Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
File:                     xfjkPM0fcvciuyN0u3q9C4iwVz8.mft (raw, json)
Hash identifier:          fJGCNqPSFN+TBDq7n7zgvpt6l2VVR2J5jSu8Y1pMr64=
Subject key identifier:   14:CA:9A:06:7E:E1:4D:C7:30:65:CC:F4:44:17:59:B2:3D:5B:39:E2
Authority key identifier: C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F
Certificate issuer:       /CN=F36FB1A3AF/serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
Certificate serial:       0686
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
Manifest number:          0686
Signing time:             Tue 27 Oct 2026 02:41:27 +0000
Manifest this update:     Tue 27 Oct 2026 02:41:27 +0000
Manifest next update:     Thu 29 Oct 2026 02:41:27 +0000
Files and hashes:         1: xfjkPM0fcvciuyN0u3q9C4iwVz8.crl (hash: Ck8gaqqYh3jUPlq+25AkNc32l+vqdSG3TVgtwTwKB5s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 02:41:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670 (0x686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FB1A3AF, serialNumber=C5F8E43CCD1F72F722BB2374BB7ABD0B88B0573F
        Validity
            Not Before: Oct 27 02:41:27 2026 GMT
            Not After : Oct 29 02:41:27 2026 GMT
        Subject: CN=6ae00f57-695a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b9:bb:8f:ea:49:f4:77:b3:0b:d9:c3:d2:ee:
                    c9:3e:96:c0:15:1f:2b:90:c5:e5:e7:7c:59:ad:0a:
                    19:99:57:10:a1:ba:83:c3:fd:cd:e0:b4:26:ec:2e:
                    14:b2:d2:4e:c9:4a:69:9b:7a:7c:78:4d:6b:16:9c:
                    c4:c9:0e:5f:ee:74:f2:f8:42:26:74:08:9a:76:3e:
                    d0:8c:8e:be:8c:1a:28:38:3f:48:79:f2:6a:a9:56:
                    04:df:ba:50:f2:a0:c7:9d:03:c6:74:2b:54:ef:5c:
                    3d:3f:72:77:a1:bd:d2:67:ef:64:14:10:4d:e4:c6:
                    d9:5a:52:c6:88:99:2e:43:33:17:6a:f8:c0:ee:d9:
                    e8:18:f8:42:56:84:93:a5:71:ff:aa:b7:f9:3b:12:
                    7a:5e:14:ea:a6:6c:08:25:e8:f9:cd:20:fc:8a:a3:
                    8c:6c:b2:af:99:3f:70:cb:36:bb:76:27:d6:13:96:
                    a2:48:27:74:32:c0:bd:a3:e0:e0:8e:2d:6d:72:40:
                    9d:2a:7d:29:a3:e9:bd:45:a5:7f:ad:a2:ea:2a:00:
                    65:d2:8f:d5:b8:b2:b5:29:56:ab:48:7f:92:d3:c3:
                    cf:4e:1d:49:bd:03:71:6f:28:00:1f:38:19:94:85:
                    86:d0:e4:d9:32:4e:55:b3:ec:e1:cc:19:b9:44:fc:
                    a3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:CA:9A:06:7E:E1:4D:C7:30:65:CC:F4:44:17:59:B2:3D:5B:39:E2
            X509v3 Authority Key Identifier:
