Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
File:                     x9L8K1pBgYUDSEdgnQScHin7chQ.mft (raw, json)
Hash identifier:          9gxdjWn8F2mfy+5nYUjtNCeUTs/YB5BC/Kx6Z4rl8fk=
Subject key identifier:   85:44:3A:4B:6C:F3:42:26:D2:50:67:FB:E3:07:42:D6:64:57:E2:CF
Authority key identifier: C7:D2:FC:2B:5A:41:81:85:03:48:47:60:9D:04:9C:1E:29:FB:72:14
Certificate issuer:       /CN=F3699206AF/serialNumber=C7D2FC2B5A418185034847609D049C1E29FB7214
Certificate serial:       1A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9L8K1pBgYUDSEdgnQScHin7chQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
Manifest number:          19
Signing time:             Sat 19 Sep 2026 10:07:05 +0000
Manifest this update:     Sat 19 Sep 2026 10:07:05 +0000
Manifest next update:     Mon 21 Sep 2026 10:07:05 +0000
Files and hashes:         1: x9L8K1pBgYUDSEdgnQScHin7chQ.crl (hash: LmKwqB6xsDx2R9DLzZNY/srPy9GkTA2nLYnN4Pbqr1w=)
                          2: E47E81D4A1D411F1B89ACFE1CE1D38B0.roa (hash: spGCEq03/xL3BDX1c6E8r0y4NhuuAf+laXwTQmjxv40=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9L8K1pBgYUDSEdgnQScHin7chQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699206AF, serialNumber=C7D2FC2B5A418185034847609D049C1E29FB7214
        Validity
            Not Before: Sep 19 10:07:05 2026 GMT
            Not After : Sep 21 10:07:05 2026 GMT
        Subject: CN=6aae5ec9-ecdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:74:ab:15:3a:d9:33:1b:cb:55:22:a5:df:f2:
                    48:6f:74:81:12:a7:e6:48:55:16:7f:2f:01:11:89:
                    f5:83:66:44:7d:7f:e9:16:cd:e1:c7:ff:2d:e8:a3:
                    f7:a0:8d:da:83:83:ec:95:8e:5a:9a:e4:74:2b:5b:
                    f4:8d:b9:1d:c3:77:c7:52:6b:7d:15:15:94:22:1e:
                    dc:b2:07:40:67:79:8a:6a:4a:ab:1a:02:95:e5:96:
                    bd:c0:a4:7a:1b:b4:e9:6e:d5:5a:07:85:c1:9f:2b:
                    87:45:2f:51:0d:93:54:7d:65:28:2b:ac:47:a7:9c:
                    97:45:ab:02:cb:85:92:b8:b8:a6:b6:c5:09:18:30:
                    03:ac:9c:6d:2d:a2:51:1f:ed:ba:b8:ee:0d:90:3a:
                    94:87:37:83:48:71:ac:5f:35:a8:1f:2e:92:ea:0e:
                    e2:47:c9:fb:96:0a:e2:5d:44:28:c9:cb:ea:57:fc:
                    8d:df:6a:3f:6e:38:1a:76:48:2c:c2:45:b5:58:f9:
                    03:94:c2:31:db:55:24:ad:22:fe:86:e2:b7:d7:e4:
                    ab:67:df:8c:42:61:43:1b:09:5f:04:2c:0d:c2:78:
                    40:31:da:dd:fc:dc:ad:eb:b4:6a:69:2f:f5:c3:25:
                    35:5d:0f:fe:ee:25:1c:3a:ba:27:3c:7b:e6:09:94:
                    fb:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:44:3A:4B:6C:F3:42:26:D2:50:67:FB:E3:07:42:D6:64:57:E2:CF
            X509v3 Authority Key Identifier:
                keyid:C7:D2:FC:2B:5A:41:81:85:03:48:47:60:9D:04:9C:1E:29:FB:72:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9L8K1pBgYUDSEdgnQScHin7chQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:48:ad:70:16:f6:18:92:c0:1e:76:ee:2f:4a:b9:57:13:b1:
         40:20:56:6f:e9:7d:e6:f2:af:78:df:f7:a6:32:2d:51:d7:94:
         2d:6f:e1:6e:ac:cb:58:e7:0b:4d:48:e5:82:29:77:10:70:e5:
         4f:08:bb:a4:ec:fb:0a:dc:2e:d3:41:6e:46:56:dd:f0:1e:3a:
         1e:43:fd:c4:27:f6:58:7d:60:4c:09:5b:d3:e3:dd:de:4a:ae:
         f9:66:54:7f:a6:45:15:f2:99:5a:0f:22:6d:93:04:94:b7:fd:
         59:c2:f1:e7:5b:2d:ea:7b:d2:3b:97:e0:52:4a:22:6a:6f:a5:
         65:79:4a:84:a0:f7:8d:75:aa:b2:b7:45:d8:db:71:c6:d6:b5:
         da:a5:be:fb:60:88:1f:d6:b7:fa:37:ec:69:0c:be:55:33:8d:
         18:73:45:8a:7b:a2:8c:07:9c:aa:7d:af:d2:65:b5:57:5b:76:
         40:0b:76:52:55:1b:b8:b1:2d:80:34:a8:a0:2a:a4:0d:b2:19:
         e1:a5:40:a5:23:de:1b:f5:cb:f4:0f:b1:f6:db:68:3c:ab:0b:
         c8:d4:83:a0:48:59:94:82:34:35:27:3d:b7:9c:dd:01:ed:b0:
         d6:1a:33:70:17:5c:11:cd:45:bb:e2:8a:b9:2e:b1:a4:ea:9b:
         bb:83:4c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----