Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
File:                     aFg2dgHVM90hnMnjOq3p4BLA070.mft (raw, json)
Hash identifier:          vBuV7LhvwDHwHPA4jdl0U0cdSjLmClaV84MsdLb6ybE=
Subject key identifier:   EA:D4:31:9A:CB:0A:37:A6:BA:19:D8:F3:67:C5:50:B9:7D:DB:FB:01
Authority key identifier: 68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD
Certificate issuer:       /CN=F36F0522AF/serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
Certificate serial:       061E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
Manifest number:          061B
Signing time:             Sun 25 Oct 2026 02:54:43 +0000
Manifest this update:     Sun 25 Oct 2026 02:54:43 +0000
Manifest next update:     Tue 27 Oct 2026 02:54:43 +0000
Files and hashes:         1: aFg2dgHVM90hnMnjOq3p4BLA070.crl (hash: T0zJAOLk9DrsoW5zEjYSwQqxjkMDKLqrcB3mRlKv/Fo=)
                          2: 7FB4111E8CB311F18FC78AFBCE1D38B0.roa (hash: 8DKgpF5SvEAtkbERqt5mx3oF0cxb8U2x+UH3e8W6HI0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1566 (0x61e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0522AF, serialNumber=6858367601D533DD219CC9E33AADE9E012C0D3BD
        Validity
            Not Before: Oct 25 02:54:43 2026 GMT
            Not After : Oct 27 02:54:43 2026 GMT
        Subject: CN=6add6f73-314a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c7:38:dc:57:b9:01:32:59:92:b2:d6:47:26:
                    17:71:66:72:f0:a2:aa:30:66:ce:28:20:80:65:3e:
                    2d:97:ec:fc:b3:6d:68:c7:bd:ca:f9:3d:11:ac:c5:
                    78:61:08:61:ec:ef:11:ec:3a:ed:50:b9:c1:68:f2:
                    53:b5:be:5b:3d:af:01:d1:11:4c:3c:f2:07:2b:08:
                    58:51:bc:62:6d:d9:d3:4d:3d:e4:b7:2b:3a:f0:1e:
                    88:f8:e8:ed:ac:0c:94:59:a3:5f:9f:5c:83:e4:af:
                    f3:20:ce:c5:c0:73:4f:1d:b2:f5:76:1b:34:b0:61:
                    45:d3:e2:c4:65:d5:4c:50:c3:a9:2d:71:e3:9e:a1:
                    37:75:2d:fc:f2:d1:aa:b4:3c:a1:a3:06:27:74:79:
                    1c:97:9f:f6:a7:be:80:9a:28:d6:f0:2d:b7:00:bb:
                    c9:76:c4:e6:a7:d3:7a:0f:cf:21:3d:1e:fd:ce:c3:
                    7d:6a:ff:1a:09:c9:4d:cd:a5:0a:78:49:73:17:d9:
                    c2:29:52:6b:af:e1:ea:a7:e4:fb:b8:58:0d:09:6d:
                    8b:59:f8:54:0a:2b:47:0f:66:47:17:ca:93:5b:a5:
                    c1:5f:73:9c:c7:25:05:92:ba:85:6d:fa:0e:f4:23:
                    97:40:63:00:ea:a0:78:67:55:58:f2:7b:f7:c8:03:
                    07:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D4:31:9A:CB:0A:37:A6:BA:19:D8:F3:67:C5:50:B9:7D:DB:FB:01
            X509v3 Authority Key Identifier:
                keyid:68:58:36:76:01:D5:33:DD:21:9C:C9:E3:3A:AD:E9:E0:12:C0:D3:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aFg2dgHVM90hnMnjOq3p4BLA070.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0522/0F530264279411EDB2C767F3F1222468/aFg2dgHVM90hnMnjOq3p4BLA070.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b5:7c:ed:fe:0c:a4:0b:a8:8c:87:7d:3d:59:cc:9a:f3:91:
         c1:cc:b9:0c:5e:2d:8c:6e:ff:ed:cd:6a:ca:98:dd:41:18:21:
         dd:72:b1:df:b6:62:87:cb:9e:61:23:73:6b:38:f7:05:67:ac:
         4c:10:22:61:c7:c8:51:01:ac:09:43:3d:a9:db:f6:71:45:39:
         0c:45:b7:ae:b5:3f:fc:f4:46:d6:18:23:aa:53:2b:16:c7:fd:
         b9:3e:60:de:fc:f8:3a:2a:44:a2:77:97:06:3b:69:8f:d1:11:
         ea:f0:b5:b8:b6:15:64:29:c6:c4:5d:a9:76:5a:29:db:42:f6:
         2c:ae:94:66:4c:7c:a2:ad:f4:4d:ce:ae:b0:60:60:6a:50:36:
         d9:82:49:3c:a4:48:73:5b:7d:8c:3e:ed:13:e3:fe:12:67:84:
         97:1e:97:b2:e1:97:32:01:f0:b4:94:6b:05:17:f1:5c:f2:08:
         31:b8:72:52:1b:f0:f4:5e:b1:3d:4e:fe:af:c4:b5:0a:61:61:
         66:1e:fd:79:6a:c0:2f:90:a9:9a:a5:24:2e:8b:f9:1b:d5:fb:
         b6:0e:df:4f:58:a9:69:03:3a:86:85:0f:e0:3a:b7:5f:e3:b1:
         02:f7:9b:5e:cf:4f:76:21:73:cd:6c:ba:d3:62:db:78:95:1c:
         16:57:9d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----