Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
File:                     T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft (raw, json)
Hash identifier:          VIMUgz63BKd3EXuQhjKIVs/84aNzQpuEm0Hi0hz/u8Y=
Subject key identifier:   A2:5C:5A:47:97:A1:7A:C5:7D:E2:17:62:C4:50:E1:AD:81:B2:2C:F0
Authority key identifier: 4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79
Certificate issuer:       /CN=F36F6E4AAF/serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
Certificate serial:       09D6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
Manifest number:          09C5
Signing time:             Fri 11 Sep 2026 01:42:06 +0000
Manifest this update:     Fri 11 Sep 2026 01:42:05 +0000
Manifest next update:     Sun 13 Sep 2026 01:42:05 +0000
Files and hashes:         1: T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl (hash: DDiIGJs3ShHLGHasAYVb2x1VpeSnK9dNEuMwjRDR61w=)
                          2: F7DDD5EA1C6E11F19C8F3F8EDAE4EC9C.roa (hash: PW/BAXgHvih22srJgbVXfOqpna8bQSUwnKdkd55yiKw=)
                          3: 63CD6D381C6F11F1A8701690DAE4EC9C.roa (hash: c9onQMQ9ZUC32jP7lmDEH4I1JLO7mXPuFSF2QEzOxqk=)
                          4: B6B99F861C6E11F18CC2268CDAE4EC9C.roa (hash: Nk9KcupgaFrT9HYjwhwayvcsckASnFKmSYP5X4ruEFg=)
                          5: 582A85201C6E11F196474E8ADAE4EC9C.roa (hash: tXQNq5anGZuKI/N3ls0PiguA4/6L6XRyM0QYo8OFjRw=)
                          6: FEE338541C6D11F196022388DAE4EC9C.roa (hash: LVUzPTIff1K9PHg6hyLX45CbcDuYQrRZVEGZDDm6Rkg=)
                          7: 7576B97E4FFF11EF84A6EB64762E951A.roa (hash: 33ok2yqrTl57C64Sr4/sUY8EF0IDi0i5pKehUOrq0+s=)
                          8: 57CE8E244FFF11EF959DB964762E951A.roa (hash: fyxQpuVFjDxsdPdxESeE+9woq7cT+VNLSx/q/+d4MIo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 01:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2518 (0x9d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6E4AAF, serialNumber=4FEE129D09AB850DA039E7F5BB24B6699A0F8179
        Validity
            Not Before: Sep 11 01:42:05 2026 GMT
            Not After : Sep 13 01:42:05 2026 GMT
        Subject: CN=6aa35c6e-3076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7e:41:9c:0b:db:37:ed:21:e5:85:ee:a4:79:
                    04:b9:f5:1c:e8:51:47:b0:58:50:f1:f9:b2:c5:c6:
                    b3:b6:4b:ce:57:df:e6:b8:d1:e1:9e:3e:66:ac:80:
                    68:63:dd:f6:84:b3:f0:63:93:34:c1:e0:98:dc:17:
                    56:e0:41:8a:fb:5a:0f:2f:85:96:28:b4:21:e7:90:
                    1a:ec:aa:f7:29:a0:94:78:b1:11:65:52:0e:3f:66:
                    ca:d5:51:8e:d7:ff:e7:81:b3:e7:2e:0f:15:73:fb:
                    4a:2c:e5:4e:57:a8:e9:bc:4d:74:85:32:8c:a8:37:
                    e6:16:25:97:e4:f5:92:de:00:8b:bd:ac:99:3b:78:
                    e9:8c:a9:b5:78:e1:e6:9c:10:48:5e:ea:44:b6:e9:
                    9e:8a:b3:f6:1c:11:50:c9:e0:78:56:c9:65:16:e0:
                    d8:96:d5:0f:36:a1:88:6c:70:1d:a9:f1:88:2e:bd:
                    f0:cd:ea:a3:2c:fa:de:9c:4f:77:92:a1:25:5a:94:
                    cb:22:b4:18:65:1d:93:27:ac:71:a2:33:07:c9:89:
                    aa:c2:e3:bd:90:be:c8:99:e3:88:cf:99:31:ef:9b:
                    20:c3:6b:c3:c4:ad:31:97:ed:ba:37:3d:df:24:85:
                    71:12:f9:30:47:4a:c4:18:3c:e6:cf:84:53:87:7c:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:5C:5A:47:97:A1:7A:C5:7D:E2:17:62:C4:50:E1:AD:81:B2:2C:F0
            X509v3 Authority Key Identifier:
                keyid:4F:EE:12:9D:09:AB:85:0D:A0:39:E7:F5:BB:24:B6:69:9A:0F:81:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T-4SnQmrhQ2gOef1uyS2aZoPgXk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6E4A/9D594F7241A611EA88863E28F8AEA228/T-4SnQmrhQ2gOef1uyS2aZoPgXk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:00:79:98:d8:00:9b:c2:80:95:a7:65:0f:69:13:fb:c7:28:
         7d:5d:8b:1d:11:69:59:c8:57:61:bc:c3:fd:36:c0:9e:21:80:
         7c:99:0b:b6:59:bc:e7:a0:83:d1:9d:68:d4:bc:27:e8:12:0a:
         86:1c:0d:87:3f:48:de:08:b9:7a:bc:25:c9:4d:57:8e:97:a9:
         c6:1d:29:48:3b:2a:6b:6f:0d:cd:8d:21:bc:8b:89:bc:f4:8e:
         68:68:e7:f0:4f:fd:b7:48:34:75:e9:2d:00:ab:b2:49:49:87:
         0f:9c:ac:91:27:a1:1e:08:f6:e0:88:85:03:0e:61:be:07:6d:
         fd:10:96:2b:7e:24:f5:fc:d0:8a:68:f5:b6:7c:47:72:87:62:
         32:76:9a:4e:92:7a:82:c4:f4:95:b6:77:8a:31:d9:47:08:6b:
         cc:c4:9e:89:0d:da:48:ea:1b:91:11:9b:00:32:7c:25:8b:32:
         38:9b:2c:c6:8c:85:04:52:31:d8:a4:1e:b0:f7:83:60:22:67:
         3e:77:3f:ec:69:c8:ef:77:2e:d8:41:f6:a2:43:db:16:cc:47:
         be:46:95:c4:c8:af:74:e3:58:82:1d:d0:80:ec:53:cd:6e:3b:
         be:12:6a:d5:e4:29:35:e0:84:e8:19:b2:29:78:dd:48:9a:44:
         e3:1a:e4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----