Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
File:                     pz69jeko0iBEFPgOnBKclZ18RIk.mft (raw, json)
Hash identifier:          tyN9jIurjmVRiPNtyxnBBky2qme5FXHJjO4kEEVsml8=
Subject key identifier:   86:A5:69:28:14:91:AC:A9:8F:7A:2D:B8:DE:54:B2:C3:91:67:FE:0D
Authority key identifier: A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89
Certificate issuer:       /CN=F366F191AF/serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
Certificate serial:       0DE6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
Manifest number:          0DE4
Signing time:             Sat 26 Sep 2026 01:07:35 +0000
Manifest this update:     Sat 26 Sep 2026 01:07:34 +0000
Manifest next update:     Mon 28 Sep 2026 01:07:34 +0000
Files and hashes:         1: pz69jeko0iBEFPgOnBKclZ18RIk.crl (hash: QOXzjaw2VbRLEaniNxY1ZMD4TSBCtiTJitIKzgOYZp8=)
                          2: A5F505EE310A11E89814DE46F8AEA228.roa (hash: G7wALW0FIkxQXpAJOH3ldp5an+aZ2+T0e/6OMG97saU=)
                          3: E7F9C2D60E4C11E795956341F8AEA228.roa (hash: emeNnLebc/Q9zvHY298LJgCEJ9keSysC0t/xMmR8occ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3558 (0xde6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366F191AF, serialNumber=A73EBD8DE928D2204414F80E9C129C959D7C4489
        Validity
            Not Before: Sep 26 01:07:34 2026 GMT
            Not After : Sep 28 01:07:34 2026 GMT
        Subject: CN=6ab71ad7-25de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ab:df:e1:ff:2c:8d:f5:a8:66:e0:cf:f3:e9:
                    08:1c:1f:73:b0:06:6a:3b:e0:43:18:ca:a5:29:d0:
                    26:3c:52:98:6a:5f:3c:c4:08:f9:43:21:fd:c8:50:
                    f2:13:dd:f2:b9:d8:d6:f4:37:a4:93:e8:2e:3f:fc:
                    38:4d:34:0a:53:33:e7:91:71:d8:d0:b6:c2:44:c5:
                    6f:64:e2:a6:8b:c1:34:09:7f:b1:38:59:3b:96:d9:
                    ed:03:5b:f3:c6:e4:6d:20:bd:bc:98:95:cf:f7:35:
                    d7:62:1b:b1:07:cd:4c:22:07:fd:bb:0c:99:dc:7f:
                    4e:1e:b1:79:99:46:36:0c:8d:ee:1e:fe:cf:84:94:
                    0b:a7:ca:db:44:80:f6:99:f9:ec:51:0b:f6:45:04:
                    68:a0:36:49:25:79:57:8d:1b:e2:a9:f6:47:71:9b:
                    cd:1e:36:7e:53:3a:87:80:63:6e:76:f3:a4:42:e6:
                    1b:c2:6b:19:31:7c:1f:e5:fe:ee:18:3a:38:71:20:
                    df:ca:6d:57:8c:80:a4:56:40:11:0a:69:23:fd:8d:
                    6c:2f:68:2d:fe:c4:92:f3:64:27:f2:2f:51:1d:bf:
                    c2:ab:3b:fd:10:83:71:9c:10:be:51:22:e5:cc:19:
                    7d:ef:1d:9a:bc:8b:a6:e5:50:33:1a:8d:f4:49:40:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:A5:69:28:14:91:AC:A9:8F:7A:2D:B8:DE:54:B2:C3:91:67:FE:0D
            X509v3 Authority Key Identifier:
                keyid:A7:3E:BD:8D:E9:28:D2:20:44:14:F8:0E:9C:12:9C:95:9D:7C:44:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pz69jeko0iBEFPgOnBKclZ18RIk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366F191/1DA5A51E07F711E79CDBB30AF8AEA228/pz69jeko0iBEFPgOnBKclZ18RIk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:00:92:70:aa:39:73:2e:c1:73:ea:5b:2c:fc:1e:77:43:ed:
         e6:b2:97:5b:31:72:d0:3a:36:59:3f:2e:5e:39:8f:e5:50:d4:
         8d:f4:55:e8:45:cc:f6:15:71:74:86:ee:37:60:e0:cb:6f:a3:
         d2:69:2f:26:e1:ac:b4:2b:f1:c2:a0:75:a9:92:24:80:2f:0f:
         6e:a2:3c:5f:87:2d:de:bc:54:0a:98:9c:07:d5:ff:a3:b4:97:
         7b:c3:69:93:72:b7:f5:f5:e8:6b:84:b8:f2:df:d7:d5:05:bc:
         c4:aa:10:a7:d3:2c:1d:6b:07:b7:3b:1f:53:cd:f1:81:1a:53:
         c5:0b:b7:87:38:d3:b3:fa:53:56:95:19:c2:dd:97:30:93:56:
         aa:54:2f:6b:99:70:63:81:99:4c:b8:5c:a7:f0:a6:55:04:a4:
         ac:7b:bb:69:f8:b4:c6:86:a8:06:11:eb:a8:d0:fa:18:da:db:
         76:23:e7:b3:d2:5d:f6:3a:44:df:59:6a:d2:5f:35:db:32:73:
         43:8c:31:7e:38:7b:4a:35:62:06:0c:54:0b:22:87:96:32:ff:
         ba:65:0f:7e:aa:16:98:f4:9a:ba:40:97:ec:93:52:9b:98:8d:
         0d:67:c9:86:d0:4c:55:90:bb:fc:ab:7f:ec:a5:f3:1a:e3:03:
         86:ca:4f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----