Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.mft
File:                     a3fSZSdSIpMFr-1TE57kNToxbvc.mft (raw, json)
Hash identifier:          LTS9EmiekgpnwgwsuYV6gXfw2zF3IRhPlEzSsU8mACk=
Subject key identifier:   2E:E1:AA:8A:8B:81:86:FD:9A:B8:F5:72:E2:78:6D:43:F3:7A:0A:B8
Authority key identifier: 6B:77:D2:65:27:52:22:93:05:AF:ED:53:13:9E:E4:35:3A:31:6E:F7
Certificate issuer:       /CN=F36894B8AF/serialNumber=6B77D2652752229305AFED53139EE4353A316EF7
Certificate serial:       06
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a3fSZSdSIpMFr-1TE57kNToxbvc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.mft
Manifest number:          05
Signing time:             Thu 17 Sep 2026 05:56:57 +0000
Manifest this update:     Thu 17 Sep 2026 05:56:56 +0000
Manifest next update:     Sat 19 Sep 2026 05:56:56 +0000
Files and hashes:         1: a3fSZSdSIpMFr-1TE57kNToxbvc.crl (hash: dR+XBUBH9rls7owjWJnhxOPRJTCvznZy88ch3pLOsy0=)
                          2: 85849A60B03411F1A5F655E2CE1D38B0.roa (hash: hqZDJvBVHj8Bj9yBtyWBSvYs2bDB7xmpzCOtPt5CHuA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a3fSZSdSIpMFr-1TE57kNToxbvc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 19 Sep 2026 05:56:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36894B8AF, serialNumber=6B77D2652752229305AFED53139EE4353A316EF7
        Validity
            Not Before: Sep 17 05:56:56 2026 GMT
            Not After : Sep 19 05:56:56 2026 GMT
        Subject: CN=6aab8129-7bdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:95:65:cc:7a:82:25:2a:bd:f6:e0:4d:fe:6c:
                    de:71:93:5f:3e:cf:66:50:ae:61:f1:e5:2f:c2:77:
                    3d:63:7a:9c:99:71:6a:c2:ad:b3:24:9a:b7:c0:39:
                    53:b0:1b:38:9c:c5:b5:cd:d0:2d:6a:06:b1:13:9b:
                    4d:2c:7f:e1:d9:57:64:a1:fe:65:f6:43:90:12:7b:
                    cb:1a:a7:fc:55:55:e2:75:a9:1b:31:c9:d4:8d:3f:
                    61:1d:2f:68:1a:49:c6:dc:18:a9:28:02:16:da:d7:
                    32:c7:b4:c6:a8:88:4c:ab:ed:35:a8:12:8c:b2:f4:
                    34:d0:58:9d:03:f9:83:ce:8f:95:14:83:ff:a5:d2:
                    18:40:42:73:5e:6f:b1:bd:8a:95:4f:32:f1:7d:a8:
                    43:ea:78:f6:18:7b:8b:8c:50:1e:08:c4:2b:8a:2c:
                    9a:bc:93:9b:99:bf:28:ba:0e:72:4e:8c:7c:ce:0a:
                    51:7b:3b:2b:28:30:0d:e1:f4:eb:01:9e:88:bb:78:
                    83:06:ee:d4:46:45:14:7a:ed:c5:42:c1:58:ba:d1:
                    17:18:95:22:88:7f:f5:0c:74:f9:e0:48:a3:5c:40:
                    d1:b1:2f:67:cb:ae:59:bb:28:a8:9b:41:e8:33:da:
                    f0:e1:82:f9:4a:bb:c1:8c:aa:fc:7a:47:00:57:3d:
                    2e:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:E1:AA:8A:8B:81:86:FD:9A:B8:F5:72:E2:78:6D:43:F3:7A:0A:B8
            X509v3 Authority Key Identifier:
