Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
File:                     DRUACGUUibpRRLPxfr7M37lFZAs.mft (raw, json)
Hash identifier:          02xN7QNIc0s4AYue7qcJMMOT7/61MsUhLxkunAo93CU=
Subject key identifier:   FD:76:B7:F1:60:D9:6C:3B:31:FF:D1:DC:77:00:FD:6A:51:F3:BD:B4
Authority key identifier: 0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B
Certificate issuer:       /CN=F36FBB68AF/serialNumber=0D150008651489BA5144B3F17EBECCDFB945640B
Certificate serial:       0865
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
Manifest number:          0860
Signing time:             Sat 24 Oct 2026 02:01:50 +0000
Manifest this update:     Sat 24 Oct 2026 02:01:49 +0000
Manifest next update:     Mon 26 Oct 2026 02:01:49 +0000
Files and hashes:         1: DRUACGUUibpRRLPxfr7M37lFZAs.crl (hash: /VE65szwylTIiEK3/kHMXN8PJ5dYlNaWEizncERLx5A=)
                          2: C7A8EB58767411EBA6B0766EF8AEA228.roa (hash: GWda8GOSrIMVnjZRMSaotXSgFivJyI4WaCZCa+WMK0A=)
                          3: F3595C487D9E11EBB0CF4425F8AEA228.roa (hash: 13YoJMcN+dmv+b0H3AQ2M8ild3BcGQ6ON48XMKrEX5o=)
                          4: 89DF6E2A767711EBB4347171F8AEA228.roa (hash: RdloHLAK4gQJgsID0wnpZ6wew4Gn1opmX/BleJBr/IY=)
                          5: 1A0BC3C08B1A11EBA3BE1F71F8AEA228.roa (hash: CDicO0MqFxvbqD7XBDkV7o1kgQGQHL9fYvIZb+N7K30=)
                          6: A3872CCA767511EBAC7F576FF8AEA228.roa (hash: hmLqvNXuyAn9YBf05pAIuD+kdW8/EhKCnZYOAEKh1yU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2149 (0x865)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FBB68AF, serialNumber=0D150008651489BA5144B3F17EBECCDFB945640B
        Validity
            Not Before: Oct 24 02:01:49 2026 GMT
            Not After : Oct 26 02:01:49 2026 GMT
        Subject: CN=6adc118d-689a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:f7:e6:4f:2f:38:4a:04:be:4f:c8:c9:47:d8:
                    d0:2d:3c:03:92:d4:03:49:50:cc:2c:3f:d4:58:5a:
                    f5:4f:3f:72:5a:af:a1:49:d4:01:7d:91:e3:09:13:
                    24:e5:21:c5:4a:34:27:a0:f8:c7:05:5b:a3:bf:dd:
                    29:fa:2a:e3:29:31:6e:1a:fd:ac:de:0a:04:f0:78:
                    b9:02:f1:fe:73:ba:7c:4b:b3:f1:7e:d3:e2:bb:c0:
                    ed:39:1f:8d:7a:1a:13:e5:7a:16:3b:aa:04:8e:c8:
                    56:9d:80:47:52:73:a3:4e:ab:92:95:d9:a5:ab:c8:
                    65:97:08:b7:a0:e1:be:a0:69:2f:2b:c0:81:7e:34:
                    39:f2:6e:75:93:47:6a:9a:aa:f5:63:85:11:eb:ef:
                    15:8c:7b:47:35:7e:33:74:e8:a6:aa:9a:65:32:7c:
                    a8:bf:3a:90:50:e7:b2:9e:5c:32:3a:db:15:9f:4e:
                    f4:90:16:e9:87:da:e8:a9:69:27:f2:c7:da:98:30:
                    40:83:b0:ce:89:af:70:1f:9c:81:9b:1b:98:6f:a9:
                    87:2a:58:56:2a:76:69:6b:8c:8e:4c:30:d8:a0:0c:
                    97:22:db:8d:47:9c:3e:90:6c:05:ff:86:40:c3:e1:
                    6b:d0:42:b4:00:01:4c:f9:71:6d:b2:31:be:4e:f7:
                    b3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:76:B7:F1:60:D9:6C:3B:31:FF:D1:DC:77:00:FD:6A:51:F3:BD:B4
            X509v3 Authority Key Identifier:
                keyid:0D:15:00:08:65:14:89:BA:51:44:B3:F1:7E:BE:CC:DF:B9:45:64:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DRUACGUUibpRRLPxfr7M37lFZAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FBB68/DEFB17F0767311EBBA1F686DF8AEA228/DRUACGUUibpRRLPxfr7M37lFZAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:fb:7b:96:bf:7f:a3:44:67:3d:b5:d2:e4:1b:ce:28:4f:8f:
         9e:1e:27:a3:28:db:6f:81:b9:f4:34:c1:6d:40:d7:eb:02:03:
         c7:78:8d:58:88:17:1c:31:97:2d:c8:05:7b:6a:62:40:04:63:
         0e:b7:ec:25:a6:f7:9a:4d:6b:17:61:e8:29:08:c0:ff:ea:3d:
         0e:51:8c:d5:0b:a7:64:b8:4d:2d:10:81:5d:ac:e3:43:a7:0b:
         d1:66:d9:fd:a0:8d:59:b1:65:69:a4:c4:57:4d:c7:ec:b8:3f:
         db:69:7b:b1:56:98:a1:5c:22:ba:32:57:68:57:6c:22:2f:9e:
         2b:3d:4f:32:29:0e:a6:78:f2:1a:d9:64:d5:4e:8f:1c:78:5f:
         59:cd:37:3a:9b:b4:c5:ef:b0:8b:61:fc:42:1a:00:d3:7c:56:
         c6:1f:d6:d0:f3:d5:1f:8d:6a:d0:5a:a1:81:31:dc:42:c0:85:
         9b:d5:90:12:25:c9:55:83:2a:bf:ef:9a:32:e9:14:58:5d:cf:
         33:14:84:91:10:18:1e:49:0b:12:8b:35:22:ab:d1:d4:41:fe:
         74:7f:f8:b7:ec:cd:87:f2:71:de:e6:23:ec:aa:3f:32:77:cb:
         38:19:1c:3a:c9:5e:8d:ee:8b:e6:f5:90:51:94:98:6e:3f:a5:
         c8:1a:c4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----