Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
File:                     2S3BlA86xFACYfqliK5STwS9244.mft (raw, json)
Hash identifier:          vJ64DpC9UiOFM9ufohh2Q1NGgy3VuHJamj45w0stsGE=
Subject key identifier:   F8:D7:57:AC:CE:C4:B6:C0:02:28:AD:A2:01:D5:F7:D2:1A:99:D2:D5
Authority key identifier: D9:2D:C1:94:0F:3A:C4:50:02:61:FA:A5:88:AE:52:4F:04:BD:DB:8E
Certificate issuer:       /CN=F363FC87AF/serialNumber=D92DC1940F3AC4500261FAA588AE524F04BDDB8E
Certificate serial:       25
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
Manifest number:          24
Signing time:             Mon 21 Sep 2026 05:49:57 +0000
Manifest this update:     Mon 21 Sep 2026 05:49:56 +0000
Manifest next update:     Wed 23 Sep 2026 05:49:56 +0000
Files and hashes:         1: 2S3BlA86xFACYfqliK5STwS9244.crl (hash: WRaWm6Z+1w0xaOrc4QZ6Z0sfXQiQT+H8JSTzJ72dJJc=)
                          2: 05A0B69E9B0811F1A0808FE3CE1D38B0.roa (hash: pasTsat2fXh6YiGvMvYT8AvkfmPYbd9JwrzF0OlGv9U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:49:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FC87AF, serialNumber=D92DC1940F3AC4500261FAA588AE524F04BDDB8E
        Validity
            Not Before: Sep 21 05:49:56 2026 GMT
            Not After : Sep 23 05:49:56 2026 GMT
        Subject: CN=6ab0c584-6119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b7:d0:fd:9c:01:fb:e6:3e:da:d0:1b:cb:b6:
                    a7:42:3a:e7:dd:3b:55:35:d3:01:c1:f4:29:2e:68:
                    c4:6c:51:96:df:6c:57:39:d3:6c:28:bc:e0:6f:20:
                    5b:a8:b8:84:47:88:9f:c6:af:24:f8:db:d1:ed:5f:
                    1d:50:8d:46:1b:ca:71:40:31:e4:c4:d9:d3:47:5b:
                    c6:f8:5f:ad:2d:34:8f:57:6c:d6:2f:80:d4:84:8c:
                    ee:fd:35:45:07:32:29:a3:e4:14:62:86:d8:f9:9c:
                    e1:7c:b0:a3:06:b9:c5:80:9a:78:c7:d8:be:5b:82:
                    72:62:c7:45:79:99:9b:e8:8b:89:14:31:4c:5a:6b:
                    dd:1c:c4:84:d2:96:d9:74:c6:e7:c7:5b:ee:3f:44:
                    a6:8d:9d:42:48:c4:89:50:cd:82:5a:86:bc:a7:03:
                    4a:e8:cd:9a:44:70:38:1b:fe:fe:d6:6b:46:27:cb:
                    0e:44:54:84:85:1e:d0:55:6f:39:04:bc:13:1f:e7:
                    16:cb:dc:30:11:84:44:0f:81:8a:ed:94:35:eb:c1:
                    81:da:6e:28:b4:fc:fb:dc:68:2a:30:58:24:25:b8:
                    1d:23:e1:cb:b2:7a:4c:2e:85:58:e9:01:40:82:01:
                    25:73:02:e7:0a:d5:03:8a:46:90:31:35:30:a2:31:
                    a3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:D7:57:AC:CE:C4:B6:C0:02:28:AD:A2:01:D5:F7:D2:1A:99:D2:D5
            X509v3 Authority Key Identifier:
                keyid:D9:2D:C1:94:0F:3A:C4:50:02:61:FA:A5:88:AE:52:4F:04:BD:DB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ab:5a:fd:cf:dd:b4:34:c9:4b:fa:00:46:af:ee:f9:ae:72:
         70:07:18:56:0d:14:ca:0f:43:fc:54:d4:b3:33:72:da:5f:cf:
         02:83:c9:6b:ed:35:1e:83:35:37:94:10:a6:64:0e:61:8f:73:
         3b:5d:66:cb:fa:bd:50:bb:e5:fe:5b:73:9f:cb:e2:28:be:b0:
         0a:8a:a2:e8:62:35:da:30:6c:90:8f:f7:90:af:42:e3:ca:7c:
         4a:cd:59:cc:9c:ae:d7:47:dc:17:23:fb:21:bd:ed:08:e7:28:
         fc:64:59:b5:22:bb:86:9b:f9:3f:15:86:32:64:b5:12:65:ce:
         21:a0:e5:7d:83:c4:f7:3c:c9:c9:2a:6d:c0:cc:f4:f8:f4:68:
         1a:9d:25:50:cf:00:9f:57:c0:27:10:f5:ff:b0:d2:f9:3c:56:
         cf:93:7a:50:f4:55:b6:69:0d:88:fc:8b:76:db:9c:f0:9f:f2:
         f1:67:e9:5a:c4:f6:69:4a:67:57:f5:c9:f8:59:37:e4:87:f7:
         68:f9:86:31:70:33:53:0d:0b:34:2a:e8:d3:c7:3e:c9:2e:e1:
         42:f4:01:84:2b:6c:76:61:82:ee:6b:24:2f:a2:a7:f1:a4:83:
         3f:a9:dc:8b:ba:c4:c5:9e:2c:7a:c0:7b:4a:fd:94:a2:6a:d8:
         46:2f:3e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----