Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
File:                     l8kOJSEtiHz54d5v3fVRuoEvoTk.mft (raw, json)
Hash identifier:          kx9An8CyUxx0khtxx9qbzCH65jehpQtvB5/xFPrvfeE=
Subject key identifier:   F2:6E:D3:06:EC:52:2D:CC:0A:22:61:DD:13:CA:57:10:39:E0:3A:33
Authority key identifier: 97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39
Certificate issuer:       /CN=F367DFA4AF/serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
Certificate serial:       0A50
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
Manifest number:          0933
Signing time:             Mon 21 Sep 2026 02:03:57 +0000
Manifest this update:     Mon 21 Sep 2026 02:03:56 +0000
Manifest next update:     Wed 23 Sep 2026 02:03:56 +0000
Files and hashes:         1: l8kOJSEtiHz54d5v3fVRuoEvoTk.crl (hash: xovUoR3RptxggeDJ18wL4a7I+BotZqOKokDUpn0FFmY=)
                          2: EBEF01B4B39011F1AB143DB3CE1D38B0.roa (hash: zTSTEil+00JSU10YZOnNSTSqUr6EUTtKfQAH6mWtDoQ=)
                          3: EE4BCA50C51611F0882C7A79DAE4EC9C.roa (hash: QORpqLPUnemyJVfwyKiR9rBTSjXXBwPxprwBhq4ORos=)
                          4: 14DBDD40397F11F18F7D251BCF1D38B0.roa (hash: 7JorfiIlTDbNmduHmYrQZFBXPxFlQKaOmXJt1ogKFiw=)
                          5: 1BF4F8CC187E11F1BA032D93DAE4EC9C.roa (hash: zXtWle/yOTpKwLGIe5XmsNFjkXiS/vvqgdWG5YsQ/bE=)
                          6: 6C8BC3E0B38F11F188721BABCE1D38B0.roa (hash: NmVNffd/BEPiXRR/AAqK+iMslvy5hURM3Q+ykDxHz0E=)
                          7: DE2FE726163011F1829CE9EADAE4EC9C.roa (hash: TMIMgwsogkJNyAx0X77xxGocwvE2m5HEfSTcrhrwoyI=)
                          8: 37683106C51711F0831FC779DAE4EC9C.roa (hash: X7+3tEI76PBXlAAcgP4WQPX2ONBme8iwLb9ftSScgDo=)
                          9: E8B4523C187D11F1A5DD0B93DAE4EC9C.roa (hash: N/GBo7sJ9sVz40T3E38ntjv4vl5jXnFQj2Tw1+btscU=)
                          10: 087B5DDA187F11F1B908269BDAE4EC9C.roa (hash: +iSgYQye2OWt8JVvNd+soAvL1h8eN44KQQOxfGUmU6o=)
                          11: 71B540ACB39011F1B8014FB1CE1D38B0.roa (hash: CwZ6Znsms5tlQuV4ajJ93AfNQRjxSb7NhGK13DruOLI=)
                          12: 21129F90B19311F1B9ABB6B7CE1D38B0.roa (hash: VhI4usp4njPZ2423cVJ+lDfaDZyz+DQsqqtxkpzWw9k=)
                          13: 933FD9AAA69B11F18E82F4CBCE1D38B0.roa (hash: Begy1Pb2rz2hrdXAve9cyRscu7j1WRjvxAfHS703P5c=)
                          14: 991B77F8CE8811F08B0D7DCBDAE4EC9C.roa (hash: 4NDnlsPwnLQ0bvJwiU4jMN98KtaytJXKCjFbhCuymzw=)
                          15: FC053F5CAF7A11F09C68E3B1DAE4EC9C.roa (hash: ovkEHwqKLlju8yGU3yNPqm9jMYWfqRxIBEHgStiUby0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:03:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2640 (0xa50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DFA4AF, serialNumber=97C90E25212D887CF9E1DE6FDDF551BA812FA139
