Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
File:                     KT5c_1MDCLfw9rieE_cMZPXhCZo.mft (raw, json)
Hash identifier:          jysuHtMDhYk13tB+W7jGJ2jxORRG2kk3YnW2peqiB9g=
Subject key identifier:   C0:AB:DF:70:52:CB:9B:58:4B:80:D2:7E:7A:FC:9C:D3:7D:A1:E5:6E
Authority key identifier: 29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A
Certificate issuer:       /CN=F36B583CAF/serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
Certificate serial:       05BF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
Manifest number:          05AA
Signing time:             Sat 24 Oct 2026 03:11:35 +0000
Manifest this update:     Sat 24 Oct 2026 03:11:34 +0000
Manifest next update:     Mon 26 Oct 2026 03:11:34 +0000
Files and hashes:         1: KT5c_1MDCLfw9rieE_cMZPXhCZo.crl (hash: 1cy4eI9MU83Pt9XgDEjjnuqoqecAjHTUHY4fexPx2/s=)
                          2: 40511982333911F186D47CE8CE1D38B0.roa (hash: VhsL8IPripVma1+4Z1gu+Qc3VhSnefO0SWTsn1gXDMM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 03:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1471 (0x5bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B583CAF, serialNumber=293E5CFF530308B7F0F6B89E13F70C64F5E1099A
        Validity
            Not Before: Oct 24 03:11:34 2026 GMT
            Not After : Oct 26 03:11:34 2026 GMT
        Subject: CN=6adc21e7-1630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:00:9d:80:6a:77:96:d5:f5:e8:fe:54:d3:b4:
                    67:8b:18:91:d0:db:db:fb:86:a5:dd:d5:0c:f7:a5:
                    55:e6:a0:d0:5a:21:e4:b6:04:27:fc:ff:78:5f:49:
                    c3:03:85:10:ef:07:56:ba:4a:2d:87:4b:d6:ba:3d:
                    fb:0c:31:af:23:35:c1:6c:07:03:3b:bb:17:a3:9d:
                    64:1f:b3:71:c9:3f:a1:89:af:00:a1:d8:fa:c3:45:
                    ef:1e:23:be:be:44:cf:60:d7:d6:d0:1e:d7:9f:a8:
                    cb:61:cb:7e:c1:19:d9:0f:f4:cb:9a:c4:3d:f0:7e:
                    dd:7f:ec:f1:8c:c3:6f:ba:00:d5:75:eb:e2:d1:0e:
                    56:6e:4d:9a:c9:ba:8a:e5:66:67:3c:b9:1a:da:43:
                    d1:31:56:91:35:39:cf:2d:29:c4:0d:0d:58:81:e4:
                    f3:2e:5c:f9:22:1f:5d:4c:ba:51:71:bc:20:04:45:
                    9f:ed:2c:ad:e9:f9:4b:74:0e:bb:5e:22:10:ba:c2:
                    51:1d:ea:5b:96:7b:23:77:4e:de:8b:74:e1:e1:bd:
                    0c:45:a0:c8:f3:4f:ae:be:f5:39:15:9f:59:5b:e5:
                    b1:c8:42:95:ba:52:6e:41:b8:b1:c3:a7:61:f6:57:
                    0f:b0:bd:24:cd:ed:05:bc:41:99:67:14:42:d7:7d:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:AB:DF:70:52:CB:9B:58:4B:80:D2:7E:7A:FC:9C:D3:7D:A1:E5:6E
            X509v3 Authority Key Identifier:
                keyid:29:3E:5C:FF:53:03:08:B7:F0:F6:B8:9E:13:F7:0C:64:F5:E1:09:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KT5c_1MDCLfw9rieE_cMZPXhCZo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B583C/5DF79C7C971511ED99F847B8F1222468/KT5c_1MDCLfw9rieE_cMZPXhCZo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:f7:e1:c8:a4:30:10:36:8d:e3:1e:97:b3:80:23:ad:bc:c5:
         48:09:a5:9c:b7:ab:d3:be:78:01:df:26:dc:0f:37:b9:67:63:
         59:91:4b:5e:3a:5c:9b:fb:1f:e5:d5:05:75:61:2f:7c:a7:8b:
         23:3e:a3:30:04:7a:0d:fb:52:16:90:54:a0:51:b1:52:cf:14:
         eb:61:dd:13:e1:ba:ea:b1:92:d7:89:27:a7:48:e5:a3:60:4b:
         aa:bc:ef:62:ed:f1:48:8d:56:02:eb:d2:7e:4e:36:7d:b3:a9:
         9d:9e:37:d7:7d:35:1e:28:0b:82:bc:1e:83:bc:25:38:ff:98:
         1f:55:01:9f:6f:7f:14:8a:71:66:2a:79:5e:9d:28:72:27:86:
         bf:90:6a:a2:0c:73:d8:25:3e:5a:6c:c1:df:fd:df:72:73:05:
         b5:55:bf:4a:c2:ff:3d:8b:66:88:a4:68:2c:4a:e0:00:6e:1c:
         d8:95:a1:a1:d5:d4:90:28:23:47:2f:8b:3a:a6:94:a7:1c:5a:
         42:12:e3:3c:3b:d5:8d:66:cf:13:ff:ac:3c:76:13:79:16:9f:
         8b:ce:c5:f1:c4:d1:b2:8d:d0:b4:cc:77:80:44:66:ba:bd:b7:
         f5:2f:9f:47:bf:e8:cb:e5:63:ac:14:49:43:31:fb:f7:c1:b6:
         58:e3:dd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----