Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
File:                     0CXaySkNvUCEbGSPrcyfxnGGtjI.mft (raw, json)
Hash identifier:          3qi/sa8QtfmiqDStTzMsk/5xTjAuorERzEVsTkiirEM=
Subject key identifier:   41:06:38:26:24:96:33:C5:A3:D3:8A:4A:C7:63:E8:35:28:DE:80:19
Authority key identifier: D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32
Certificate issuer:       /CN=F367B3F2AF/serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
Certificate serial:       0A21
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
Manifest number:          0A20
Signing time:             Sun 25 Oct 2026 01:39:00 +0000
Manifest this update:     Sun 25 Oct 2026 01:38:59 +0000
Manifest next update:     Tue 27 Oct 2026 01:38:59 +0000
Files and hashes:         1: 0CXaySkNvUCEbGSPrcyfxnGGtjI.crl (hash: rrWizRJ/qtGmOwl8I83ZVbOHEEbluMFI7y/8YUCSWHg=)
                          2: C0B60E1809D611EA8CC3F860F8AEA228.roa (hash: 90ECyuBdPNmxRJAqpaW1o3jdvLDow9bMz084syJod/o=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 01:38:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2593 (0xa21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B3F2AF, serialNumber=D025DAC9290DBD40846C648FADCC9FC67186B632
        Validity
            Not Before: Oct 25 01:38:59 2026 GMT
            Not After : Oct 27 01:38:59 2026 GMT
        Subject: CN=6add5db4-6aee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:87:ca:98:98:18:2d:43:1a:4b:b4:a2:9a:23:
                    47:9b:b8:19:3d:d3:1c:0f:3e:8e:cc:4a:a2:de:73:
                    79:43:60:6f:c2:87:52:15:1a:f7:85:0e:ca:ea:5e:
                    24:db:ee:2e:aa:f2:57:ca:28:0a:7d:6b:b3:31:d4:
                    e5:b7:e2:77:71:de:ae:14:33:ec:89:d7:fa:c5:8f:
                    d2:87:15:e8:ca:6f:f3:4a:ea:05:f5:f4:d1:74:32:
                    80:72:25:cc:a0:9f:02:cf:bf:11:9d:65:96:93:1d:
                    35:2e:d5:b9:13:ed:46:e0:71:cb:dc:35:16:5f:9c:
                    d7:e8:42:b3:05:55:5c:be:4e:f7:6c:15:2c:fc:9c:
                    5a:be:6b:75:b3:81:ad:63:c6:e3:df:ff:c3:c7:86:
                    97:67:81:fd:c3:05:0c:8e:a0:1f:38:96:d9:e9:95:
                    09:51:13:2c:06:56:9b:63:67:99:b9:bd:8a:78:46:
                    f5:d0:8b:77:90:cf:2f:4d:3b:5f:e6:06:f3:cf:39:
                    5f:1c:ad:08:a1:a8:f5:05:64:15:3d:73:a1:f1:23:
                    ac:dc:1a:16:18:11:f6:08:9c:92:0c:31:b4:2c:b7:
                    04:0c:b1:d5:c6:8d:f7:dd:02:a2:00:61:73:18:68:
                    e2:5d:f3:09:76:a4:93:5b:63:49:5c:2e:12:e1:ed:
                    2f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:06:38:26:24:96:33:C5:A3:D3:8A:4A:C7:63:E8:35:28:DE:80:19
            X509v3 Authority Key Identifier:
                keyid:D0:25:DA:C9:29:0D:BD:40:84:6C:64:8F:AD:CC:9F:C6:71:86:B6:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0CXaySkNvUCEbGSPrcyfxnGGtjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B3F2/04BA50F009CE11EA8313CC5AF8AEA228/0CXaySkNvUCEbGSPrcyfxnGGtjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d0:43:12:f7:34:0a:93:0a:2a:ca:f2:f3:4e:2f:7e:e4:9a:
         3d:44:35:31:f4:28:7b:43:7b:63:db:40:a3:16:33:a5:77:70:
         60:c5:79:d4:84:2f:ca:b5:20:6b:de:4a:ed:f5:df:06:0e:6d:
         78:c2:6b:37:71:2d:d9:53:88:8f:0b:e5:3c:b6:39:80:ab:f8:
         c1:3f:41:03:04:58:6b:e4:4d:2f:dc:1a:a6:aa:81:9f:87:d9:
         12:3e:2a:34:72:5d:b3:66:0d:55:09:61:c4:39:a8:0f:50:ef:
         fa:58:26:bb:1d:5e:50:f2:cf:b4:7c:8b:02:c3:37:4f:c1:e6:
         02:a4:17:8a:38:f6:aa:77:43:f1:3b:9c:80:f3:06:6a:5f:ea:
         a6:73:ac:44:75:25:6d:f7:39:6f:23:a7:86:2b:a9:c8:27:56:
         29:5b:a8:52:dc:01:40:06:2c:01:54:a1:0f:d4:a8:ae:62:87:
         9b:42:cb:2c:9b:df:dd:16:e6:0e:5e:d1:a6:a0:e2:1a:cf:b5:
         12:3f:df:17:77:6d:e4:6d:5a:77:8d:9f:c6:c7:58:83:85:93:
         25:01:2a:ff:53:eb:5e:8d:00:be:fc:1a:04:ad:01:2a:43:f5:
         19:ce:12:a3:e7:49:54:08:c8:55:a2:2c:43:71:91:67:89:37:
         7e:af:42:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----