Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
File:                     h4TuSgLa-JcmVvEkUr8npJEcNik.mft (raw, json)
Hash identifier:          1rbDIOWP38H+pIZuoBC1NKttEZZl7X5jmdF+ADguXTM=
Subject key identifier:   F7:8D:31:F7:9A:2A:2B:E9:84:88:25:B6:5D:1D:A8:5F:5C:14:6A:A5
Authority key identifier: 87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29
Certificate issuer:       /CN=F3651E73AF/serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
Certificate serial:       0ED4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
Manifest number:          0ECF
Signing time:             Tue 20 Oct 2026 01:04:01 +0000
Manifest this update:     Tue 20 Oct 2026 01:04:00 +0000
Manifest next update:     Thu 22 Oct 2026 01:04:00 +0000
Files and hashes:         1: h4TuSgLa-JcmVvEkUr8npJEcNik.crl (hash: 4ZrnhKufLvrYpxB/1ne9M6SBCCbu1608Ul05n8GZE88=)
                          2: B1757762C48911F0B5A12AF6DAE4EC9C.roa (hash: b5Wcnn4AFWyn401Xj8s2haIgucvxNhp1qnKFpV0Gekw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 22 Oct 2026 00:07:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3796 (0xed4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3651E73AF, serialNumber=8784EE4A02DAF8972656F12452BF27A4911C3629
        Validity
            Not Before: Oct 20 01:04:00 2026 GMT
            Not After : Oct 22 01:04:00 2026 GMT
        Subject: CN=6ad6be01-5678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:4a:27:3e:9d:f5:26:9b:7e:bf:89:cd:25:ff:
                    38:b2:35:05:9f:14:40:7f:5a:b6:41:5e:25:7b:d7:
                    ee:11:92:5e:59:b8:9a:72:f0:af:89:52:a1:f4:7c:
                    a5:da:5f:81:48:28:11:41:0f:51:84:af:de:ac:ff:
                    28:9f:a7:c4:13:40:e9:ec:d6:5a:84:27:70:a3:96:
                    f9:39:c3:08:1d:46:4c:44:de:67:6c:2b:c5:cd:8c:
                    43:9e:e7:22:13:ae:f4:49:ff:b4:a0:d9:0f:66:0e:
                    16:f2:42:ed:f2:58:3f:7f:ce:c4:16:0e:94:3a:e6:
                    d8:40:79:85:4f:da:9c:a4:75:7b:8c:a4:ef:67:a6:
                    0f:46:3e:57:78:b8:b3:1a:4f:68:a2:c4:6f:d7:7b:
                    aa:1f:80:98:a7:68:aa:19:52:fa:4a:5b:bb:62:7a:
                    4b:7d:00:02:6d:a0:eb:73:cc:76:31:3d:92:5a:4f:
                    b1:69:a0:77:3b:63:17:48:ef:7a:30:e2:1e:98:ff:
                    8d:c7:51:8d:5c:ca:e5:80:ae:ba:48:b1:ab:b3:fd:
                    1f:57:f0:5a:0a:8f:e3:02:41:b0:95:7d:71:bd:61:
                    ce:ce:a6:47:fa:61:d4:ae:89:d7:7b:53:cf:a2:c1:
                    32:f8:03:81:ca:54:1b:a7:3b:96:0d:b5:00:aa:8e:
                    6b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8D:31:F7:9A:2A:2B:E9:84:88:25:B6:5D:1D:A8:5F:5C:14:6A:A5
            X509v3 Authority Key Identifier:
                keyid:87:84:EE:4A:02:DA:F8:97:26:56:F1:24:52:BF:27:A4:91:1C:36:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h4TuSgLa-JcmVvEkUr8npJEcNik.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3651E73/3CF0E09A78C411E6848D3A31F8AEA228/h4TuSgLa-JcmVvEkUr8npJEcNik.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:de:cb:fc:49:84:fb:bb:89:91:44:02:b3:49:ae:70:35:68:
         cf:6f:a2:08:ec:61:7e:e6:58:ca:b6:81:8b:49:1b:4f:4c:b9:
         f7:28:98:52:b0:ae:28:5f:6e:b8:9b:d5:0a:00:42:08:0c:d4:
         aa:c8:c9:c3:89:0e:6d:ce:4b:f8:03:8c:61:4f:61:9a:03:e1:
         d2:34:b9:26:5b:9d:11:3f:80:62:9f:e6:77:99:b6:ae:ce:f1:
         9c:d9:3f:1d:e9:b7:7e:d4:b6:c4:14:c7:85:78:f0:ab:28:0d:
         35:4a:26:13:f3:5c:9c:0c:ef:dd:68:b9:ae:93:2e:41:c5:77:
         d2:b1:1e:f3:8d:49:0f:14:bd:fa:29:a1:04:ab:90:e0:43:e1:
         ce:41:68:dd:c1:a6:3f:71:aa:cc:ab:12:4f:ac:b5:73:ba:7e:
         99:5d:b8:27:ca:83:61:0e:c4:cd:67:ac:73:2c:b0:80:14:9d:
         bc:7a:fe:2a:e7:a2:ac:02:00:f4:98:34:e4:a7:e7:28:3e:78:
         b9:e1:35:74:02:92:90:40:37:fd:59:13:ad:13:12:2c:a0:fa:
         3a:85:70:b3:85:54:45:88:5f:6d:02:4d:e2:d6:a9:5d:22:67:
         d8:b0:e6:f8:bc:48:b4:fb:2b:d4:91:22:52:1f:e9:8f:4e:10:
         c9:71:f5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----