Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
File:                     zFDm0Igy-da0ktsaCun0dMNadjo.mft (raw, json)
Hash identifier:          4k3FOJTjuOruMwZMd2rbLY/Nc+w2aMrXU5tsno9yGcE=
Subject key identifier:   89:E8:42:07:36:54:85:2C:C3:C2:07:7F:C4:B7:A8:86:24:E1:6D:A3
Authority key identifier: CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A
Certificate issuer:       /CN=F36EBB83AF/serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
Certificate serial:       0120
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
Manifest number:          011F
Signing time:             Sun 25 Oct 2026 05:22:33 +0000
Manifest this update:     Sun 25 Oct 2026 05:22:33 +0000
Manifest next update:     Tue 27 Oct 2026 05:22:33 +0000
Files and hashes:         1: zFDm0Igy-da0ktsaCun0dMNadjo.crl (hash: iqRgeGdKD2S7vbjwC/CRzZyPzNU1A8Bbnqfb69v1Umg=)
                          2: 890714D6F13C11F0A8B5B8EEDAE4EC9C.roa (hash: jpMzBp+XA2OT7GpKVUf61L9TEAnmUra8ZP6BY3MSD60=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:22:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 288 (0x120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBB83AF, serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
        Validity
            Not Before: Oct 25 05:22:33 2026 GMT
            Not After : Oct 27 05:22:33 2026 GMT
        Subject: CN=6add9219-70be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dc:7e:1a:64:2c:23:c7:80:9d:33:ec:6a:1e:
                    0e:11:fc:81:04:e5:e2:f1:24:31:24:3c:14:80:fc:
                    47:b0:2c:bc:81:f0:56:fb:00:23:13:87:03:4f:3b:
                    0e:9a:20:8c:7a:f9:97:39:48:15:14:f1:4a:d7:83:
                    64:58:96:0f:9a:0f:f9:cf:4f:28:21:0c:a9:07:ff:
                    2c:37:a5:b0:43:4c:fd:f6:11:6f:06:78:86:6a:57:
                    09:0c:31:09:03:34:5e:c2:84:c5:3a:de:28:49:40:
                    ca:3b:36:1a:3a:78:7d:36:eb:f2:75:e9:2a:f5:96:
                    2f:ab:46:82:43:b5:d1:a0:35:50:5e:63:6f:14:20:
                    04:c0:dd:57:d2:bf:2a:9b:7a:aa:f7:9c:44:96:10:
                    c2:f7:6c:f7:59:a4:cf:a5:49:e1:d5:80:6f:98:e2:
                    5e:96:11:87:bd:60:cf:ff:9c:65:f9:f2:f0:f7:71:
                    1b:7b:a5:f4:19:ed:40:55:ec:d1:c4:00:89:f5:31:
                    07:5e:f6:34:4b:85:3c:9a:1e:a7:7a:99:40:20:96:
                    7b:b9:2e:29:53:69:e3:06:ba:b8:aa:f4:a1:8f:ad:
                    75:52:a0:c8:d1:a0:25:7c:b4:49:a3:48:27:59:7e:
                    57:0e:c4:57:8e:9e:64:de:7a:14:ad:6e:13:60:ef:
                    5d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E8:42:07:36:54:85:2C:C3:C2:07:7F:C4:B7:A8:86:24:E1:6D:A3
            X509v3 Authority Key Identifier:
                keyid:CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:dc:93:20:e5:b8:b9:5f:bf:42:a9:50:95:c0:16:74:01:2a:
         e3:ff:e9:c8:9e:df:c3:c9:18:3c:14:d8:99:8e:c6:d3:85:2b:
         3e:50:d6:90:08:7c:77:fe:5c:32:c1:c6:8d:2a:55:bc:06:ca:
         d0:b1:68:5e:71:4c:4f:3a:39:ac:bd:dc:28:15:a0:02:a6:13:
         89:78:8c:26:4e:35:cb:c1:ee:98:5d:11:ac:5b:39:1e:66:3f:
         41:3d:32:b0:20:d7:59:eb:30:9e:0c:d2:ac:d8:b2:4a:f4:d2:
         c0:74:6d:5f:a8:6d:0c:56:4c:c0:a6:1f:48:f8:93:52:cb:8f:
         04:06:0a:ad:4c:ae:ad:3f:89:51:cd:ac:73:ee:27:5f:22:39:
         50:8f:89:67:67:aa:09:fc:aa:35:b1:28:47:cb:24:22:29:a2:
         3d:83:1f:10:7b:1d:59:ab:58:31:b1:49:77:35:42:24:b6:85:
         af:81:fc:59:3f:11:ce:bf:c7:2e:86:89:59:c0:94:e7:a9:54:
         22:b2:a8:75:a9:02:9e:f2:2e:e3:6f:67:b3:29:0c:e2:d3:bd:
         1d:2a:c4:c1:5b:56:af:59:d8:81:f2:ed:29:8e:75:e1:87:42:
         f0:c5:17:de:34:a8:8e:8c:d6:12:20:ca:5e:db:7a:f0:94:4c:
         3e:b6:18:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----