        Validity
            Not Before: Sep 21 02:03:56 2026 GMT
            Not After : Sep 23 02:03:56 2026 GMT
        Subject: CN=6ab0908d-5e75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:ea:bc:3d:e3:87:1d:b1:02:74:17:36:77:
                    4a:c4:30:01:10:b7:e4:cd:13:25:1e:cb:c2:97:89:
                    e3:6e:a5:3e:a0:96:e2:48:38:1f:25:79:e4:11:58:
                    75:1d:b3:f7:ae:c1:81:46:26:59:3a:6c:1d:6f:e5:
                    9f:16:53:e0:4f:1b:22:5b:c2:7e:fa:b0:5b:fb:43:
                    19:29:ee:9c:c5:48:d9:d1:92:a6:34:76:50:d7:89:
                    51:fd:cf:d2:cc:1a:29:9e:9e:e4:ff:d1:88:20:70:
                    a0:a0:ab:5a:07:00:47:e0:2c:48:29:6b:f4:76:46:
                    6d:00:14:19:4c:be:05:1f:fe:93:aa:af:18:e1:b9:
                    39:4a:33:68:c1:05:6d:88:12:87:5e:cd:04:13:f6:
                    ef:83:d0:26:c6:a2:e7:6e:d6:8a:39:40:09:4c:28:
                    bf:31:d5:09:df:78:61:1a:b6:0a:c6:c9:74:b9:34:
                    73:4f:fd:cb:58:aa:92:d9:43:43:96:7b:b4:2e:ed:
                    04:32:be:59:cd:04:cd:2c:5b:86:e1:36:a9:53:db:
                    63:1a:e4:a0:1c:6a:e3:76:af:5a:d4:3b:0f:f1:fb:
                    32:ea:fc:34:79:29:2b:60:18:07:22:01:5d:3a:ad:
                    56:13:ca:df:5a:d7:0f:83:ef:6a:4b:a3:f3:49:25:
                    a6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6E:D3:06:EC:52:2D:CC:0A:22:61:DD:13:CA:57:10:39:E0:3A:33
            X509v3 Authority Key Identifier:
                keyid:97:C9:0E:25:21:2D:88:7C:F9:E1:DE:6F:DD:F5:51:BA:81:2F:A1:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8kOJSEtiHz54d5v3fVRuoEvoTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DFA4/08B8D82093AC11EBB1D2A832F8AEA228/l8kOJSEtiHz54d5v3fVRuoEvoTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:18:ca:cb:30:12:94:11:f6:f2:8c:50:ee:bf:7c:e2:f3:0a:
         6e:4e:12:86:c9:94:32:46:40:90:29:a4:bc:47:f8:82:ca:ce:
         ef:5e:c4:93:9e:ea:75:fe:78:6c:dc:11:38:aa:40:39:c8:6c:
         a4:3c:d2:55:0f:af:cd:27:03:7f:7f:e5:37:4a:bd:0e:32:9e:
         dc:41:f1:55:ae:c7:49:b5:7c:25:d9:5b:ff:8b:9e:58:cf:a7:
         54:0a:52:e2:7e:d3:98:4c:db:e4:84:fb:82:60:51:40:77:9e:
         38:91:0e:f3:3a:49:3b:57:38:fd:82:7f:06:9f:1f:21:91:13:
         d9:06:3b:f7:ce:8d:fd:db:80:1c:0e:07:d6:c3:54:dc:b2:87:
         88:07:8d:97:3e:f4:5a:f0:f3:d5:09:38:bc:25:6c:50:76:27:
         c8:0b:fe:36:89:e9:07:dd:7f:e1:06:a7:b5:87:ae:66:45:17:
         10:a0:a6:c6:e6:d9:2f:e5:2a:d2:57:68:2a:c4:ad:b5:2b:4a:
         96:9e:6e:fd:3b:46:29:66:0d:40:4c:34:df:c9:de:fa:19:c1:
         8c:a1:87:b6:f1:56:f7:39:d9:f8:0a:bf:11:e9:98:b6:59:d5:
         88:c4:e5:8c:2e:93:42:32:15:79:74:00:e7:cd:dd:05:2a:5d:
         89:b5:24:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----