Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
File:                     0RDaMi-Zhc--woypzoUgREhmujc.mft (raw, json)
Hash identifier:          Z4zqvvkoyezCuMu4nCJXiqIosRAe0SyngggmMQagQEw=
Subject key identifier:   75:69:C1:7E:07:58:FB:70:EC:BA:61:45:D5:6A:6C:B7:FE:AA:02:32
Authority key identifier: D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37
Certificate issuer:       /CN=F36723E1AF/serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
Certificate serial:       04F0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
Manifest number:          04E8
Signing time:             Tue 22 Sep 2026 03:26:24 +0000
Manifest this update:     Tue 22 Sep 2026 03:26:23 +0000
Manifest next update:     Thu 24 Sep 2026 03:26:23 +0000
Files and hashes:         1: 0RDaMi-Zhc--woypzoUgREhmujc.crl (hash: k5GbWO9GIlNiqGmJtlPdNOcQpiTcFbeJidJ1XdvxxHo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1264 (0x4f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36723E1AF, serialNumber=D110DA322F9985CFBEC28CA9CE8520444866BA37
        Validity
            Not Before: Sep 22 03:26:23 2026 GMT
            Not After : Sep 24 03:26:23 2026 GMT
        Subject: CN=6ab1f560-13dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:27:d1:96:94:63:79:0a:47:83:06:cb:9b:87:
                    0e:09:4f:ab:99:9c:43:3e:e5:2c:6c:29:fa:d6:27:
                    ce:c2:b0:d8:45:e5:a4:f4:30:e4:b1:07:4e:44:28:
                    da:63:43:a8:13:a7:bf:04:99:71:3c:29:20:55:37:
                    bb:92:14:72:4c:9e:8d:dd:fd:62:26:11:2c:a4:40:
                    4d:e0:b3:99:1b:73:b6:05:29:97:e2:55:10:ae:5c:
                    a8:d7:44:34:38:13:a3:36:8b:7b:92:37:96:af:c4:
                    7e:4f:ef:d3:5d:33:3e:c1:84:0a:e2:b1:18:94:ee:
                    eb:a8:13:99:53:09:c9:57:71:2b:0b:96:0f:50:72:
                    f7:26:c6:b5:c7:b5:75:19:fe:4d:7e:8f:da:69:fb:
                    d5:8d:e7:a9:c4:a7:30:d3:a3:30:66:e4:1a:da:0f:
                    26:bf:f4:ec:a2:67:d9:88:94:76:99:6c:2b:50:25:
                    b3:73:35:8e:ef:35:a8:c6:c8:24:2d:5b:8f:d6:08:
                    24:0d:ed:c9:17:33:88:42:3d:8d:dd:53:ac:fc:16:
                    d7:41:7f:a2:b0:7f:fb:e2:e4:21:0a:b9:86:4e:fa:
                    b8:64:a7:42:24:5c:06:4b:5e:3f:da:84:06:73:e6:
                    d9:e4:87:9e:cf:0b:30:fd:1d:c0:77:9a:b5:d9:de:
                    85:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:69:C1:7E:07:58:FB:70:EC:BA:61:45:D5:6A:6C:B7:FE:AA:02:32
            X509v3 Authority Key Identifier:
                keyid:D1:10:DA:32:2F:99:85:CF:BE:C2:8C:A9:CE:85:20:44:48:66:BA:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0RDaMi-Zhc--woypzoUgREhmujc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36723E1/7E3FA3F0FA1911EDBE8EE4254AD9E6FC/0RDaMi-Zhc--woypzoUgREhmujc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:e3:27:25:e9:67:ec:7b:d4:66:ae:0f:c6:c1:55:bf:9e:1c:
         5e:5e:14:e7:75:dc:f1:7b:bb:88:ac:f8:14:c7:44:de:1d:a0:
         5b:6d:3e:b4:68:b1:6d:c9:07:cc:72:e9:32:05:af:d0:6e:5f:
         d5:2c:ff:1c:85:f2:64:df:3d:75:e1:23:80:3e:73:e8:6f:8b:
         ce:ca:03:d3:42:d4:e0:f4:7c:8c:8f:01:51:fb:37:cc:ef:0b:
         a6:e3:f6:2c:34:8d:5c:f3:77:07:b1:81:00:59:62:61:8a:09:
         6e:3c:e8:11:68:88:64:f8:aa:21:a1:d5:32:61:26:2a:aa:02:
         1c:e1:a3:53:b1:c6:4d:aa:39:cf:7c:5e:4a:ed:9d:fa:bb:5f:
         88:c6:66:97:7a:00:27:2c:13:ed:13:d8:47:29:51:11:48:25:
         ad:b1:90:85:37:d3:c0:c3:10:59:71:85:9a:56:6f:5d:96:7c:
         4b:2f:5f:ea:7e:42:a6:ed:19:33:0a:86:1a:7e:31:49:28:a5:
         24:b7:34:61:8b:18:53:5c:0c:50:3d:a9:d4:db:2a:70:c0:d8:
         e4:91:e2:df:5a:b5:02:d9:e3:df:c1:7c:bb:90:71:56:d8:e9:
         e1:ff:8f:59:75:36:91:66:ed:fd:eb:22:8a:9a:8b:d1:2e:59:
         f4:a6:b3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----