Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
File:                     hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft (raw, json)
Hash identifier:          nu0SHayySd5w1VQ62UGbNGf6EoQUCmWl094pOQJyVzk=
Subject key identifier:   D2:8F:E5:34:7B:4A:15:52:7A:58:F1:38:B0:CB:57:4C:73:3B:BB:5F
Authority key identifier: 86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE
Certificate issuer:       /CN=F36F0628AF/serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
Certificate serial:       084A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
Manifest number:          0800
Signing time:             Sat 10 Oct 2026 02:20:38 +0000
Manifest this update:     Sat 10 Oct 2026 02:20:37 +0000
Manifest next update:     Mon 12 Oct 2026 02:20:37 +0000
Files and hashes:         1: hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl (hash: lEIvMAq2OcVXza/g8u9Tdf1xLzJD/umLHNYZ/qUCpLc=)
                          2: 3B0BC528A8E011F08381ECAFDAE4EC9C.roa (hash: p8rygDaqMlfKM5+mFXH3h51l6FuqzUHfYdCJkipQXZk=)
                          3: 5D4E3E2CB42911F1A7228ADFCE1D38B0.roa (hash: Sg21FeRg0sCbvKh+6dJ2xNE1rFfw9mLKthCDLQtSl8w=)
                          4: 582E5A0E1FB311F1988F6B9FDAE4EC9C.roa (hash: 0HSfpxd6RJw1dDAmVY8F6DqPcLyoD2dBDFLG8DPE+ZM=)
                          5: BF074D607AB911F19544E1E5CE1D38B0.roa (hash: qFoBsejg9FN/FDV2O6h7qkRNG5vip+EUMILXAArsA6s=)
                          6: 7C11FB3A8FD711F194865F12CF1D38B0.roa (hash: xF16zWSmkM/c3V8YjQqugs+5p0JlSIff3givFahh+9Y=)
                          7: 973F091E1FB311F18E80869FDAE4EC9C.roa (hash: CzHZTufJFyhjGHkpFVZuM6wyww8c6DnqEF6oCbO8Cz0=)
                          8: 004B1DF2B36811F0A98458F0DAE4EC9C.roa (hash: zkIpkIt6ml3z7EI6+y3S5IJ7YdnJfqyc+dJmlhiixtc=)
                          9: 31E310CCB5C411F1AC8E7ED9CE1D38B0.roa (hash: iWVWVjP77LsNaKIjHC8sf05lelaswMjolhlVLp8YwMA=)
                          10: E0978148B5C411F1A36DE3DDCE1D38B0.roa (hash: z5bG46DBUE3vNLEVMpI+LUmEIzU52A9/RHq13j9q2E0=)
                          11: 6DA8BDECBEF711F0BC88C8C8DAE4EC9C.roa (hash: mr6RFujr9br3UnulbLDbQG/tKZZBLEAMX2oMaBzTflg=)
                          12: DF36CBCABEF711F08A36B0CADAE4EC9C.roa (hash: AOAhdb8NfSG9X3GlC/Vi6d309IftduVQ5MLyZDqd8CA=)
                          13: 36A614CEB42A11F180BEC6E5CE1D38B0.roa (hash: aj9KPPBD12Iwz9ZD1UE6JBIBWDkqvN+k6I+NvFlEqAI=)
                          14: A59DE662B5C511F1B97B67E2CE1D38B0.roa (hash: D2enViRD9nEBljcCW0p8G2Wrk/CPIlQ8omhKxmpbPAE=)
                          15: FD95FA44B5C511F1BD3C9EE4CE1D38B0.roa (hash: JbbjFtzo3g6b4VR4ureyvlDyIMVyw9Db1qIxz067tJ4=)
                          16: 27636ED4B5C511F194E419E0CE1D38B0.roa (hash: ewBZP+o3gFUaiXSh3dLy0P/FBmeqa9KK37P6TR8GuE8=)
                          17: A0124150B36611F092119CE7DAE4EC9C.roa (hash: KPAVGIR+9gV2f09zVyhq7pMlJ/S3+kwqXxT6U4gqUlY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2122 (0x84a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0628AF, serialNumber=8605D7599A0402F70EC2F258D6C16BD2E4E8D1FE
        Validity
            Not Before: Oct 10 02:20:37 2026 GMT
            Not After : Oct 12 02:20:37 2026 GMT
        Subject: CN=6ac9a0f6-e0b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9f:e1:1d:55:34:ab:6d:fa:0e:46:14:d5:d9:
                    72:e5:5b:eb:eb:ae:33:0c:0c:62:14:5a:32:4b:e0:
                    bd:96:1e:54:3b:8d:dc:ea:d4:7a:f3:94:83:b9:77:
                    f5:b7:e5:49:57:f7:49:7e:7f:85:13:61:ac:8c:ab:
                    3e:2a:87:83:59:1c:0c:ee:d7:28:5a:1a:05:77:fb:
                    fb:84:88:42:0a:be:ce:f5:bc:70:52:84:e4:65:4e:
                    45:e4:fb:94:5b:8e:df:1f:f2:3b:b4:19:c9:4d:4d:
