Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
File:                     zr6Z7rC-POjbGbpEdmyj48gHqYk.mft (raw, json)
Hash identifier:          iyzdQqUbaRSRe6bgEsINcM3LJPgeIJ0S6IWjnmzBoNI=
Subject key identifier:   A2:F7:68:D1:A0:25:CD:A2:04:F9:DD:18:35:CD:8A:D4:96:57:A4:EC
Authority key identifier: CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89
Certificate issuer:       /CN=F36C4A3BAF/serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
Certificate serial:       0423
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
Manifest number:          0422
Signing time:             Mon 26 Oct 2026 03:56:08 +0000
Manifest this update:     Mon 26 Oct 2026 03:56:07 +0000
Manifest next update:     Wed 28 Oct 2026 03:56:07 +0000
Files and hashes:         1: zr6Z7rC-POjbGbpEdmyj48gHqYk.crl (hash: axR2YavHbevul1H4h2EaMQ187NMij/sps70E5C7/sL8=)
                          2: B4ABD18CA48E11EEB808FE65D25BE465.roa (hash: S5XSL+t01DymTgJeqFWNkxH4TrI/NWZhOLYNwLD+7Qs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 03:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1059 (0x423)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4A3BAF, serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
        Validity
            Not Before: Oct 26 03:56:07 2026 GMT
            Not After : Oct 28 03:56:07 2026 GMT
        Subject: CN=6adecf58-7b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:05:28:82:8c:2f:38:7c:93:96:d2:90:68:8f:
                    4c:d1:d1:88:9c:a8:7b:0e:d8:1c:77:ef:45:6f:b2:
                    d1:c8:f8:40:0e:45:eb:1e:51:11:32:ae:ef:1b:07:
                    ea:2e:bf:48:43:8c:4f:67:91:d6:d5:ee:9a:e8:91:
                    2f:92:75:53:83:6f:cf:be:53:b1:77:32:ca:a5:c8:
                    ed:e4:ee:ff:94:10:65:dd:5c:4d:b4:2d:64:b6:fd:
                    3a:33:bb:84:e6:6e:93:90:a0:23:bc:9e:14:ed:fb:
                    04:60:f7:d4:78:36:ca:7c:0f:6f:fc:a8:b7:b7:ac:
                    6b:c3:4d:75:ba:9d:92:84:b3:74:75:02:5a:c3:41:
                    58:63:3d:bb:f8:e1:06:01:4f:89:7a:ee:da:43:c5:
                    c6:67:4c:b9:1d:8a:6b:b8:53:09:5e:ad:17:ca:e8:
                    5e:7b:98:ed:83:7b:48:82:03:0c:56:22:b0:7f:ed:
                    6e:e9:62:ee:85:4c:e6:2d:17:0d:2d:1b:64:7c:05:
                    c9:89:91:a5:9e:9e:7d:00:9f:15:6f:02:db:42:eb:
                    3d:1b:8b:6e:34:4e:04:cc:74:43:eb:d2:87:ce:3d:
                    c7:60:7c:d4:76:7e:18:84:8f:b7:63:4e:f2:74:1a:
                    3b:b0:a3:b8:d5:72:ef:f1:50:3d:b8:da:d1:a0:e3:
                    13:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F7:68:D1:A0:25:CD:A2:04:F9:DD:18:35:CD:8A:D4:96:57:A4:EC
            X509v3 Authority Key Identifier:
                keyid:CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e3:29:be:41:d6:6b:bc:ba:d7:0a:c8:0e:02:7a:c9:9f:eb:
         ae:6c:b3:6e:17:93:59:51:b9:98:b9:90:93:10:99:f4:3f:b4:
         52:14:af:a1:2d:cc:ba:46:a8:2a:f7:d7:c3:a2:a3:b4:07:c1:
         b0:a0:c3:ae:2c:53:a2:36:51:37:d5:da:3f:fe:a2:20:fc:6f:
         43:96:be:74:9e:75:d6:4f:ca:9d:7f:d8:a8:5d:bf:15:07:a5:
         a8:2c:15:f1:c4:28:08:55:04:61:69:db:c2:fa:2c:5d:e6:25:
         df:c0:f1:3c:55:60:0f:96:7b:9d:c5:c6:16:0e:bc:6b:55:44:
         f9:d7:5b:ef:f2:b0:55:a8:18:50:3b:99:fb:42:34:8c:2c:b9:
         be:7b:8e:00:26:b2:26:d2:89:57:79:60:8b:ef:c9:13:9f:49:
         b7:39:19:f7:e1:77:24:b5:b1:5b:3b:20:9d:4e:72:03:74:f1:
         68:20:35:db:83:9d:39:29:e8:39:cf:e4:f1:21:67:d0:0d:9e:
         ef:31:21:d7:9c:f2:4a:72:e8:6a:1b:24:46:ec:d4:c1:6b:22:
         04:4a:7e:e6:77:63:9c:be:2e:82:2e:57:5a:30:71:f9:6e:15:
         48:ad:3a:37:a1:76:4c:df:56:4b:50:3f:b9:d5:cf:a5:d7:79:
         dc:16:a8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----