Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          WGOyl1pN98zP9AzVGRS1fUHT/fHXreFsnD6UbJcS0bA=
Subject key identifier:   75:38:28:80:08:59:D1:DF:46:5F:7D:D8:C0:95:C4:06:82:73:02:8D
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       03D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          03CF
Signing time:             Tue 27 Oct 2026 04:04:11 +0000
Manifest this update:     Tue 27 Oct 2026 04:04:10 +0000
Manifest next update:     Thu 29 Oct 2026 04:04:10 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: pj5sMueCxuPQ7cJg8iD/ZUJ2HDJN/MKcCOHKQMl59QU=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 976 (0x3d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF, serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: Oct 27 04:04:10 2026 GMT
            Not After : Oct 29 04:04:10 2026 GMT
        Subject: CN=6ae022ba-6ee8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:47:44:49:3f:81:50:dd:d7:14:0f:4c:09:20:
                    df:89:ee:d0:14:b6:19:ca:7b:60:52:26:96:ec:29:
                    c2:2c:2d:89:9e:1a:66:ca:2e:26:2d:d1:d9:a8:37:
                    60:41:6a:c9:c0:16:f0:a7:2f:18:ac:67:c2:5e:a0:
                    b1:9d:8d:13:19:6a:3a:8b:33:15:b3:2b:53:0d:01:
                    23:92:e1:53:e0:84:ba:af:7c:14:cd:2c:ea:8b:b0:
                    1f:10:4c:59:ea:b4:f9:be:61:19:43:77:07:4f:08:
                    04:c4:e5:27:d6:cf:35:f7:9c:0b:90:f3:5b:fb:da:
                    5c:19:62:d4:d8:1c:9b:d6:22:2b:c2:41:fc:39:68:
                    a6:ed:ad:49:e7:9f:d4:bc:f4:d5:c0:46:e3:df:ba:
                    b3:9f:3e:91:b7:49:bc:15:3e:3b:06:da:a1:e1:f2:
                    58:98:b3:01:c0:4f:7f:a1:ff:17:07:dc:e9:88:5c:
                    db:1e:53:31:9f:a2:1b:54:40:d4:57:e7:41:9f:7d:
                    a4:f8:42:25:e0:de:6c:f9:89:3c:cc:2b:60:ba:fd:
                    0e:b8:7f:c4:1f:06:61:1a:60:7a:19:b4:fd:b2:9e:
                    f3:a7:97:05:b7:d9:d2:aa:e5:79:47:7c:3f:ec:06:
                    23:2f:e8:59:d2:b0:b6:a6:2b:5c:4a:59:db:3c:3e:
                    7b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:38:28:80:08:59:D1:DF:46:5F:7D:D8:C0:95:C4:06:82:73:02:8D
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:c0:b8:26:5d:3e:7a:ea:fa:51:4e:ef:1f:bc:da:93:28:28:
         0d:05:e2:aa:62:7b:16:e5:0a:4f:43:88:b3:3d:be:15:56:d9:
         48:e5:3a:5d:dd:03:7b:a0:0c:9e:57:1c:d5:5d:0f:b0:90:a1:
         55:79:87:b9:11:98:5d:a7:69:46:e8:c6:1a:12:02:03:f5:8a:
         2f:1b:48:1c:c8:51:80:1e:ff:d4:67:8d:48:78:eb:75:58:64:
         6d:f3:d3:b7:6c:a9:b1:1f:90:c8:49:68:95:28:4c:e6:b4:6b:
         8c:61:24:38:6f:a3:78:1d:ff:b0:56:81:37:8a:8d:9e:55:8e:
         3c:6f:a6:0b:c8:62:54:b1:b3:20:86:8d:79:a0:e8:3f:c6:78:
         eb:7c:80:8c:aa:c9:7a:bc:71:cf:df:88:e2:68:f7:ab:a9:88:
         5a:0d:6e:5b:ef:21:20:dc:41:8a:b7:f1:18:51:6f:e4:b3:87:
         a2:dd:a9:21:af:99:c7:c8:fc:16:58:a4:5b:fa:7e:d9:2a:af:
         ca:ae:99:d1:2c:da:f8:9a:f9:20:25:db:2a:68:8e:70:4a:ef:
         48:9f:95:98:e9:17:09:34:c4:a7:d5:75:c0:14:4c:db:03:4b:
         d7:71:1f:a7:9a:86:40:de:c8:2b:fb:64:4b:98:f8:53:b8:bf:
         26:fc:b3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----