Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
File:                     ui_9XON8AcbtlPuVw1jXCimNyXQ.mft (raw, json)
Hash identifier:          iFiI5x9BUXTrTkzLzAAKttct5T483cVb5ZAE08gli8A=
Subject key identifier:   CC:45:CC:96:28:98:05:72:D6:3C:76:70:0F:7F:75:70:48:4F:B7:A7
Authority key identifier: BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74
Certificate issuer:       /CN=F3679680AF/serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
Certificate serial:       03D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
Manifest number:          03CF
Signing time:             Mon 26 Oct 2026 04:07:23 +0000
Manifest this update:     Mon 26 Oct 2026 04:07:22 +0000
Manifest next update:     Wed 28 Oct 2026 04:07:22 +0000
Files and hashes:         1: ui_9XON8AcbtlPuVw1jXCimNyXQ.crl (hash: CgxAfj93537lknVoJdTDMSte7OdUSZpxLLDtO1qu7pQ=)
                          2: 2CB11612097C11F0B1B609AC762E951A.roa (hash: Kwmd09ofIif31S12hSjzL7BsuLgXOAF7knYqTDHIeU8=)
                          3: 2F6023ECE29211EEB2E4FA5C775412E6.roa (hash: q7jNd1y1Y6KLB0N5MRMBr1m0H8I9Vdkf0cqM9mEbDLA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 977 (0x3d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679680AF, serialNumber=BA2FFD5CE37C01C6ED94FB95C358D70A298DC974
        Validity
            Not Before: Oct 26 04:07:22 2026 GMT
            Not After : Oct 28 04:07:22 2026 GMT
        Subject: CN=6aded1fb-b192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:33:f4:8f:a2:38:21:2d:41:90:4e:53:dd:
                    76:dc:9a:1c:3c:cb:15:65:e2:86:7a:61:aa:5c:c0:
                    98:27:5b:12:b3:b1:bb:89:79:c8:a4:5a:bd:87:42:
                    2f:0b:ad:24:71:64:d4:3a:54:ef:82:01:28:26:51:
                    32:69:8f:71:b8:95:ba:64:a3:e0:6a:a4:55:7c:43:
                    5e:04:24:42:a6:61:2b:55:c7:40:75:4e:56:4a:67:
                    b5:c2:38:de:4d:b7:d9:6f:80:1e:5a:29:06:51:16:
                    f4:38:aa:9d:a1:6e:71:98:cb:36:be:8b:c2:8d:4f:
                    83:5e:68:1f:3d:11:9a:be:db:fc:52:8f:db:01:47:
                    ba:69:76:38:3c:bb:83:11:4e:f4:e1:43:ce:78:ad:
                    22:2c:ec:dc:17:2a:71:95:22:96:83:03:b0:fc:3e:
                    f4:98:51:5a:89:1d:88:34:22:8c:4b:fc:e0:79:2b:
                    9b:ff:49:71:79:a5:58:e2:57:36:4b:24:7b:01:f9:
                    1d:89:d4:47:68:c0:aa:b5:13:02:46:ab:12:77:14:
                    c5:46:9d:6a:c9:db:27:2d:b1:0f:e8:04:a7:37:89:
                    6b:d3:22:40:58:ae:07:9c:7a:b8:09:52:4a:a9:7e:
                    ce:ad:6b:11:71:44:91:f6:be:72:6c:56:22:b8:79:
                    d3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:45:CC:96:28:98:05:72:D6:3C:76:70:0F:7F:75:70:48:4F:B7:A7
            X509v3 Authority Key Identifier:
                keyid:BA:2F:FD:5C:E3:7C:01:C6:ED:94:FB:95:C3:58:D7:0A:29:8D:C9:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ui_9XON8AcbtlPuVw1jXCimNyXQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679680/67101F50E29111EEBC9A7258775412E6/ui_9XON8AcbtlPuVw1jXCimNyXQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:81:c1:97:7e:4a:77:dd:1e:9d:6d:14:1f:15:14:8e:76:65:
         cb:4d:6c:b5:27:d0:06:e1:56:13:ca:b5:45:5a:d4:4b:db:4d:
         35:0c:9f:01:d5:c1:36:5d:e5:48:8b:21:36:08:8c:39:c9:bd:
         8c:a3:e3:ec:63:b0:fb:71:9b:36:10:26:7a:84:bd:49:08:e2:
         9a:3f:cd:15:25:11:e9:d7:0b:9f:13:80:bb:b1:fa:88:b0:eb:
         45:07:01:61:13:2d:12:64:38:c3:ba:74:95:83:2e:85:e5:a8:
         0e:6b:9e:5e:9e:fe:0c:5c:d8:ec:84:62:fd:fb:2d:61:16:28:
         67:b6:38:19:74:e2:4a:42:0e:52:f5:e2:7a:25:8d:06:a9:63:
         aa:b4:5b:8e:d6:43:13:2c:55:f6:64:bb:c7:2e:29:26:5b:85:
         37:77:3f:d1:56:43:e4:c8:1d:24:dd:be:a0:c6:b6:68:26:6a:
         3d:ad:ca:30:b2:82:8d:9c:10:0e:4c:7b:dd:22:7f:7a:59:88:
         79:a4:80:03:16:f1:ef:e1:34:3c:b6:78:50:43:fc:b3:39:d8:
         6c:30:47:04:bf:76:10:3c:ff:1e:d9:b0:49:bc:26:23:75:96:
         80:fc:64:8f:31:b2:e7:fc:bb:8d:5f:65:15:2a:c5:70:22:8f:
         d4:60:a9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----