Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
File:                     iyKehHwjMl1Mwm9Ajx0z5VennW0.mft (raw, json)
Hash identifier:          t7Sa4rHIAqcEfqs2qBchVlkEPYjkAhojIpcXKfl9FXg=
Subject key identifier:   3C:C0:2E:ED:2F:67:8A:42:F0:16:C6:A2:39:15:F5:5B:6F:07:B0:EF
Authority key identifier: 8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D
Certificate issuer:       /CN=F36C3E3DAF/serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
Certificate serial:       0607
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
Manifest number:          0602
Signing time:             Mon 26 Oct 2026 03:00:04 +0000
Manifest this update:     Mon 26 Oct 2026 03:00:03 +0000
Manifest next update:     Wed 28 Oct 2026 03:00:03 +0000
Files and hashes:         1: iyKehHwjMl1Mwm9Ajx0z5VennW0.crl (hash: UaB7mMZe8prbmNyQkJ/SeaQm5iLkGGVyW1xpozSLfR8=)
                          2: C4EF296EF5CC11EF948FCB78762E951A.roa (hash: 6EhZAZOfI7/G45J7guhw2ognpwwtVmscJX9jxlBfd4k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1543 (0x607)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3E3DAF, serialNumber=8B229E847C23325D4CC26F408F1D33E557A79D6D
        Validity
            Not Before: Oct 26 03:00:03 2026 GMT
            Not After : Oct 28 03:00:03 2026 GMT
        Subject: CN=6adec233-29bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:28:24:26:5d:27:1a:c1:f6:04:49:ee:dc:
                    2b:2a:52:c8:25:74:5c:65:55:e5:d3:86:14:a2:11:
                    d2:c8:f0:52:04:71:e7:52:f3:76:c6:bf:1c:e7:de:
                    14:ea:23:d5:7d:9b:1e:79:7d:d3:dc:7e:d1:a1:ba:
                    f5:e8:bb:b7:dc:a0:fe:25:01:0b:1b:55:b7:1d:5b:
                    a8:cb:fe:76:79:89:8d:27:84:f7:5c:17:05:4e:15:
                    27:e4:db:ce:ce:cc:a1:cc:57:62:99:24:4e:bb:24:
                    d8:cb:9f:6f:e3:c6:a0:df:28:db:59:1d:ba:09:b9:
                    cb:a8:e1:1c:8d:80:4a:ac:49:7a:07:f9:24:86:1c:
                    d1:de:2f:f8:6d:43:d4:b9:64:2e:86:92:bc:d2:c4:
                    a8:43:1d:ef:48:7f:7a:7b:06:95:22:24:5d:5c:e7:
                    30:d7:84:f7:70:5c:93:74:a7:e6:59:b3:4b:d5:ee:
                    bb:c5:7d:e5:dc:33:86:98:3a:8f:d9:27:27:85:04:
                    11:b1:8c:1c:bb:1b:87:f1:34:3d:24:bf:97:b2:c9:
                    09:84:a4:5f:5b:5c:c7:ec:85:4d:56:87:66:9a:1b:
                    47:92:63:d2:3f:e4:98:9c:62:94:8f:d0:91:1b:e5:
                    30:11:58:b7:72:ad:eb:eb:d6:9a:25:3d:33:ed:39:
                    c0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C0:2E:ED:2F:67:8A:42:F0:16:C6:A2:39:15:F5:5B:6F:07:B0:EF
            X509v3 Authority Key Identifier:
                keyid:8B:22:9E:84:7C:23:32:5D:4C:C2:6F:40:8F:1D:33:E5:57:A7:9D:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/iyKehHwjMl1Mwm9Ajx0z5VennW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3E3D/3F373BF2444111ED8B3DCCADF1222468/iyKehHwjMl1Mwm9Ajx0z5VennW0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7e:1b:09:ff:eb:97:f8:a1:76:8a:ed:ac:d6:6d:82:13:82:
         27:9c:25:86:27:0a:ca:83:63:cd:4a:a1:cd:ff:bd:5d:71:2a:
         2f:b3:05:0b:3d:32:b4:d6:30:bf:8c:cb:ce:dc:d1:da:58:4f:
         ec:e4:9d:76:cd:ee:fe:b8:3f:d0:4c:d9:e1:6c:2f:01:49:7a:
         87:2c:4b:ed:4a:fb:7f:95:11:f4:80:db:ee:38:47:80:35:90:
         20:8d:e4:01:43:90:47:3f:50:7d:88:6e:b4:ca:71:65:90:8e:
         e0:a0:9a:4f:41:16:e8:0b:08:b8:4e:38:a7:66:b7:19:d5:24:
         c4:a8:43:e7:21:de:b9:bc:06:32:43:06:85:db:04:83:60:39:
         37:a0:e3:3b:f1:e3:cf:73:f6:ac:3d:21:b7:52:08:3f:2e:51:
         71:a8:1b:02:8d:8b:07:de:73:95:8c:ad:c1:19:09:0d:68:c1:
         a1:6b:55:67:46:91:b5:cb:93:35:d2:74:b3:c2:12:91:dd:8a:
         b1:5a:2e:9b:39:1c:d5:d5:de:a6:ae:f4:6f:7e:c4:22:0d:d3:
         03:55:ec:c4:b6:c2:0e:c4:4e:b6:8f:cf:a2:1e:97:0d:ac:c2:
         91:02:5d:51:21:80:57:a3:b0:96:b1:69:8e:07:5c:a2:28:3f:
         3c:be:3c:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----