Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
File:                     xlOxWlDuQwH_JY2KKnwYY4PFDro.mft (raw, json)
Hash identifier:          4k8Qlr1OrkNxCOgyLp7ceeaSiFV5ymJchTB/3fHQjWo=
Subject key identifier:   39:D0:91:4F:5C:AE:76:43:15:5D:49:86:AC:E0:BF:BA:95:1A:69:D0
Authority key identifier: C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA
Certificate issuer:       /CN=F367D68CAF/serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
Certificate serial:       0824
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
Manifest number:          0823
Signing time:             Sun 25 Oct 2026 02:03:55 +0000
Manifest this update:     Sun 25 Oct 2026 02:03:54 +0000
Manifest next update:     Tue 27 Oct 2026 02:03:54 +0000
Files and hashes:         1: xlOxWlDuQwH_JY2KKnwYY4PFDro.crl (hash: 3GOUiKwAIOe1QckgeLTVJYWo52seY4lO5Ls+6Aqlyfs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2084 (0x824)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367D68CAF, serialNumber=C653B15A50EE4301FF258D8A2A7C186383C50EBA
        Validity
            Not Before: Oct 25 02:03:54 2026 GMT
            Not After : Oct 27 02:03:54 2026 GMT
        Subject: CN=6add638b-612f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:e6:08:cc:3f:40:42:e6:b3:4e:5f:cb:75:
                    e9:f1:08:9c:6a:fd:06:d4:14:3f:ca:d6:01:5d:d9:
                    7c:18:f1:fb:b0:b2:5e:ad:8e:e0:aa:19:89:fa:ac:
                    b3:f3:e2:28:9a:57:c4:f6:9a:90:99:19:f1:e4:cb:
                    44:71:10:42:30:55:f1:40:4e:ef:65:e6:b1:3f:b7:
                    c8:b4:11:22:2d:d3:a0:3d:61:8f:c3:3d:40:87:aa:
                    6b:e8:7e:65:10:8d:19:52:92:47:80:0d:47:11:92:
                    14:c6:15:71:c5:5f:64:f6:16:9a:ba:a9:df:d4:92:
                    cd:dc:3b:61:66:df:db:5e:8b:11:7f:da:a4:a1:6e:
                    28:d8:a5:6a:21:1f:be:fc:20:62:e5:56:da:b1:5d:
                    4a:a9:36:6b:7c:e3:45:d5:1c:0e:96:43:61:17:d8:
                    9b:3e:53:62:5a:05:1c:6b:57:5b:4c:7f:05:1d:b7:
                    c3:77:50:7f:2d:aa:60:61:95:ac:23:ac:2a:00:82:
                    a9:f7:78:3e:61:43:8c:79:bc:63:75:64:28:36:bb:
                    c2:1b:ca:d6:5c:03:12:24:ec:a3:63:f3:f9:e4:97:
                    5b:c7:5a:cd:45:e2:6e:af:81:f1:f1:6e:48:12:05:
                    5c:11:de:56:15:98:d2:f5:6b:b7:a3:75:63:b0:11:
                    6d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D0:91:4F:5C:AE:76:43:15:5D:49:86:AC:E0:BF:BA:95:1A:69:D0
            X509v3 Authority Key Identifier:
                keyid:C6:53:B1:5A:50:EE:43:01:FF:25:8D:8A:2A:7C:18:63:83:C5:0E:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xlOxWlDuQwH_JY2KKnwYY4PFDro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D68C/B68F7ED8920611EBAB13BC7CF8AEA228/xlOxWlDuQwH_JY2KKnwYY4PFDro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:b7:65:4e:bf:fc:68:3b:3c:7e:ba:2b:c5:af:df:33:eb:cd:
         5e:38:3c:93:8d:2a:d5:51:b0:90:85:5f:7a:ec:b0:17:91:2c:
         31:17:0e:6a:7e:f9:94:78:c9:eb:6f:eb:11:2e:4e:bc:b8:98:
         4a:9e:28:57:23:c1:2f:ba:89:97:b5:de:49:41:16:b4:1e:95:
         9d:07:06:51:d7:5e:96:a4:9e:80:7e:53:8a:1a:6b:5b:b7:93:
         61:06:91:09:be:6e:81:bc:4b:d3:d2:4c:4b:fd:d8:29:6e:52:
         cd:d2:1c:b3:21:c4:e8:1f:97:ae:b2:ce:78:5a:e2:ad:49:1a:
         8d:53:25:f8:40:f8:70:66:ae:26:0e:bf:5f:b0:54:2e:eb:db:
         ce:90:b9:49:c9:90:6a:fa:c7:1f:8c:39:5a:28:fd:0c:b2:57:
         54:03:77:b7:cc:e6:af:8f:1c:73:94:e0:72:4a:a3:85:10:bf:
         36:66:86:7f:72:5e:57:66:70:b6:58:74:69:40:53:48:39:88:
         2f:ce:80:66:d6:b1:39:9a:11:b5:e2:0c:54:74:b6:ee:81:a4:
         b2:66:15:8d:5a:e2:27:01:bb:79:60:77:9c:63:ca:c9:35:dd:
         40:2f:4a:be:4c:c7:0b:cb:83:90:1b:44:8d:88:e5:6d:98:d2:
         82:53:fd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----