Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
File:                     _9XXjnVnnozv_5gXPaanm0zID_0.mft (raw, json)
Hash identifier:          5bQ23l9mxriHQ69CbCbFzQd6gGL7OL90xfy675WUr6A=
Subject key identifier:   0E:5D:62:1E:B3:6D:DC:03:5C:D9:BD:32:B8:51:78:32:C1:6E:16:AA
Authority key identifier: FF:D5:D7:8E:75:67:9E:8C:EF:FF:98:17:3D:A6:A7:9B:4C:C8:0F:FD
Certificate issuer:       /CN=F366C76DAF/serialNumber=FFD5D78E75679E8CEFFF98173DA6A79B4CC80FFD
Certificate serial:       0122
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_9XXjnVnnozv_5gXPaanm0zID_0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
Manifest number:          0121
Signing time:             Mon 21 Sep 2026 05:19:01 +0000
Manifest this update:     Mon 21 Sep 2026 05:19:01 +0000
Manifest next update:     Wed 23 Sep 2026 05:19:01 +0000
Files and hashes:         1: _9XXjnVnnozv_5gXPaanm0zID_0.crl (hash: JDQevReaqqXS0FhczmEyMxV7d1UR/51tvadO3Cr8REU=)
                          2: 51BF4370D5CD11F0BF78ACDCDAE4EC9C.roa (hash: GpfJtRTKikRCRP7GY2KeAG+0LEHAqBX0XHiILcklaao=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_9XXjnVnnozv_5gXPaanm0zID_0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:18:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 290 (0x122)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C76DAF, serialNumber=FFD5D78E75679E8CEFFF98173DA6A79B4CC80FFD
        Validity
            Not Before: Sep 21 05:19:01 2026 GMT
            Not After : Sep 23 05:19:01 2026 GMT
        Subject: CN=6ab0be45-5e38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:22:b6:30:ce:87:b5:e2:1a:c9:17:c2:61:
                    1d:ef:42:59:4d:33:45:95:04:1d:21:8b:0f:68:4f:
                    91:2a:e1:fe:86:50:c6:ae:c2:de:62:c1:c5:50:33:
                    2f:cd:4c:e6:55:8a:83:51:b2:32:f4:a4:65:be:40:
                    57:5d:e8:62:ec:e2:e7:70:75:21:0c:74:fa:4a:64:
                    ec:49:1b:7f:70:ce:ed:a8:8f:a3:86:a5:7e:5b:0f:
                    f1:43:86:e2:80:1c:83:7a:42:7c:3a:a3:26:b0:42:
                    2a:f5:46:10:77:36:93:10:1e:2c:a6:c3:c5:06:7a:
                    64:4b:3c:9b:30:cb:db:d6:a9:fd:b5:7a:d2:57:64:
                    f8:db:32:c0:75:3f:8c:b0:6d:8a:0f:31:3f:d2:89:
                    3e:2f:20:f6:7b:a1:f5:be:16:62:40:a8:a3:11:10:
                    d2:2b:6d:b8:d8:ef:ff:d1:da:5a:42:81:a2:50:27:
                    f7:74:63:c0:20:8b:ec:07:53:a7:73:b5:21:bf:27:
                    ae:8f:04:a6:25:9d:a1:a9:5c:19:b8:a2:00:31:30:
                    53:d2:16:83:09:77:7d:59:60:2a:48:cb:e3:91:52:
                    f6:5c:1a:1d:83:46:8e:76:6d:c2:ca:d0:bd:de:97:
                    91:ba:18:d9:17:f6:9b:d7:c2:a5:83:e1:24:ea:8a:
                    7a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:5D:62:1E:B3:6D:DC:03:5C:D9:BD:32:B8:51:78:32:C1:6E:16:AA
            X509v3 Authority Key Identifier:
                keyid:FF:D5:D7:8E:75:67:9E:8C:EF:FF:98:17:3D:A6:A7:9B:4C:C8:0F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_9XXjnVnnozv_5gXPaanm0zID_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ca:0e:5a:12:ce:4b:1a:77:dd:c5:3a:5f:74:66:59:ed:df:
         b4:c7:1b:5b:56:a7:da:ce:d6:07:8d:64:b0:61:e3:29:f6:1a:
         78:67:03:72:d8:64:e6:74:c8:2f:50:65:2e:b1:81:00:5e:ae:
         f4:d4:6a:4b:2e:c8:92:3c:6f:8c:12:be:75:89:4e:4e:7c:f0:
         ef:13:1d:59:30:d7:34:82:00:b1:0f:7b:21:93:e5:6e:d9:8c:
         7a:1c:35:83:2d:dc:99:41:49:e2:72:b9:08:56:95:59:ca:4e:
         b8:bf:4b:a0:48:05:5f:b1:f4:b5:90:eb:f7:e1:a2:38:e3:6d:
         e8:7d:52:9e:52:1b:3a:38:f5:c9:3a:16:96:34:fd:ca:2b:88:
         82:a8:25:be:0e:a8:8c:c8:a9:6e:1e:f4:b1:0e:80:1f:42:90:
         62:16:64:b4:6a:e4:85:02:e1:c9:f4:2c:2d:cf:e5:92:fd:04:
         7b:e0:11:27:56:97:d1:ac:c0:a5:39:48:71:21:a4:ee:12:21:
         95:40:27:c6:99:d3:bf:8f:32:0b:3a:89:b5:3d:45:5e:a0:a2:
         d4:8a:ac:ba:d8:1f:19:86:10:6e:06:5a:24:80:b6:9f:ae:4f:
         5d:d8:e2:f7:a2:11:5b:22:cc:a3:1a:2d:55:34:f1:8b:9f:5d:
         eb:ab:97:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----