Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
File:                     xaUP22PDxb0fR0h14JTxitF-H5Y.mft (raw, json)
Hash identifier:          eLKdzFhTIk2/YsOddn2iAJu1XshJYoVssNjLCcCxI2s=
Subject key identifier:   8E:B9:A4:B0:99:1C:FE:E8:5D:1D:8E:32:9F:DE:83:FD:2E:6A:36:C5
Authority key identifier: C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96
Certificate issuer:       /CN=F365F7E8AF/serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
Certificate serial:       0425
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
Manifest number:          0423
Signing time:             Fri 09 Oct 2026 03:51:57 +0000
Manifest this update:     Fri 09 Oct 2026 03:51:56 +0000
Manifest next update:     Sun 11 Oct 2026 03:51:56 +0000
Files and hashes:         1: xaUP22PDxb0fR0h14JTxitF-H5Y.crl (hash: EmtcwnhBHiYWf6UlCH70XhMpjQpAEicMQinwU5n4xkM=)
                          2: C44EDCDE47A111F189DCF8F2CE1D38B0.roa (hash: 5wtUZaGAD6hnevPQoGy0Wp/M21ZmQcq4eTIcxSJMHIM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 11 Oct 2026 03:51:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F7E8AF, serialNumber=C5A50FDB63C3C5BD1F474875E094F18AD17E1F96
        Validity
            Not Before: Oct  9 03:51:56 2026 GMT
            Not After : Oct 11 03:51:56 2026 GMT
        Subject: CN=6ac864dd-3267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:24:ff:9c:0f:5a:d2:be:5a:8e:bc:43:b1:
                    93:51:f2:2f:3f:11:db:6c:f6:13:bd:c5:cd:37:78:
                    e4:0c:59:61:d7:4d:89:28:61:4e:db:b4:69:01:2d:
                    2d:43:47:21:4d:b7:e2:9d:97:21:a7:cf:8e:f9:64:
                    b6:5c:e2:0a:44:51:ba:60:47:af:05:16:84:e9:9a:
                    57:45:50:4c:73:f9:8d:5f:8a:99:d6:51:a7:51:79:
                    17:5d:2d:f3:de:f9:59:c0:6b:6d:fb:51:51:d9:74:
                    41:25:56:4e:22:69:94:21:bd:2c:4d:9f:f3:5f:4d:
                    98:67:17:ac:60:f8:4d:e5:2c:fe:6f:10:95:53:1f:
                    68:87:b3:23:69:de:e5:c5:64:2c:25:62:2b:59:a1:
                    f0:41:dc:68:69:67:cb:a2:e2:3f:d4:5d:68:c9:c3:
                    f5:87:d1:d0:42:49:cc:4c:d3:3f:c6:8f:9c:0d:9b:
                    76:6a:e6:d4:ce:29:ee:10:50:b3:35:9b:9d:59:ce:
                    68:cf:25:e9:34:31:35:ed:53:57:f3:8b:34:08:2c:
                    e6:bd:48:51:c0:ca:9e:45:af:0f:c2:54:d1:92:d6:
                    22:75:fc:bb:87:20:bf:a7:58:e7:92:eb:14:1f:e3:
                    f0:e8:a9:f0:4c:67:11:61:8b:fa:94:3e:ac:ff:ee:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B9:A4:B0:99:1C:FE:E8:5D:1D:8E:32:9F:DE:83:FD:2E:6A:36:C5
            X509v3 Authority Key Identifier:
                keyid:C5:A5:0F:DB:63:C3:C5:BD:1F:47:48:75:E0:94:F1:8A:D1:7E:1F:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xaUP22PDxb0fR0h14JTxitF-H5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F7E8/D868211096CA11EEA01BDA73D25BE465/xaUP22PDxb0fR0h14JTxitF-H5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f5:1e:26:9a:6e:d6:cb:48:bd:7b:53:5b:ba:dd:01:c9:28:
         5f:33:0a:7c:48:4f:18:73:35:97:33:1d:a3:46:77:66:31:eb:
         5d:21:ad:c7:1e:bb:47:7c:e0:b3:27:0f:e7:be:28:5d:72:0a:
         a9:fe:31:86:54:2e:95:91:31:a2:b0:aa:b2:e0:b5:57:30:09:
         aa:70:48:a0:6c:b8:a3:16:5b:d2:63:95:25:b7:37:9d:63:ec:
         c4:49:bd:10:14:91:94:d7:5a:a7:1b:9c:61:69:2e:be:a3:3c:
         01:23:e6:65:5a:77:93:f7:d8:44:fa:88:e4:10:2f:3b:6b:17:
         06:d2:2f:9f:3f:24:94:c5:ac:d0:c3:76:d5:fe:8d:65:67:c8:
         6d:4a:9c:1b:28:4e:03:59:ac:e1:e4:36:f4:4d:c3:c2:37:68:
         1f:f3:8a:3d:88:09:bf:d8:dd:f4:8b:46:08:88:80:87:3d:9a:
         52:fe:60:16:96:93:aa:e1:3e:29:6f:cc:9d:a2:d2:cf:92:a6:
         c8:4f:48:22:4e:65:cc:8f:4c:e0:ea:05:ff:2c:ff:c3:59:cd:
         57:86:12:90:4d:f1:fa:cb:0b:b2:76:d4:0b:c9:40:1e:e7:35:
         4a:49:cc:fa:3e:0f:05:7c:20:7a:f6:18:90:60:d1:da:c5:da:
         c7:ef:20:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----