Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
File:                     DfSP5wXc0B45e4-chO8Xkcls-9g.mft (raw, json)
Hash identifier:          NOmQnK4Y2ZRAgMOWvRV0ZsILSXKxlxGYTGTLeQFf1Eo=
Subject key identifier:   53:29:3C:82:A4:97:36:E8:3E:CD:C3:2E:18:A3:A8:EA:02:C7:F7:5C
Authority key identifier: 0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8
Certificate issuer:       /CN=F36C4AD7AF/serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
Certificate serial:       0875
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
Manifest number:          0872
Signing time:             Sun 25 Oct 2026 01:58:57 +0000
Manifest this update:     Sun 25 Oct 2026 01:58:56 +0000
Manifest next update:     Tue 27 Oct 2026 01:58:56 +0000
Files and hashes:         1: DfSP5wXc0B45e4-chO8Xkcls-9g.crl (hash: 5bbjXzB+o8gEswj39pZIqlCYj7st4bKREgfDpKwyyvQ=)
                          2: 23040FFA339B11EFAA1E5754762E951A.roa (hash: X4ZAQ6gAg0uApdYdcGPSN7HGXQ1rd2UvdvLUe5VreL8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2165 (0x875)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4AD7AF, serialNumber=0DF48FE705DCD01E397B8F9C84EF1791C96CFBD8
        Validity
            Not Before: Oct 25 01:58:56 2026 GMT
            Not After : Oct 27 01:58:56 2026 GMT
        Subject: CN=6add6260-5443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:75:42:9b:ea:bd:68:63:09:cb:bb:20:45:3e:
                    3b:c4:db:f2:a2:8a:e3:60:92:f5:fe:40:24:f6:8b:
                    3a:b5:0c:aa:6a:5a:af:a7:25:47:7b:54:80:2c:bc:
                    b6:42:03:66:6b:79:2c:69:00:e9:4d:5a:cd:27:fb:
                    32:97:77:b0:a1:91:ec:41:2d:aa:2e:79:e8:a8:22:
                    9c:61:ca:ab:73:c3:97:7a:3b:84:0f:36:15:7c:3e:
                    89:9c:0a:b7:2b:a4:1f:17:92:d7:f8:13:13:ea:81:
                    50:63:a2:9e:98:f5:4f:53:e1:68:4e:1a:f5:7d:f9:
                    e4:0e:1e:4d:0a:00:22:90:40:38:87:41:d0:6b:f9:
                    02:e1:89:a8:b7:82:7d:63:28:ca:ef:ea:f0:1e:5e:
                    78:8e:4b:f5:3d:b6:0e:d8:a2:b1:0f:6f:3b:d0:80:
                    c5:74:4e:a8:a1:89:e2:77:2c:22:95:72:ff:bb:87:
                    c7:44:1b:e3:f7:c3:38:d0:e8:a5:fe:9c:19:b8:8b:
                    a4:e7:e2:5b:02:fb:29:72:4e:3a:61:bc:33:a2:a8:
                    fc:a0:bf:0f:d4:f3:49:b6:30:98:b3:83:90:c2:f6:
                    01:b7:9e:57:b3:bb:28:e2:a4:08:5d:68:3c:08:bf:
                    92:a0:93:9c:c7:4a:18:24:45:06:6c:a3:50:96:a9:
                    c1:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:29:3C:82:A4:97:36:E8:3E:CD:C3:2E:18:A3:A8:EA:02:C7:F7:5C
            X509v3 Authority Key Identifier:
                keyid:0D:F4:8F:E7:05:DC:D0:1E:39:7B:8F:9C:84:EF:17:91:C9:6C:FB:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DfSP5wXc0B45e4-chO8Xkcls-9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4AD7/63F7E9BC566011EBAB78C709F8AEA228/DfSP5wXc0B45e4-chO8Xkcls-9g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:53:30:4b:c9:9f:b9:fe:7e:2c:b4:1d:0c:94:79:4a:cd:b0:
         de:ae:0b:ca:a0:7b:c6:8a:e8:fa:fa:83:50:9c:f6:0c:16:1c:
         1a:eb:6e:01:2f:42:8b:ee:fd:1a:53:35:99:79:31:5c:31:17:
         5d:b4:a5:5d:9c:be:c9:c1:0a:e0:94:e6:69:31:61:eb:a2:d9:
         33:6a:30:37:c1:f6:39:1a:ac:50:67:42:f8:ea:f3:7b:6e:bb:
         6b:12:5e:0f:95:60:f5:57:32:67:1f:76:8d:4f:47:3b:6d:d4:
         9b:98:e2:96:f0:b0:05:d1:91:31:ea:4c:6f:b3:b3:75:d1:be:
         43:8c:79:3b:b8:4d:96:4d:5c:00:92:2d:7c:31:12:a5:49:a3:
         af:cb:9b:21:5e:82:19:53:68:c9:ec:d8:47:b4:9f:3e:8f:d7:
         ad:d5:f0:dd:03:bf:7c:53:c7:c5:e4:ff:19:fd:76:15:36:62:
         01:1c:8f:26:37:66:fd:c2:8c:4a:1c:08:72:fa:fc:34:9d:1c:
         0f:8b:3d:c8:4d:a6:23:7c:cd:71:06:94:30:bb:7c:3e:65:44:
         64:df:d8:4d:bd:b7:12:e6:6c:d5:21:88:96:0c:b3:f9:d9:42:
         a6:58:a4:9d:53:10:01:79:28:e1:1a:41:7f:05:9a:c7:3c:a3:
         0e:55:ac:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----