Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
File:                     KvCNgqXIimbwBbMcgOhymuKM11U.mft (raw, json)
Hash identifier:          XHnX71Hx32pYtB6Aj9oH0CvKnuP7zu9BDrjaozMHXeg=
Subject key identifier:   92:AB:19:BC:16:59:8B:40:C0:A0:D1:56:5A:3A:93:AA:F5:3C:F9:C7
Authority key identifier: 2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55
Certificate issuer:       /CN=F36406D3AF/serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
Certificate serial:       0AC1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
Manifest number:          0ABF
Signing time:             Sun 11 Oct 2026 01:25:53 +0000
Manifest this update:     Sun 11 Oct 2026 01:25:52 +0000
Manifest next update:     Tue 13 Oct 2026 01:25:52 +0000
Files and hashes:         1: KvCNgqXIimbwBbMcgOhymuKM11U.crl (hash: H/3tI1yc5bouVPrIo82V/NaKA5/LiN4YJ9iPG5Cxp6k=)
                          2: E0B7E5C6AE2111E98F04DF3CF8AEA228.roa (hash: DsX+R5lwZz5IbPxYwdbT3HKP4x8lgrMkS5VZBHtyCkQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 01:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2753 (0xac1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36406D3AF, serialNumber=2AF08D82A5C88A66F005B31C80E8729AE28CD755
        Validity
            Not Before: Oct 11 01:25:52 2026 GMT
            Not After : Oct 13 01:25:52 2026 GMT
        Subject: CN=6acae5a1-adce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4d:72:9e:04:20:e0:a0:c2:f9:58:10:22:87:
                    93:1a:e8:d5:85:37:e2:a0:64:a4:e8:4c:02:5b:6a:
                    9b:4c:31:ed:8e:0b:6c:33:03:14:c4:32:e6:96:ae:
                    4f:02:98:fc:9d:13:97:15:5f:17:4b:35:7d:dd:22:
                    4e:28:f6:78:91:e4:7b:bf:fd:8f:63:bd:cb:e1:23:
                    89:5d:ee:97:7e:95:20:6d:fe:1e:99:3e:a7:d6:84:
                    b7:b5:73:e4:70:34:9d:58:6e:ca:c1:a9:a3:d9:07:
                    a6:13:a2:a1:43:94:f6:57:c0:01:c6:f5:51:21:c5:
                    48:65:51:e4:61:f4:f4:49:d0:30:ce:89:6e:5e:7d:
                    2d:cb:24:4b:05:1b:12:e6:d1:42:1e:22:5a:6a:b4:
                    1d:e6:3d:d4:a8:01:a8:f3:07:09:be:4b:a7:cf:3b:
                    5d:fd:ca:f0:34:0b:83:90:91:09:e1:20:2f:14:3e:
                    1a:11:c5:40:c2:77:84:12:8a:bd:be:bd:ae:82:bf:
                    71:08:97:e8:3a:18:1d:ed:31:86:4d:42:22:63:f8:
                    e6:5e:62:b4:8e:18:38:24:b0:8b:6c:5e:a3:ff:02:
                    39:91:0d:ed:cb:67:a3:3b:8e:b2:f9:6e:1f:93:9e:
                    32:25:40:21:5e:c8:f0:33:9c:2f:e6:8d:93:31:af:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:AB:19:BC:16:59:8B:40:C0:A0:D1:56:5A:3A:93:AA:F5:3C:F9:C7
            X509v3 Authority Key Identifier:
                keyid:2A:F0:8D:82:A5:C8:8A:66:F0:05:B3:1C:80:E8:72:9A:E2:8C:D7:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KvCNgqXIimbwBbMcgOhymuKM11U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36406D3/FB643C36876F11E994958B32F8AEA228/KvCNgqXIimbwBbMcgOhymuKM11U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:88:20:aa:0e:39:fb:25:6d:f6:be:63:52:4d:7f:ce:d3:8f:
         d1:35:b1:34:29:9a:86:83:ac:cd:68:56:18:e4:85:14:dc:95:
         a0:c8:7b:0e:4a:05:4b:43:4e:05:11:c5:4a:96:32:2e:19:84:
         86:3c:f2:8b:a5:d9:b7:0e:71:97:7b:13:29:7e:89:fc:30:9e:
         a8:5e:83:ce:5f:50:05:9b:f6:45:da:a4:71:03:67:74:41:08:
         5e:02:4d:87:c4:f4:87:46:3e:df:fe:dc:c5:80:54:93:2c:7d:
         f4:87:b1:be:aa:95:a4:f3:cc:fc:cd:22:a6:d3:68:0c:27:da:
         34:ee:a0:80:aa:17:36:61:ea:ec:52:65:1f:39:1f:fe:83:44:
         f8:42:e4:a1:00:08:cb:84:ee:26:dd:20:e5:24:1d:95:cc:ec:
         08:8b:fd:90:08:26:41:a7:8b:84:75:c5:0d:84:db:59:13:9f:
         83:e3:7a:ee:23:cb:cb:09:5e:8f:ed:00:6c:d4:99:20:a7:25:
         ef:68:e2:e0:dd:ec:6f:c4:ac:c3:76:de:f4:2d:37:9b:83:bf:
         23:dd:60:cb:ac:21:fd:05:0d:2d:dd:b8:3f:f3:75:bb:88:da:
         3e:a0:15:7f:41:cf:d0:0f:f9:61:b1:03:4a:75:7d:d2:40:5d:
         ff:e8:f7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----