                keyid:6B:77:D2:65:27:52:22:93:05:AF:ED:53:13:9E:E4:35:3A:31:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a3fSZSdSIpMFr-1TE57kNToxbvc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36894B8/A672CFF2B03011F1A0111FCBCE1D38B0/a3fSZSdSIpMFr-1TE57kNToxbvc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:ec:a4:56:e7:bd:c2:5c:59:6d:af:7a:0d:42:03:31:17:37:
         4f:9b:f9:7e:42:e6:bb:23:87:f3:c4:42:da:a0:7d:4c:75:02:
         62:5a:a3:46:67:6c:15:f2:ce:f4:35:f0:ff:e7:c7:8d:b7:fe:
         68:c0:72:04:cc:5f:77:3a:cc:28:7b:53:31:55:3a:ab:55:93:
         de:3d:99:68:b7:5b:52:26:0a:f0:2a:61:18:78:d2:ac:7a:1c:
         5a:67:1f:1f:61:1a:1c:91:9b:3a:f7:14:bf:b3:b9:55:52:fb:
         83:4f:8c:8a:9d:56:fe:85:67:8c:c8:b9:ff:4f:88:5c:6e:ad:
         5f:c9:0a:a0:48:27:03:e4:46:53:ac:2b:f2:62:b7:07:c5:ae:
         61:16:2a:02:cc:8a:49:ac:bf:f8:49:13:1a:ea:8b:53:5c:c3:
         c1:1c:b8:d8:21:38:78:00:b6:e5:6a:23:4b:36:93:28:7a:b4:
         c6:47:02:00:4a:aa:44:b6:14:ec:b8:7f:96:39:15:d8:2e:19:
         e6:03:02:b2:09:d2:34:61:cd:c2:83:ce:6d:57:d8:d1:7c:4f:
         8c:d5:26:b2:0d:db:d5:25:c4:2c:75:21:1f:34:cd:ff:8f:76:
         38:f6:e7:ba:af:ff:6b:63:ce:fb:57:b4:cd:f2:f2:d0:77:5d:
         e2:2a:2a:c1
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBBjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY4
OTRCOEFGMTEwLwYDVQQFEyg2Qjc3RDI2NTI3NTIyMjkzMDVBRkVENTMxMzlFRTQz
NTNBMzE2RUY3MB4XDTI2MDkxNzA1NTY1NloXDTI2MDkxOTA1NTY1NlowGDEWMBQG
A1UEAxMNNmFhYjgxMjktN2JkYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAM6VZcx6giUqvfbgTf5s3nGTXz7PZlCuYfHlL8J3PWN6nJlxasKtsySat8A5
U7AbOJzFtc3QLWoGsRObTSx/4dlXZKH+ZfZDkBJ7yxqn/FVV4nWpGzHJ1I0/YR0v
aBpJxtwYqSgCFtrXMse0xqiITKvtNagSjLL0NNBYnQP5g86PlRSD/6XSGEBCc15v
sb2KlU8y8X2oQ+p49hh7i4xQHgjEK4osmryTm5m/KLoOck6MfM4KUXs7KygwDeH0
6wGeiLt4gwbu1EZFFHrtxULBWLrRFxiVIoh/9Qx0+eBIo1xA0bEvZ8uuWbsoqJtB
6DPa8OGC+Uq7wYyq/HpHAFc9LuUCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQu4aqK
i4GG/Zq49XLieG1D83oKuDAfBgNVHSMEGDAWgBRrd9JlJ1IikwWv7VMTnuQ1OjFu
9zAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODk0QjgvQTY3MkNGRjJCMDMwMTFGMUEwMTExRkNCQ0UxRDM4QjAvYTNmU1pT
ZFNJcE1Gci0xVEU1N2tOVG94YnZjLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvYTNmU1pTZFNJcE1Gci0xVEU1N2tOVG94YnZjLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4OTRCOC9BNjcyQ0ZGMkIwMzAxMUYxQTAxMTFGQ0JDRTFE
MzhCMC9hM2ZTWlNkU0lwTUZyLTFURTU3a05Ub3hidmMubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAJ/spFbnvcJcWW2veg1CAzEXN0+b+X5C
5rsjh/PEQtqgfUx1AmJao0ZnbBXyzvQ18P/nx423/mjAcgTMX3c6zCh7UzFVOqtV
k949mWi3W1ImCvAqYRh40qx6HFpnHx9hGhyRmzr3FL+zuVVS+4NPjIqdVv6FZ4zI
uf9PiFxurV/JCqBIJwPkRlOsK/JitwfFrmEWKgLMikmsv/hJExrqi1Ncw8EcuNgh
OHgAtuVqI0s2kyh6tMZHAgBKqkS2FOy4f5Y5FdguGeYDArIJ0jRhzcKDzm1X2NF8
T4zVJrIN29UlxCx1IR80zf+Pdjj257qv/2tjzvtXtM3y8tB3XeIqKsE=
-----END CERTIFICATE-----