Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
File:                     SfsOFqhdQF1bnyOWCmkJwdfBW38.mft (raw, json)
Hash identifier:          CZrytYnng6IRPJdfDcV9ZZZ64Wi9PB+JitocOlgtfv4=
Subject key identifier:   56:C6:23:A9:6F:96:50:D4:C8:26:91:2C:B7:53:85:EE:18:8A:B3:52
Authority key identifier: 49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F
Certificate issuer:       /CN=F36D987FAR/serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
Certificate serial:       37
Authority info access:    rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
Manifest number:          36
Signing time:             Thu 10 Sep 2026 05:44:50 +0000
Manifest this update:     Thu 10 Sep 2026 05:44:49 +0000
Manifest next update:     Sat 12 Sep 2026 05:44:49 +0000
Files and hashes:         1: SfsOFqhdQF1bnyOWCmkJwdfBW38.crl (hash: hT09QX1BAxW9bDEEGVgGz5sVH1McjAsDzmJo8gXvPWc=)
                          2: 423092FE844811F190DB7106CF1D38B0.roa (hash: rbEzzy1Z6bVrpIUjaoY1g/gq6tM0MnrHv81mcm8Ps6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
                          rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 00:26:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D987FAR, serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
        Validity
            Not Before: Sep 10 05:44:49 2026 GMT
            Not After : Sep 12 05:44:49 2026 GMT
        Subject: CN=6aa243d2-0ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:7b:a7:37:02:6a:5e:35:2e:93:d9:b8:43:6a:
                    ff:c0:4c:c4:c8:0a:af:31:6b:86:e9:6d:00:af:6a:
                    12:d9:01:0a:98:29:45:7f:04:f7:20:d1:8c:0a:e2:
                    51:58:f9:1f:7d:c6:a6:a7:39:af:27:96:65:db:3f:
                    48:b7:0d:74:26:fe:02:f2:7c:6e:d8:ea:e0:d4:b0:
                    97:d8:4f:5b:73:31:b5:13:1c:4d:d5:a0:58:36:f2:
                    b0:0b:2a:cc:ce:aa:ee:e4:9f:ed:ad:15:a0:78:35:
                    b2:70:68:2d:65:89:2b:07:d5:21:9a:68:2d:20:b3:
                    3d:45:c1:70:c0:90:de:e0:69:08:d2:81:f7:84:18:
                    8e:d2:78:e7:2a:c6:6e:fa:d9:40:72:da:44:42:fd:
                    91:19:ef:cc:44:78:07:82:5a:d4:52:98:12:23:6f:
                    66:7b:05:93:62:06:c2:a4:b8:c2:09:c1:b1:70:6e:
                    0a:c7:87:f5:df:10:b7:13:c4:d5:eb:92:bc:7e:0c:
                    60:18:e3:7e:76:9c:b5:90:17:1d:72:97:fa:98:01:
                    34:c9:01:79:04:ea:d1:e6:8d:d5:bd:3d:53:31:b6:
                    14:95:67:17:b3:ef:ac:9e:c8:c1:3c:71:10:b0:bb:
                    1e:11:40:58:c2:08:7c:04:5b:80:ca:c7:b6:1c:65:
                    86:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C6:23:A9:6F:96:50:D4:C8:26:91:2C:B7:53:85:EE:18:8A:B3:52
            X509v3 Authority Key Identifier:
                keyid:49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:64:cf:89:8c:bd:9e:c9:39:94:0d:72:18:12:b4:3c:cc:7c:
         8f:5c:18:f0:5d:11:57:4a:80:d8:ec:2a:dd:7a:2c:c1:c9:ca:
         2d:60:4e:d3:b0:7c:36:8c:7b:b1:b6:0b:37:bc:47:e7:1f:4e:
         a7:c1:33:2a:fc:c3:33:0a:97:52:5f:cd:17:2d:58:42:8a:a0:
         f0:79:f2:c8:30:3a:a9:af:1b:9d:ac:9b:72:22:a9:1c:69:56:
         3e:a4:07:d5:8b:2c:31:24:c1:b8:8e:86:80:d1:87:38:a7:c1:
         b7:2d:e1:03:13:b1:cc:2d:6f:a9:b7:a8:05:2e:c1:9c:b1:f5:
         86:f4:af:95:36:31:dd:c2:f5:56:57:ee:24:ba:13:ea:f5:6b:
         a5:6c:d2:7c:ae:f4:fe:a3:f4:03:ca:ec:42:22:47:88:f5:40:
         16:15:25:03:a0:7a:67:3f:4c:64:5c:8d:12:74:f1:95:03:8e:
         ba:64:c4:20:23:f2:ff:4b:64:eb:f8:5f:4f:bc:5e:de:37:08:
         ed:33:c6:17:b4:a6:5e:9e:63:1a:c1:1d:b1:0f:d7:ec:f6:43:
         ac:ce:d4:cf:bd:5e:20:59:65:29:ab:f7:90:f7:79:25:30:a0:
         de:72:f1:14:22:b8:fc:99:47:fa:4c:d5:00:35:90:3f:8f:10:
         45:96:c0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----