Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
File:                     -kNarmNKJJQBjFzfiFcJr1vONro.mft (raw, json)
Hash identifier:          QKI4S0g/NHrmZUo3GNd5n4vPE4pmVfdM6aIcOR71hnA=
Subject key identifier:   82:72:51:7E:21:6E:3F:4C:72:92:EE:BC:63:42:85:EA:3A:03:AC:29
Authority key identifier: FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA
Certificate issuer:       /CN=F36B1FB2AF/serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
Certificate serial:       095C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
Manifest number:          095C
Signing time:             Mon 26 Oct 2026 01:49:20 +0000
Manifest this update:     Mon 26 Oct 2026 01:49:20 +0000
Manifest next update:     Wed 28 Oct 2026 01:49:20 +0000
Files and hashes:         1: -kNarmNKJJQBjFzfiFcJr1vONro.crl (hash: jX4HFjFZP5dSjlL6gEW/90dlM5xqlZW3GFWqCn8/DV4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
                          rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 01:49:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2396 (0x95c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1FB2AF, serialNumber=FA435AAE634A2494018C5CDF885709AF5BCE36BA
        Validity
            Not Before: Oct 26 01:49:20 2026 GMT
            Not After : Oct 28 01:49:20 2026 GMT
        Subject: CN=6adeb1a0-9744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:fb:d8:d6:66:c2:22:a3:8c:d1:26:e0:5a:48:
                    0b:fc:98:fb:d8:39:d6:59:a5:bf:e3:6d:a7:d9:f9:
                    26:0c:24:b1:be:5b:3d:de:e7:a6:18:f6:5a:76:31:
                    fb:2d:ee:8a:f2:bc:4e:ca:25:63:10:d5:0d:84:57:
                    83:08:57:97:26:0f:c1:ad:f4:cf:ae:71:67:e7:76:
                    33:13:74:5b:69:a9:79:e3:f9:fb:80:cd:1c:0b:60:
                    e7:54:86:0f:3b:62:35:d2:d5:2c:bc:b5:39:01:90:
                    47:ff:5f:51:b8:60:eb:72:9c:30:1b:b8:b5:48:97:
                    c6:c1:0e:80:0f:ed:58:f1:79:e3:22:cd:3b:88:1a:
                    66:30:84:a6:84:6d:6d:28:76:3c:8e:28:12:81:fa:
                    55:70:28:f2:dd:72:00:7c:13:0d:9c:17:22:79:f4:
                    fe:06:79:ac:69:a2:48:f6:67:dc:53:b8:04:48:18:
                    db:21:f1:73:a7:d0:a4:67:1e:40:73:ac:f4:c0:c8:
                    d6:80:3f:f4:8e:b0:0b:9b:ee:6c:58:13:48:48:09:
                    76:a5:dc:70:9f:47:9f:3d:5c:6c:81:32:80:4b:85:
                    4b:3a:ce:d7:ae:29:87:b5:3a:95:dd:27:cd:c7:2b:
                    19:ae:68:86:7a:10:bf:fd:d8:11:8d:62:d7:23:3b:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:72:51:7E:21:6E:3F:4C:72:92:EE:BC:63:42:85:EA:3A:03:AC:29
            X509v3 Authority Key Identifier:
                keyid:FA:43:5A:AE:63:4A:24:94:01:8C:5C:DF:88:57:09:AF:5B:CE:36:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/-kNarmNKJJQBjFzfiFcJr1vONro.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1FB2/ECBC7E829F8311EA84591537F8AEA228/-kNarmNKJJQBjFzfiFcJr1vONro.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:d5:f2:83:c4:3c:c5:94:2b:34:57:67:72:6b:a1:4c:3c:7d:
         6b:99:fe:7f:c0:1c:52:af:d1:72:94:81:55:05:81:9d:ca:aa:
         c6:9a:7a:80:54:d3:81:4a:8c:90:c9:13:14:8e:cd:d9:3a:6e:
         14:e9:d3:96:c5:df:84:9b:a0:2c:f0:1e:71:62:3d:f9:66:40:
         6f:46:a0:8b:a2:f8:8a:05:10:68:96:83:d2:e4:6a:d2:b3:cf:
         f2:93:96:84:b8:66:7c:a2:64:35:02:db:5b:47:f4:4a:80:73:
         b7:c3:45:4e:34:02:ff:07:f7:1d:b7:9c:03:f8:96:6d:cf:72:
         d4:ad:f1:d7:ce:46:30:b4:9f:08:43:c2:71:2f:80:a1:92:a6:
         83:4e:f3:f4:27:2c:3e:a4:3c:14:b8:a5:a9:67:b1:ab:f7:40:
         a8:ae:94:50:b4:23:60:af:30:5a:70:22:59:5e:09:38:56:8d:
         58:91:2b:d5:40:5c:d8:08:8f:f8:3b:f4:fc:12:0c:1a:1b:03:
         e5:89:e3:a6:87:c9:b4:af:24:fb:95:c6:02:d2:8d:3b:05:ed:
         cf:03:71:1d:5c:31:4f:7e:e7:34:e3:e3:ca:d8:01:bf:4f:d6:
         fc:ca:08:9a:31:ce:44:33:de:0a:49:c9:79:01:0d:59:d5:d4:
         ce:af:ca:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----