Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File:                     kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier:          EfzgCFm10a1MVKHm2MBMsvUT2tKv1Z78sQn3Nh2+TJk=
Subject key identifier:   74:50:9F:2A:5A:45:A1:1D:F5:D4:08:B5:AD:69:81:E8:9D:6E:A1:70
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer:       /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial:       07FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number:          07F9
Signing time:             Sat 24 Oct 2026 02:08:43 +0000
Manifest this update:     Sat 24 Oct 2026 02:08:42 +0000
Manifest next update:     Mon 26 Oct 2026 02:08:42 +0000
Files and hashes:         1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: dWQnG5rT3DbOyU7geFQKN6qPPnuXfmOdM89H4zK/13s=)
                          2: 6378438CADEF11F1B06064A3CE1D38B0.roa (hash: PAJkk9GbRkENurvt2pMeFb7ahmp2Wf33f+N9WvcQmlI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2044 (0x7fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680E82AF, serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
        Validity
            Not Before: Oct 24 02:08:42 2026 GMT
            Not After : Oct 26 02:08:42 2026 GMT
        Subject: CN=6adc132a-51bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a0:c0:4a:49:77:ae:44:5a:d2:05:a3:41:a2:
                    82:f5:8f:9a:e9:05:6b:f5:fa:55:05:8a:57:35:84:
                    3b:be:ae:64:00:84:e3:23:8e:36:58:57:e1:23:d4:
                    ae:c8:42:71:17:fe:4b:f8:e4:12:0d:97:71:63:9f:
                    0a:1b:f2:b0:8c:a1:1a:a1:46:fe:0e:6d:96:93:64:
                    45:be:c3:7b:03:bd:26:d2:74:b8:51:01:50:54:5e:
                    05:d1:a1:89:c1:0f:0a:c0:c2:23:41:19:1a:c8:24:
                    f5:8a:d7:75:8b:53:87:e5:67:3f:a4:dd:8d:0c:c1:
                    ab:c8:9c:e6:5e:ba:23:66:f4:f4:be:c0:b4:04:9d:
                    84:8d:3b:cb:a4:65:66:7a:55:36:6f:e8:8c:93:c1:
                    35:ae:9a:c9:77:ee:c7:54:01:30:46:96:d7:77:d5:
                    e7:da:00:3d:84:66:00:90:e8:9b:23:cb:0f:d8:1b:
                    66:be:eb:13:7b:31:9d:8a:b7:3d:0a:59:97:f9:fb:
                    e0:dd:69:8c:be:1b:99:c6:a8:d3:7f:44:d8:95:61:
                    65:50:6b:08:42:78:ed:d5:94:cc:b1:03:00:5c:c1:
                    4b:7c:76:bd:5a:99:ee:1d:fd:69:1d:2c:f7:25:fc:
                    7a:9a:17:79:8d:80:33:7c:81:32:21:f6:7b:06:28:
                    67:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:50:9F:2A:5A:45:A1:1D:F5:D4:08:B5:AD:69:81:E8:9D:6E:A1:70
            X509v3 Authority Key Identifier:
                keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b6:c8:a9:db:8d:2e:8b:72:2e:7e:b1:b4:a9:14:18:7b:30:
         b8:09:93:5f:b6:56:a8:4b:ad:7c:11:0c:bf:b0:0d:88:cb:cf:
         25:ac:df:bd:67:af:54:17:e1:ce:7d:49:76:4a:46:aa:ae:df:
         a4:0a:f5:c5:62:ef:3e:d9:a6:d4:2f:f5:fa:17:c6:20:a3:5e:
         e6:ee:7c:70:d1:87:a9:08:c9:91:20:d4:44:be:ba:92:07:81:
         8b:f1:99:51:e5:92:00:22:f1:71:c2:1f:4d:5c:dc:c8:20:b0:
         3e:de:05:b3:a7:44:84:9c:c8:32:e0:f2:60:70:b9:86:47:91:
         bf:91:32:93:b1:82:ac:22:56:4e:66:ff:a1:12:0c:f3:ae:06:
         1d:ed:04:3b:b9:44:86:6b:a6:51:d2:9c:88:eb:b7:07:c2:19:
         15:13:57:59:42:e3:8c:58:fa:a9:44:cd:c7:8a:bf:e9:34:ad:
         fc:97:c7:5a:ee:f4:50:c4:cb:55:75:c8:2f:d0:26:00:70:d5:
         f5:90:e5:99:53:3e:f3:a0:f8:67:ad:7d:68:2e:5a:af:10:96:
         ac:ae:2b:e5:b1:02:b1:f6:74:4f:f1:86:3e:91:fe:bb:9b:09:
         5a:3d:33:45:e0:63:44:84:dc:20:53:06:e9:16:c0:f4:c8:40:
         7c:e1:6e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----