Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
File:                     2LbhjGXdH5bypUTKz8mAhq75KW8.mft (raw, json)
Hash identifier:          WmaDA+Ujlzo6Ufd/CgbIUBfWCTmVsMrIFY2AsTiWYxg=
Subject key identifier:   5B:B3:05:09:9B:91:62:69:2F:B2:94:DD:28:FD:4E:97:B5:34:CF:67
Authority key identifier: D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F
Certificate issuer:       /CN=F36FA15DAF/serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
Certificate serial:       08BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
Manifest number:          08A0
Signing time:             Tue 27 Oct 2026 01:58:27 +0000
Manifest this update:     Tue 27 Oct 2026 01:58:26 +0000
Manifest next update:     Thu 29 Oct 2026 01:58:26 +0000
Files and hashes:         1: 2LbhjGXdH5bypUTKz8mAhq75KW8.crl (hash: fT07l2Li2xg9s/XLlQ1RP+A+mpLXaco+vHpwL9KmBRA=)
                          2: 4D448904CF5811EE973188BD775412E6.roa (hash: ySSYPE0shLpdO7tNiGvvy73ZDXbdIqU3PG2m2I/Ajqg=)
                          3: DCC047FEE06E11EEB2B0FC6C775412E6.roa (hash: Tz/tIAPulQlEyr/QEKB9q80Zxn8V6++we+recfQKhpE=)
                          4: 15161890CEAC11F0B8BB8AA5DAE4EC9C.roa (hash: sz4t/bgPn6e92FcyejE2oYUP19uwkzdPRB0WWNeOfwU=)
                          5: 2DE942E8F05011EEB7E2EA77775412E6.roa (hash: GBenxdZx6aEBeL1h9fe5p87DnQDStd1SWX74CBckZcY=)
                          6: B26CC39CE06E11EE9B19AF6C775412E6.roa (hash: Ty5HAlTEhASXYCuUF5uWrrX1/gj8dWsdudDz16cov10=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 01:58:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238 (0x8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA15DAF, serialNumber=D8B6E18C65DD1F96F2A544CACFC98086AEF9296F
        Validity
            Not Before: Oct 27 01:58:26 2026 GMT
            Not After : Oct 29 01:58:26 2026 GMT
        Subject: CN=6ae00542-bbe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b5:b9:01:49:c5:b5:80:27:83:0b:ec:94:a3:
                    f4:b5:09:e5:2e:6c:4a:4d:f4:f8:0f:77:6d:45:0a:
                    a2:40:aa:2a:af:44:06:8f:77:10:b8:00:cd:0b:f6:
                    9a:ec:8c:33:02:48:7f:0d:b0:77:47:7b:a4:04:fb:
                    b7:d1:e2:ca:2e:8c:0e:57:4c:f8:f1:e8:dc:b7:da:
                    d7:a2:36:b4:bd:5f:4b:4a:3f:c4:06:8d:3c:5b:cc:
                    23:ba:af:9b:b6:d8:1f:10:8c:4e:c2:5e:24:e5:c3:
                    09:1f:20:dc:62:4e:c1:15:05:f9:f1:c9:89:b6:8d:
                    ab:10:04:82:04:8b:88:26:d6:3f:bf:db:ba:18:46:
                    9d:f8:fb:43:6c:62:9e:ad:7f:7f:9d:d4:fa:b8:5f:
                    c8:e9:97:cf:ea:81:08:2a:8b:c4:ae:b1:98:e6:a2:
                    f2:72:98:7d:68:5b:94:fe:5d:09:2d:1d:dd:a5:a5:
                    1c:36:ec:0d:ee:da:b7:fc:34:c1:6f:74:70:6b:dc:
                    dd:3b:bb:37:05:fe:60:d1:19:9c:b0:cd:69:c0:ff:
                    bd:25:fa:da:59:65:44:ad:5b:2d:22:e3:12:d1:3f:
                    26:8f:27:5b:ed:0b:2d:46:94:d7:dc:0f:57:91:87:
                    fb:3e:2c:9b:c8:a9:cf:d1:95:9f:ed:3b:06:6a:8f:
