Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
File:                     qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft (raw, json)
Hash identifier:          o7Uc7i1I4VT+RqS6DwEuQCf9gR51zRQ4HRDx9hVJmm8=
Subject key identifier:   5C:51:7A:7A:14:09:DF:5E:CB:4A:DE:FF:D9:98:AE:B6:92:BD:2B:05
Authority key identifier: AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A
Certificate issuer:       /CN=F3676EF0AR/serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
Certificate serial:       02E2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
Manifest number:          02E1
Signing time:             Wed 26 Aug 2026 04:28:44 +0000
Manifest this update:     Wed 26 Aug 2026 04:28:43 +0000
Manifest next update:     Fri 28 Aug 2026 04:28:43 +0000
Files and hashes:         1: qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl (hash: SZ1GL4jrAw9vkpQqQ2e34MYwcV1iNEyA78T0ao6g3+Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                          rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 28 Aug 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 738 (0x2e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3676EF0AR, serialNumber=AA4A8FFF1B180624D751003D2165ACAFAE90436A
        Validity
            Not Before: Aug 26 04:28:43 2026 GMT
            Not After : Aug 28 04:28:43 2026 GMT
        Subject: CN=6a8e6b7c-1990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7e:99:85:c0:3c:76:ba:89:45:e1:42:79:c2:
                    43:23:48:0d:08:ff:6a:f6:51:2f:a3:0b:60:aa:41:
                    be:d2:14:7e:29:77:92:7c:b7:f2:45:0b:c2:db:b5:
                    fa:11:c8:e2:41:d7:21:f9:c0:68:5d:cb:22:0e:a0:
                    22:04:c1:ec:16:1a:da:3d:51:e3:d5:84:c0:90:65:
                    79:c8:9d:50:48:a0:89:f0:ce:18:bb:03:59:54:df:
                    8f:da:74:4a:84:64:31:07:30:2b:89:db:85:1b:87:
                    c7:80:e0:d3:2f:7d:d0:37:fd:ea:9e:7d:da:bb:2f:
                    3d:69:de:98:22:0e:a5:79:79:d1:cf:03:1c:77:74:
                    d6:62:01:2c:92:35:bc:6b:e4:47:91:cc:8f:b0:4e:
                    6d:f5:b4:00:8c:e3:51:94:f6:df:a1:b4:8f:09:2a:
                    a7:53:d5:91:e7:f9:52:a6:d5:0d:43:7e:37:a5:2d:
                    ff:9d:2c:c2:63:3b:3a:48:4e:07:e9:df:3f:98:e5:
                    95:5d:b6:7a:e9:08:87:a8:f4:57:a9:f7:41:79:7f:
                    7e:2b:e7:37:e2:21:58:41:0c:81:f4:36:05:28:44:
                    b6:e8:93:03:23:df:0d:59:8a:7e:d6:29:23:22:57:
                    77:84:60:64:c6:e5:6d:f0:82:c5:8c:67:c6:f4:15:
                    87:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:51:7A:7A:14:09:DF:5E:CB:4A:DE:FF:D9:98:AE:B6:92:BD:2B:05
            X509v3 Authority Key Identifier:
                keyid:AA:4A:8F:FF:1B:18:06:24:D7:51:00:3D:21:65:AC:AF:AE:90:43:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/qkqP_xsYBiTXUQA9IWWsr66QQ2o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3676EF0/879877446AAA11EF849661A7762E951A/qkqP_xsYBiTXUQA9IWWsr66QQ2o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:9a:d8:16:d1:2d:4a:6c:13:38:c8:ef:55:fd:4b:78:77:34:
         7d:83:4e:75:f2:19:a2:47:b4:ba:2f:0a:90:9e:31:49:de:8f:
         5f:84:fc:7b:f2:0c:ac:91:69:18:d0:06:07:42:6c:f1:6a:89:
         be:9f:47:dc:1c:8c:35:84:67:8e:3c:d5:d7:97:a3:9b:92:a3:
         d1:5b:b8:ec:dc:18:e3:ef:0a:84:09:42:79:3f:4a:27:72:bb:
         65:38:de:df:bc:a2:b9:f3:86:a3:9b:04:75:54:0c:a4:79:9c:
         ec:40:ea:c9:16:81:d0:17:42:cf:64:8e:69:8e:48:ba:f3:e4:
         3f:36:5f:73:40:58:36:8f:4a:75:f4:50:5a:7b:21:a6:f6:ed:
         fb:61:3a:e6:98:90:5d:c2:a0:06:a2:2a:20:ad:33:61:be:d8:
         c1:28:b9:58:78:a3:a7:dd:58:8e:ed:9d:d0:73:6a:4b:32:9a:
         a0:2e:7b:ea:c6:50:3d:93:b9:4e:12:cd:70:83:5c:ae:4b:ff:
         fb:e0:75:d3:18:f0:ab:54:8c:df:eb:03:3e:23:08:13:55:1c:
         05:92:56:f9:ef:3b:9e:b9:48:f0:8b:0b:5e:30:a3:f1:78:3d:
         dc:d8:36:b6:7f:ea:60:5f:90:bf:73:65:f3:19:a2:45:0c:7b:
         e2:48:69:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----