                    f7:5b:80:48:1a:a5:44:a4:56:0e:be:83:e7:73:88:
                    c4:a3:b8:95:27:ff:51:72:a6:da:10:44:cd:cc:ac:
                    86:ba:fd:ae:63:a0:45:9e:02:5c:70:36:72:d3:f8:
                    fa:9f:9b:20:19:01:af:43:0f:9d:26:95:62:e3:35:
                    67:3d:ff:f3:90:f4:95:5e:70:4b:6a:0a:3c:87:7d:
                    e1:63:6c:bc:23:c0:f0:9d:65:12:bb:8e:8f:95:f3:
                    15:60:7d:b4:e2:77:79:05:42:37:ed:6e:0d:0b:a4:
                    87:7c:6c:22:4e:6b:0c:ef:7b:81:a8:31:86:df:1d:
                    aa:6c:ea:fa:9b:6a:65:7d:4c:77:a1:ce:07:00:c4:
                    9e:47:6e:48:a0:3e:ea:44:1c:eb:7e:eb:d4:5e:1b:
                    92:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:8F:E5:34:7B:4A:15:52:7A:58:F1:38:B0:CB:57:4C:73:3B:BB:5F
            X509v3 Authority Key Identifier:
                keyid:86:05:D7:59:9A:04:02:F7:0E:C2:F2:58:D6:C1:6B:D2:E4:E8:D1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hgXXWZoEAvcOwvJY1sFr0uTo0f4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0628/F0CCBE7CFBA011EBAB786C49D8A014CE/hgXXWZoEAvcOwvJY1sFr0uTo0f4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b6:1d:fc:63:03:9e:9d:9b:c1:ce:15:83:69:06:99:f4:d0:
         dd:88:a6:f9:cd:19:30:78:1f:87:59:34:10:62:e9:95:d4:17:
         68:b2:3c:09:98:ce:5c:31:30:d8:b5:af:ed:52:7a:f8:76:14:
         23:47:cb:00:96:a8:fe:6f:4c:da:be:9b:d4:38:71:a2:7e:3a:
         fd:a8:20:b4:91:82:43:e7:02:07:65:a3:40:45:ac:09:db:96:
         93:d2:ef:99:87:25:a3:e6:2f:99:2a:45:3d:dd:7b:9e:e8:c9:
         d6:7d:36:51:45:a9:58:40:fc:44:5d:4f:ba:77:63:9c:01:16:
         b7:e6:1b:ef:a8:ea:48:70:57:16:64:f0:9a:58:28:fb:ae:c9:
         e8:fa:d5:da:8d:eb:35:5b:5b:3b:60:6c:a6:3a:fe:84:70:fb:
         de:0b:54:5c:0e:95:e2:95:a4:68:b7:54:e6:71:90:65:81:23:
         e6:da:22:27:ae:38:0c:56:5c:24:62:9f:19:c6:47:0e:12:49:
         36:6b:ad:e1:38:33:f2:99:64:cf:51:ad:bc:72:38:d0:ed:8c:
         44:6b:59:ec:33:73:2b:88:89:ba:02:f9:22:c6:3d:52:bc:6f:
         24:c0:84:b0:9c:0f:a2:03:14:35:0a:a3:f5:43:24:52:3f:85:
         96:65:7c:26
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCEowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjA2MjhBRjExMC8GA1UEBRMoODYwNUQ3NTk5QTA0MDJGNzBFQzJGMjU4RDZDMTZC
RDJFNEU4RDFGRTAeFw0yNjEwMTAwMjIwMzdaFw0yNjEwMTIwMjIwMzdaMBgxFjAU
BgNVBAMTDTZhYzlhMGY2LWUwYjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLn+EdVTSrbfoORhTV2XLlW+vrrjMMDGIUWjJL4L2WHlQ7jdzq1HrzlIO5
d/W35UlX90l+f4UTYayMqz4qh4NZHAzu1yhaGgV3+/uEiEIKvs71vHBShORlTkXk
+5Rbjt8f8ju0GclNTfdbgEgapUSkVg6+g+dziMSjuJUn/1FyptoQRM3MrIa6/a5j
oEWeAlxwNnLT+PqfmyAZAa9DD50mlWLjNWc9//OQ9JVecEtqCjyHfeFjbLwjwPCd
ZRK7jo+V8xVgfbTid3kFQjftbg0LpId8bCJOawzve4GoMYbfHaps6vqbamV9THeh
zgcAxJ5HbkigPupEHOt+69ReG5IPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU0o/l
NHtKFVJ6WPE4sMtXTHM7u18wHwYDVR0jBBgwFoAUhgXXWZoEAvcOwvJY1sFr0uTo
0f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYwNjI4L0YwQ0NCRTdDRkJBMDExRUJBQjc4NkM0OUQ4QTAxNENFL2hnWFhX
Wm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hnWFhXWm9FQXZjT3d2Slkxc0ZyMHVUbzBmNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjA2MjgvRjBDQ0JFN0NGQkEwMTFFQkFCNzg2QzQ5RDhB
MDE0Q0UvaGdYWFdab0VBdmNPd3ZKWTFzRnIwdVRvMGY0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNth38YwOenZvBzhWDaQaZ9NDdiKb5
zRkweB+HWTQQYumV1BdosjwJmM5cMTDYta/tUnr4dhQjR8sAlqj+b0zavpvUOHGi
fjr9qCC0kYJD5wIHZaNARawJ25aT0u+ZhyWj5i+ZKkU93Xue6MnWfTZRRalYQPxE
XU+6d2OcARa35hvvqOpIcFcWZPCaWCj7rsno+tXajes1W1s7YGymOv6EcPveC1Rc
DpXilaRot1TmcZBlgSPm2iInrjgMVlwkYp8ZxkcOEkk2a63hODPymWTPUa28cjjQ
7YxEa1nsM3MriIm6Avkixj1SvG8kwISwnA+iAxQ1CqP1QyRSP4WWZXwm
-----END CERTIFICATE-----