                    6e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:B3:05:09:9B:91:62:69:2F:B2:94:DD:28:FD:4E:97:B5:34:CF:67
            X509v3 Authority Key Identifier:
                keyid:D8:B6:E1:8C:65:DD:1F:96:F2:A5:44:CA:CF:C9:80:86:AE:F9:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2LbhjGXdH5bypUTKz8mAhq75KW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA15D/884F254A623711EBB791A659F8AEA228/2LbhjGXdH5bypUTKz8mAhq75KW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:10:1b:fa:2a:6e:78:d0:0b:3a:6e:a6:95:46:f8:c3:0a:63:
         93:2b:2a:58:72:33:50:60:54:95:6e:3f:5c:0b:01:92:f8:39:
         21:17:7a:1f:2c:ed:96:b7:79:95:91:97:84:9a:59:ff:ea:92:
         c0:d3:63:50:ab:5d:7e:c2:7f:df:1d:c1:eb:4a:4e:9a:3b:70:
         62:32:e5:fd:8f:d6:42:b6:dd:d2:39:11:64:3d:13:ca:55:d1:
         4e:a7:01:62:a7:18:9a:d2:de:e1:1d:32:a9:e5:65:73:13:3b:
         9f:f9:23:0f:c5:12:a0:e3:16:4c:6b:78:d3:e4:57:77:bb:01:
         ef:4f:54:a7:64:37:ab:1f:f7:58:7c:79:a8:cb:6f:b2:1f:36:
         d0:c2:5f:51:1e:64:13:f2:f1:28:1c:38:1c:c5:ed:43:33:69:
         ea:58:c3:e8:e8:77:c0:e7:07:7b:45:bc:27:60:ba:0c:20:06:
         61:3b:e7:12:cf:4f:de:9c:5a:89:f1:87:11:89:cf:df:e6:33:
         fa:c7:c1:5c:7c:38:eb:a1:f9:3d:77:de:ff:da:dd:df:ee:7d:
         ad:e8:ba:08:98:d3:d7:6f:38:f4:88:58:f2:17:f4:f8:b7:ac:
         59:8a:e7:8e:66:d8:f2:36:bf:a1:8b:a8:fa:c5:01:f1:a9:41:
         e6:60:bb:93
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkExNURBRjExMC8GA1UEBRMoRDhCNkUxOEM2NUREMUY5NkYyQTU0NENBQ0ZDOTgw
ODZBRUY5Mjk2RjAeFw0yNjEwMjcwMTU4MjZaFw0yNjEwMjkwMTU4MjZaMBgxFjAU
BgNVBAMTDTZhZTAwNTQyLWJiZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDjtbkBScW1gCeDC+yUo/S1CeUubEpN9PgPd21FCqJAqiqvRAaPdxC4AM0L
9prsjDMCSH8NsHdHe6QE+7fR4soujA5XTPjx6Ny32teiNrS9X0tKP8QGjTxbzCO6
r5u22B8QjE7CXiTlwwkfINxiTsEVBfnxyYm2jasQBIIEi4gm1j+/27oYRp34+0Ns
Yp6tf3+d1Pq4X8jpl8/qgQgqi8SusZjmovJymH1oW5T+XQktHd2lpRw27A3u2rf8
NMFvdHBr3N07uzcF/mDRGZywzWnA/70l+tpZZUStWy0i4xLRPyaPJ1vtCy1GlNfc
D1eRh/s+LJvIqc/RlZ/tOwZqj24xAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUW7MF
CZuRYmkvspTdKP1Ol7U0z2cwHwYDVR0jBBgwFoAU2LbhjGXdH5bypUTKz8mAhq75
KW8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZBMTVELzg4NEYyNTRBNjIzNzExRUJCNzkxQTY1OUY4QUVBMjI4LzJMYmhq
R1hkSDVieXBVVEt6OG1BaHE3NUtXOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJMYmhqR1hkSDVieXBVVEt6OG1BaHE3NUtXOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkExNUQvODg0RjI1NEE2MjM3MTFFQkI3OTFBNjU5RjhB
RUEyMjgvMkxiaGpHWGRINWJ5cFVUS3o4bUFocTc1S1c4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEEBv6Km540As6bqaVRvjDCmOTKypY
cjNQYFSVbj9cCwGS+DkhF3ofLO2Wt3mVkZeEmln/6pLA02NQq11+wn/fHcHrSk6a
O3BiMuX9j9ZCtt3SORFkPRPKVdFOpwFipxia0t7hHTKp5WVzEzuf+SMPxRKg4xZM
a3jT5Fd3uwHvT1SnZDerH/dYfHmoy2+yHzbQwl9RHmQT8vEoHDgcxe1DM2nqWMPo
6HfA5wd7RbwnYLoMIAZhO+cSz0/enFqJ8YcRic/f5jP6x8FcfDjrofk9d97/2t3f
7n2t6LoImNPXbzj0iFjyF/T4t6xZiueOZtjyNr+hi6j6xQHxqUHmYLuT
-----END CERTIFICATE-----