Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
File:                     7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft (raw, json)
Hash identifier:          9xXYRiceyewnz2AlDET2rya8Qec4CUyb5SImZiT47T8=
Subject key identifier:   E5:3A:A6:DE:04:B5:D8:B5:86:C0:A2:8A:B5:EB:B3:CF:44:1C:B8:33
Authority key identifier: EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04
Certificate issuer:       /CN=F361C3A1RI/serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
Certificate serial:       0BA1
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
Manifest number:          0B9D
Signing time:             Thu 15 Oct 2026 01:16:08 +0000
Manifest this update:     Thu 15 Oct 2026 01:16:07 +0000
Manifest next update:     Sat 17 Oct 2026 01:16:07 +0000
Files and hashes:         1: 7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl (hash: fdS+WZv8KoySjOXQ59dWihPX7PAF6pjXgy9eUjOZbBw=)
                          2: 672BF774187D11F1AA17F08EDAE4EC9C.roa (hash: 6jF1YxAnbb2FfRaYjhnIgikan05PqQq9CZOBEQf8wgQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
                          rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 17 Oct 2026 00:45:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2977 (0xba1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361C3A1RI, serialNumber=ECBACB719ABA5D32BD990EF3685B5AA36B08CA04
        Validity
            Not Before: Oct 15 01:16:07 2026 GMT
            Not After : Oct 17 01:16:07 2026 GMT
        Subject: CN=6ad02957-96d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:6d:c5:e6:be:ea:2c:c9:19:31:20:98:24:
                    c9:41:92:34:2f:36:7d:17:f8:57:c3:f9:9c:69:74:
                    8a:03:0b:53:bb:25:7b:52:6b:b0:c2:fa:07:61:f1:
                    f5:30:fd:d5:92:a0:d5:76:69:80:eb:63:36:46:17:
                    85:78:78:70:46:40:48:d8:39:23:6d:21:87:2d:20:
                    75:40:e3:4f:d2:c1:15:9b:79:b4:3d:04:22:50:58:
                    69:95:3d:40:59:79:b4:51:db:25:41:3f:a9:82:56:
                    7d:0d:2b:ec:ba:3c:36:49:11:f2:7c:cb:71:35:9a:
                    c2:f4:3a:69:ab:1d:d1:97:7b:de:0a:b2:f9:8c:1b:
                    c3:4f:09:01:f4:7a:0a:24:3c:43:e9:84:b5:5e:6c:
                    64:70:08:2c:02:e2:d7:95:da:5e:5e:c3:34:1d:2e:
                    af:e5:81:67:a3:f6:2a:24:d0:7c:f8:77:b7:2e:84:
                    57:90:0a:29:1c:e1:c4:a8:85:bf:28:fc:f1:d2:48:
                    67:d7:33:0a:44:38:88:8a:db:7d:94:1a:c6:c3:37:
                    2d:ca:c6:66:02:cb:84:db:93:f6:01:08:f5:55:b3:
                    6a:f5:81:bc:13:4a:f9:3f:11:3b:e6:7d:fe:cc:2e:
                    b9:30:82:17:7c:a1:4b:ef:e7:5b:23:0c:09:61:6a:
                    9b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:3A:A6:DE:04:B5:D8:B5:86:C0:A2:8A:B5:EB:B3:CF:44:1C:B8:33
            X509v3 Authority Key Identifier:
                keyid:EC:BA:CB:71:9A:BA:5D:32:BD:99:0E:F3:68:5B:5A:A3:6B:08:CA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/7LrLcZq6XTK9mQ7zaFtao2sIygQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361C3A1/47DF6D66E0D011E8A546211CF8AEA228/7LrLcZq6XTK9mQ7zaFtao2sIygQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:47:dc:40:5a:ff:50:d4:11:60:5f:a7:c2:4f:bf:5a:19:f6:
         ff:18:72:8e:a3:f6:e1:a2:c6:d3:ce:66:f6:bd:41:30:9f:bf:
         89:a5:ca:a8:c3:e4:11:8b:e4:b7:ef:9b:5b:0c:09:28:a0:d2:
         e0:b5:12:23:09:d9:5f:d8:80:5c:c8:0c:10:31:d7:17:e6:74:
         3d:71:b5:34:e0:76:c4:20:23:cc:b5:04:1a:c0:34:a9:67:09:
         74:b0:19:c1:b5:3a:c8:ec:e3:0b:70:cc:e8:e7:2b:36:1d:a2:
         59:76:f4:ce:a6:47:74:8c:84:d8:51:91:dc:b5:17:99:e1:74:
         9a:b4:1b:12:80:73:93:6f:b0:a0:0e:da:21:31:f5:cd:f0:32:
         52:fa:4f:58:61:8d:e9:a7:3f:35:87:d6:5d:1c:a0:61:60:a8:
         75:57:93:b4:7f:0d:fa:43:12:14:39:fa:06:08:d6:62:8d:58:
         ad:74:0b:a4:e8:a2:eb:73:b0:a6:f7:ff:74:85:e5:64:2a:07:
         d7:fb:3f:da:a9:2a:30:a4:01:a2:d3:2c:cc:91:51:c8:3c:7d:
         27:a8:00:d6:d8:d5:4f:a5:0b:8f:32:e5:ca:ab:b1:0b:fe:84:
         b7:6a:c6:d5:ee:c5:80:e2:c1:d8:ac:89:30:f0:f7:33:f1:ed:
         b1:b2:0e:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----