Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
File:                     zkYtttkR7mTZxEy4EI0T4DxaZNU.mft (raw, json)
Hash identifier:          ZZbAu4Ki+97eXUBQEmqLjFG1ZoBnmK6Kms9vMibGKXg=
Subject key identifier:   4A:73:0D:4D:7C:35:72:1C:DA:79:A4:2B:07:C3:EA:26:28:4C:D0:D3
Authority key identifier: CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5
Certificate issuer:       /CN=F3679532AF/serialNumber=CE462DB6D911EE64D9C44CB8108D13E03C5A64D5
Certificate serial:       0140
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
Manifest number:          013D
Signing time:             Tue 22 Sep 2026 05:15:11 +0000
Manifest this update:     Tue 22 Sep 2026 05:15:10 +0000
Manifest next update:     Thu 24 Sep 2026 05:15:10 +0000
Files and hashes:         1: zkYtttkR7mTZxEy4EI0T4DxaZNU.crl (hash: 9REjY/snzs/v3tlo0QT7/R5kqmwZRr/TKnu/Zi9rqxU=)
                          2: FDA59DF2C38E11F08B1F0FCADAE4EC9C.roa (hash: tqnDn2eXksrwnPyVC4DoYDlm3A+bfBcINzKFdaoCNAE=)
                          3: 86AD3B68C39511F0A59F00F2DAE4EC9C.roa (hash: HAj/QCJbUqOlCpJTAgH7nxk05+9O2sEd5ZgoEE+jkL0=)
                          4: 4416D8561D5211F1B09D5DBBDAE4EC9C.roa (hash: bnSYCKQteOzcDcNEFoo+uV3o4TGvuGUdVsiVEGgqdbo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 320 (0x140)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3679532AF, serialNumber=CE462DB6D911EE64D9C44CB8108D13E03C5A64D5
        Validity
            Not Before: Sep 22 05:15:10 2026 GMT
            Not After : Sep 24 05:15:10 2026 GMT
        Subject: CN=6ab20edf-2895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:20:58:a2:1a:4a:95:90:f7:c9:45:f4:b9:73:
                    6e:85:ad:67:33:7a:3b:00:a9:08:80:b5:96:2a:d7:
                    5e:34:25:3d:ae:16:f6:c3:58:f0:07:8e:94:26:98:
                    62:97:00:7e:09:a5:40:b6:ce:74:ac:57:4b:c8:0c:
                    fc:35:3c:43:71:e1:75:ab:25:4c:0c:57:c8:67:0f:
                    3b:4f:d5:35:1f:8a:c0:67:9e:54:3c:aa:76:1d:fb:
                    5e:9b:b1:2d:c2:c8:97:80:c7:35:e8:d8:9e:bb:b1:
                    57:21:2a:4b:a3:6d:d9:ea:fa:2d:d7:a1:02:9b:b3:
                    ef:35:c8:0f:e5:31:e2:75:af:ff:a0:5d:d7:ba:2d:
                    b2:8d:49:f8:75:20:32:94:ea:e2:63:ec:77:a8:10:
                    dc:68:ee:1f:b2:ba:6d:ee:7d:b0:cd:bc:3c:7e:54:
                    92:6d:ec:eb:1c:83:70:18:f2:6a:e7:35:d0:f8:df:
                    8e:ca:88:2a:10:8a:52:71:e9:ae:43:2e:f7:3c:06:
                    18:82:9e:fd:44:7b:8c:f2:0e:d6:4b:8c:75:10:1c:
                    74:ad:44:2c:d1:88:31:3a:57:9b:8e:ce:09:c3:4b:
                    95:2e:b5:c4:34:b1:06:8f:70:9f:0a:5e:ae:f4:dc:
                    55:21:11:2a:d1:f8:19:5c:87:e6:02:80:c8:48:af:
                    78:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:73:0D:4D:7C:35:72:1C:DA:79:A4:2B:07:C3:EA:26:28:4C:D0:D3
            X509v3 Authority Key Identifier:
                keyid:CE:46:2D:B6:D9:11:EE:64:D9:C4:4C:B8:10:8D:13:E0:3C:5A:64:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zkYtttkR7mTZxEy4EI0T4DxaZNU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3679532/7DD45604C38E11F08BF6B3C7DAE4EC9C/zkYtttkR7mTZxEy4EI0T4DxaZNU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:f8:78:3c:0d:0d:0f:cf:0d:b0:f3:ab:e8:05:0c:0b:ec:7e:
         38:ff:91:78:2f:9c:4b:70:1e:f4:e0:a0:9e:8b:63:c9:b4:86:
         2a:92:27:ea:73:c9:ad:b9:c2:6f:ff:7d:5e:dc:e9:e4:c6:06:
         7e:70:82:d6:24:d2:f6:97:4d:41:75:09:b8:ec:5e:44:48:66:
         1b:99:5e:d9:1a:88:17:af:8d:96:1b:fa:d3:3e:e8:89:8e:09:
         77:f4:a4:4c:6e:9d:ac:6a:92:54:46:87:63:c8:7e:05:16:9b:
         47:1b:db:9d:04:c4:af:72:1a:5b:42:a6:54:61:72:85:7d:96:
         7d:7c:b5:b8:8d:5a:03:5d:6c:0f:fe:e3:b3:34:70:52:f6:59:
         76:b0:14:ad:7f:70:96:9f:7e:a6:70:c0:18:66:2f:9a:a0:03:
         bd:ee:5f:91:f5:8c:a0:3b:b7:eb:8e:06:ce:18:3e:41:2b:a9:
         ae:28:66:56:9f:b4:b3:67:54:e0:91:f5:7c:86:c8:fd:de:50:
         51:3a:fa:21:70:98:c6:1a:23:09:9b:74:0f:48:63:ed:11:d5:
         56:0f:35:e1:ba:8e:1c:9e:1f:9b:68:55:6a:a7:09:a7:15:66:
         dd:44:9e:c6:0f:78:59:97:5a:39:e6:62:5d:8e:c1:07:ec:e1:
         ac:67:0c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----