Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
File:                     bynJvMAklSDlBwZp-vZmUm98jzA.mft (raw, json)
Hash identifier:          F085rwFPpxERa8/1k1lkjpjKQ+bhHNmhYhodlPaFFD8=
Subject key identifier:   47:4C:5C:69:AE:14:08:12:84:6E:C6:02:32:FD:77:07:42:2D:A2:7F
Authority key identifier: 6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30
Certificate issuer:       /CN=F36D289CRI/serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
Certificate serial:       0A7D
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
Manifest number:          0A7B
Signing time:             Thu 10 Sep 2026 01:31:47 +0000
Manifest this update:     Thu 10 Sep 2026 01:31:46 +0000
Manifest next update:     Sat 12 Sep 2026 01:31:46 +0000
Files and hashes:         1: bynJvMAklSDlBwZp-vZmUm98jzA.crl (hash: GQSWOkfNNBqdsf6AiF786CD85O3uPPgsRLVXgvsc9y8=)
                          2: 931E9D64F1E611EF9602D94F762E951A.roa (hash: pu2PP2qQRpHTl0P12WcevM+SHqavoog2ZfvG3UTYFMs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                          rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2685 (0xa7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D289CRI, serialNumber=6F29C9BCC0249520E5070669FAF666526F7C8F30
        Validity
            Not Before: Sep 10 01:31:46 2026 GMT
            Not After : Sep 12 01:31:46 2026 GMT
        Subject: CN=6aa20883-5826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cc:17:3e:3f:cb:fe:03:5f:51:d2:c0:0a:4e:
                    79:13:f1:97:b4:5e:d1:61:93:20:a7:8a:c9:42:99:
                    f0:50:54:c7:c5:7c:9c:0b:02:ac:b9:31:fb:df:e6:
                    f3:69:9b:79:73:95:e4:a7:cd:d7:13:80:a4:6d:e1:
                    10:c2:51:cb:ff:42:f1:10:05:9d:e2:63:c5:59:1c:
                    b4:28:fc:da:a5:fe:de:5a:40:da:4a:76:b9:2b:73:
                    e4:68:b5:5b:6b:6f:d8:21:2e:27:e0:93:8a:1e:dd:
                    3c:53:16:bc:e8:88:f6:3e:51:ea:89:12:e0:ee:d8:
                    e9:2f:92:8e:f1:a1:dc:2a:f8:48:4f:8c:46:7a:7e:
                    3e:90:2f:ea:75:cc:c5:fa:51:91:e5:71:17:51:3a:
                    75:36:bc:f9:b8:1d:f0:6a:07:00:80:bb:69:c4:21:
                    4c:1d:3c:07:55:c4:44:d9:9e:d1:ff:65:c1:66:5b:
                    e1:a3:b2:38:4a:ee:19:39:7e:65:d7:ef:a3:6f:03:
                    b2:b4:a6:96:d2:ac:7c:60:99:87:8e:64:2a:ec:0f:
                    c8:f9:5c:f7:68:63:2b:71:5c:d3:0b:85:67:c2:6d:
                    d1:e9:36:cd:91:0b:e1:74:b5:7f:8c:46:27:d2:1d:
                    1e:d1:88:0d:b7:5e:fd:c4:2b:8c:0d:78:41:60:8d:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4C:5C:69:AE:14:08:12:84:6E:C6:02:32:FD:77:07:42:2D:A2:7F
            X509v3 Authority Key Identifier:
                keyid:6F:29:C9:BC:C0:24:95:20:E5:07:06:69:FA:F6:66:52:6F:7C:8F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/bynJvMAklSDlBwZp-vZmUm98jzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D289C/12FAB962A87511E99285C745F8AEA228/bynJvMAklSDlBwZp-vZmUm98jzA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:22:b8:07:67:3a:48:59:bc:8a:d8:fc:fe:47:6b:d2:56:26:
         ee:de:ea:8e:0f:85:16:fd:6d:79:41:11:bf:e7:b9:f5:8d:79:
         7a:65:c3:17:84:5e:af:76:06:86:05:7b:01:a8:52:80:e6:e3:
         61:a6:b5:78:c9:7a:4b:34:81:67:a9:4b:7d:88:f1:64:c2:93:
         12:a5:cc:65:67:86:ec:89:1f:a9:e6:c5:9d:8f:41:2d:fe:8b:
         2c:98:dc:1d:2a:cb:13:4f:80:4a:53:38:41:e8:ef:33:e9:40:
         bb:bb:a5:5c:e3:2e:1c:59:a5:dc:77:ec:32:98:ec:b3:96:c4:
         b6:35:a5:16:d7:52:5c:72:73:b1:b0:19:23:df:ae:f1:18:60:
         87:35:e0:79:8e:32:bb:cf:18:82:c0:a8:bb:08:6f:71:b5:35:
         bd:3b:3f:eb:49:07:b2:28:54:70:10:47:f2:19:63:3c:e0:ba:
         47:1b:39:12:3e:e6:0c:50:11:76:e2:aa:18:42:c9:de:6e:e7:
         31:0f:4e:f6:dd:04:fa:25:87:e6:29:88:59:f8:79:76:92:02:
         5b:46:a6:c3:c1:81:0f:f2:96:d1:8d:75:c9:6d:3f:4a:d7:5e:
         dd:ee:b9:86:04:38:f6:a8:fc:12:bf:13:17:49:5b:10:e0:60:
         6d:84:03:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----