6d:5a:d1:3d:16:ae:
                    ab:84:71:eb:a2:6d:c7:29:be:0d:4c:b0:58:60:a9:
                    dc:5d:f8:31:40:b7:b9:97:1c:6c:a1:97:e7:a0:17:
                    f2:e1:19:0b:29:30:49:47:ef:f1:92:3b:3e:55:b4:
                    56:3a:c6:59:21:9d:64:8f:7e:5d:66:68:ff:1b:90:
                    c5:c0:c1:a2:08:58:a6:4d:96:ac:6f:35:62:86:cb:
                    9a:38:4a:3d:5b:95:19:c5:39:ce:8d:14:a8:77:c1:
                    dd:11:c3:96:a5:c5:b1:3b:3c:3b:17:9f:e3:cb:b5:
                    68:37:f1:f2:b3:0a:e7:cf:ae:e0:6e:3f:c2:f4:97:
                    44:47:6d:a0:ea:a3:96:96:5c:81:f2:6c:bb:52:89:
                    bf:34:df:14:94:af:bd:14:5c:47:b6:61:46:5c:b7:
                    d5:21:93:be:27:d2:58:f0:b7:be:49:08:b5:f4:8a:
                    69:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:79:B9:C4:1B:EE:1D:F7:4D:62:82:D8:42:05:98:49:DE:4F:5B:0D
            X509v3 Authority Key Identifier:
                keyid:DB:BB:67:2E:DD:07:E0:5E:45:CC:02:85:5B:01:C8:13:BE:71:5E:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/27tnLt0H4F5FzAKFWwHIE75xXoE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A8BF/DCA1C652A38D11EF92613781762E951A/27tnLt0H4F5FzAKFWwHIE75xXoE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:12:01:28:32:a6:6a:45:55:99:c2:1d:c3:00:b2:9a:dd:51:
         dc:26:d3:68:86:db:2f:9d:41:a4:75:c9:3d:fc:44:6d:56:1f:
         27:06:3a:37:34:29:eb:75:80:1a:3d:39:de:28:06:85:91:92:
         65:c2:c6:c5:cf:d1:60:ec:ba:64:9b:7d:3a:de:45:f5:80:ce:
         8b:b0:b4:93:d5:da:62:b4:e7:f7:d1:e2:d4:57:85:ed:4f:9d:
         8a:21:98:9d:69:c2:d0:57:ac:39:3a:f1:44:60:07:4f:ab:fe:
         ee:b8:d8:c1:11:0e:56:50:35:97:82:dc:f7:69:2f:b5:3d:b4:
         fd:40:a3:d1:70:1b:6d:98:18:f0:5f:36:91:3e:e8:80:82:8b:
         b2:5a:00:37:2b:c2:d3:f4:b4:0d:36:fe:cd:ec:8d:f9:a8:69:
         56:a5:a9:e4:3b:9f:65:37:2b:28:f0:3d:63:73:e3:39:85:a4:
         89:5f:65:f5:7d:c7:1d:b5:fc:26:2e:41:95:fa:6e:1c:9a:03:
         8f:ba:b8:5c:ae:79:e6:c3:4a:3d:9a:33:04:2e:42:7a:a3:4d:
         31:1a:bd:f8:69:e0:51:31:8c:38:20:59:ee:bb:69:ee:09:e9:
         61:57:79:6b:c5:cb:33:79:f7:79:6d:83:1f:47:75:da:79:ba:
         3b:c6:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----