                keyid:C5:F8:E4:3C:CD:1F:72:F7:22:BB:23:74:BB:7A:BD:0B:88:B0:57:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xfjkPM0fcvciuyN0u3q9C4iwVz8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FB1A3/3C789C6ED12611ECB70663DDF1222468/xfjkPM0fcvciuyN0u3q9C4iwVz8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:15:2c:5f:0c:bb:cf:4d:31:a0:7c:6b:d4:cc:7f:a8:2e:25:
         8f:a2:7e:f1:3b:30:74:8b:80:d3:e1:c3:43:0d:67:60:bf:f1:
         20:89:17:16:fd:5f:6e:78:02:c2:92:3c:82:d3:64:4c:e4:fd:
         1d:d4:97:d8:83:d8:cb:cb:06:22:d3:6a:a8:d4:ec:54:c8:24:
         a6:10:aa:c6:27:c4:96:33:5f:01:bb:56:a3:b0:42:50:a7:2d:
         79:e3:a9:64:58:59:d4:6e:6a:68:72:be:c3:b6:a0:bb:ff:cc:
         31:e5:88:8c:66:e1:24:7c:81:77:75:07:47:59:a3:b5:12:02:
         76:c4:04:78:45:93:30:1e:4c:d2:bd:26:00:d5:84:11:f6:28:
         31:58:87:11:8d:f7:49:72:88:3e:2f:25:73:6a:6b:9f:86:5e:
         d2:1f:2f:6e:f9:56:d1:3c:e5:5b:93:d3:51:8e:b7:54:8d:38:
         81:1b:9a:23:80:a6:d5:ce:87:df:62:b6:fe:fb:c4:fb:e4:01:
         37:1c:2e:00:3c:c3:b6:14:85:fb:64:03:22:41:6f:02:3b:78:
         3c:5e:6d:fd:df:ea:e1:59:cd:70:0d:2b:8f:31:ce:d1:bc:30:
         e5:55:f0:ef:ed:2d:16:46:a2:f6:8d:e9:54:2f:8b:89:12:1f:
         9c:55:0a:8f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkIxQTNBRjExMC8GA1UEBRMoQzVGOEU0M0NDRDFGNzJGNzIyQkIyMzc0QkI3QUJE
MEI4OEIwNTczRjAeFw0yNjEwMjcwMjQxMjdaFw0yNjEwMjkwMjQxMjdaMBgxFjAU
BgNVBAMTDTZhZTAwZjU3LTY5NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQubuP6kn0d7ML2cPS7sk+lsAVHyuQxeXnfFmtChmZVxChuoPD/c3gtCbs
LhSy0k7JSmmbenx4TWsWnMTJDl/udPL4QiZ0CJp2PtCMjr6MGig4P0h58mqpVgTf
ulDyoMedA8Z0K1TvXD0/cnehvdJn72QUEE3kxtlaUsaImS5DMxdq+MDu2egY+EJW
hJOlcf+qt/k7EnpeFOqmbAgl6PnNIPyKo4xssq+ZP3DLNrt2J9YTlqJIJ3QywL2j
4OCOLW1yQJ0qfSmj6b1FpX+touoqAGXSj9W4srUpVqtIf5LTw89OHUm9A3FvKAAf
OBmUhYbQ5NkyTlWz7OHMGblE/KMvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUFMqa
Bn7hTccwZcz0RBdZsj1bOeIwHwYDVR0jBBgwFoAUxfjkPM0fcvciuyN0u3q9C4iw
Vz8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZCMUEzLzNDNzg5QzZFRDEyNjExRUNCNzA2NjNEREYxMjIyNDY4L3hmamtQ
TTBmY3ZjaXV5TjB1M3E5QzRpd1Z6OC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3hmamtQTTBmY3ZjaXV5TjB1M3E5QzRpd1Z6OC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkIxQTMvM0M3ODlDNkVEMTI2MTFFQ0I3MDY2M0RERjEy
MjI0NjgveGZqa1BNMGZjdmNpdXlOMHUzcTlDNGl3Vno4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0FSxfDLvPTTGgfGvUzH+oLiWPon7x
OzB0i4DT4cNDDWdgv/EgiRcW/V9ueALCkjyC02RM5P0d1JfYg9jLywYi02qo1OxU
yCSmEKrGJ8SWM18Bu1ajsEJQpy1546lkWFnUbmpocr7DtqC7/8wx5YiMZuEkfIF3
dQdHWaO1EgJ2xAR4RZMwHkzSvSYA1YQR9igxWIcRjfdJcog+LyVzamufhl7SHy9u
+VbRPOVbk9NRjrdUjTiBG5ojgKbVzoffYrb++8T75AE3HC4APMO2FIX7ZAMiQW8C
O3g8Xm393+rhWc1wDSuPMc7RvDDlVfDv7S0WRqL2jelUL4uJEh+cVQqP
-----END CERTIFICATE-----