Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
File:                     xel4rPl9qfSdxLKEr_AldPEDGH8.mft (raw, json)
Hash identifier:          CVNi4wqD6Y7ri5WG7YlZvmtxy1SJkiEGKDKhy9ytLiU=
Subject key identifier:   2E:EF:DD:2E:81:E3:23:6E:99:98:9D:9B:D2:8A:25:45:12:55:D2:3A
Authority key identifier: C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F
Certificate issuer:       /CN=F36E6AB8AF/serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
Certificate serial:       0759
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
Manifest number:          0757
Signing time:             Tue 29 Sep 2026 02:24:17 +0000
Manifest this update:     Tue 29 Sep 2026 02:24:16 +0000
Manifest next update:     Thu 01 Oct 2026 02:24:16 +0000
Files and hashes:         1: xel4rPl9qfSdxLKEr_AldPEDGH8.crl (hash: 8+VVx5i0XMHxF3dKJEIYEF0/TFXwhmPEA40JJMirUjA=)
                          2: 383BEA7E873A11F1878DF408CF1D38B0.roa (hash: V583EW/K8C0P/Ms6xCkqcw6DMAeSTriRFoAJ45sih64=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1881 (0x759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E6AB8AF, serialNumber=C5E978ACF97DA9F49DC4B284AFF02574F103187F
        Validity
            Not Before: Sep 29 02:24:16 2026 GMT
            Not After : Oct  1 02:24:16 2026 GMT
        Subject: CN=6abb2151-6483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:31:e9:24:1d:36:c1:55:ec:1b:c8:dd:9f:
                    f3:f4:c3:1e:98:cc:41:e3:69:36:f7:95:56:45:32:
                    b0:c9:9e:61:10:86:8a:00:19:e3:9e:11:d7:e9:4b:
                    bd:6c:8e:90:56:61:49:7e:1b:9c:64:56:32:c1:52:
                    6a:cb:90:01:5c:f5:43:b2:34:27:a9:75:24:02:d9:
                    5e:c3:d6:39:e1:6c:11:83:77:6d:ff:34:57:5e:7e:
                    93:4f:8e:3f:fb:31:a5:b9:cc:02:03:d0:08:8f:4e:
                    2a:53:9d:0e:43:c9:52:5e:c8:61:a3:88:96:92:ac:
                    1c:a7:ca:69:d3:7a:8f:fb:b1:9d:33:6f:17:5b:d7:
                    30:73:60:aa:df:15:02:88:eb:03:24:13:fb:a6:03:
                    b8:44:65:7f:5a:1d:10:d9:9f:69:c9:7e:84:dc:c8:
                    f6:af:6e:82:a0:89:b8:46:60:e2:9b:43:3d:23:2f:
                    0c:ea:19:50:90:56:79:45:3a:68:3d:2f:28:ed:c1:
                    84:59:12:17:55:b4:c7:37:52:17:19:c3:11:1f:da:
                    a1:c4:44:e1:d9:5d:ba:7e:3e:b7:13:6b:57:74:ac:
                    cc:39:0c:36:60:3c:1c:21:45:25:e0:ad:95:f3:5e:
                    ba:05:9b:c3:15:38:ac:1c:c1:4f:14:e8:f6:e3:47:
                    e5:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:EF:DD:2E:81:E3:23:6E:99:98:9D:9B:D2:8A:25:45:12:55:D2:3A
            X509v3 Authority Key Identifier:
                keyid:C5:E9:78:AC:F9:7D:A9:F4:9D:C4:B2:84:AF:F0:25:74:F1:03:18:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xel4rPl9qfSdxLKEr_AldPEDGH8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E6AB8/D8FE28F61BDC11ECB169A467D8A014CE/xel4rPl9qfSdxLKEr_AldPEDGH8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2b:e5:1c:5a:3b:91:24:d2:11:f0:7a:57:1b:53:09:93:31:
         63:54:86:f2:6b:db:82:8b:68:b0:b1:c2:17:18:09:28:ef:d7:
         51:2c:6d:61:62:c9:d6:5c:be:db:8b:40:85:9b:c3:7f:4e:8d:
         bd:37:09:26:42:cf:a6:e2:3c:b6:94:0e:85:d9:cc:8f:01:bc:
         5d:16:41:66:a2:76:12:3f:e4:c2:79:cf:db:f4:84:a7:41:3e:
         c1:12:38:14:5f:f6:fa:0a:6c:64:c7:f8:6a:31:44:de:f5:d6:
         b0:44:2d:ed:32:e9:b3:0b:4c:0e:dd:ed:fd:86:77:b2:ae:10:
         36:2e:53:6b:48:78:75:77:4d:5a:9f:b1:f3:13:1d:36:fb:ad:
         8f:1a:b4:4d:9f:32:cf:ba:7e:66:8e:78:cd:39:a8:cf:fa:de:
         7e:d1:d0:8c:06:cf:1f:e7:a2:98:90:29:13:64:90:a7:b6:1c:
         6e:4d:13:5a:27:48:94:13:2f:65:98:79:3d:6b:e4:44:63:cb:
         5f:ac:fd:f6:5f:fe:df:c5:c6:34:8a:77:85:f6:af:8c:36:68:
         ad:e5:d8:eb:ee:62:8d:a6:81:5d:ed:57:ea:0d:4a:88:fd:0c:
         d7:a4:54:47:df:33:cb:3a:79:41:f6:03:86:ed:3e:a2:f3:7d:
         8c:d0:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----