Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
File:                     CbNOEzY507TuNRYTuKYNaxkCrWM.mft (raw, json)
Hash identifier:          zD23aAwe8FycaxM/3g2Jsc5pf+5y0GeR9s4iZUdk+KU=
Subject key identifier:   28:47:0F:56:76:FA:FA:0A:36:B6:87:D7:31:0D:E8:F7:69:13:C6:E5
Authority key identifier: 09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63
Certificate issuer:       /CN=F3693AE0AF/serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
Certificate serial:       03A9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
Manifest number:          03A3
Signing time:             Tue 13 Oct 2026 04:08:56 +0000
Manifest this update:     Tue 13 Oct 2026 04:08:55 +0000
Manifest next update:     Thu 15 Oct 2026 04:08:55 +0000
Files and hashes:         1: CbNOEzY507TuNRYTuKYNaxkCrWM.crl (hash: b6K2tXMrPJN+IjeBepNIVhfeE/MokqJLn3UrEWGOcf0=)
                          2: 109E9816058E11EF9F2E082A017001B1.roa (hash: awGoqbBSAx/fCGhKKOOxrJpeJJgZ+sWJhXA1UCAvdvs=)
                          3: F1372870058911EFB8214008017001B1.roa (hash: t2P1L8ixLWdSZJ4m2IxwLYayMJ240E8hcnHi+YngPF0=)
                          4: 6A08039C101011EFA385055B017001B1.roa (hash: A6nZPy/mB+rYQKkTcDrcj6TrmIhozwVdv/FBstEbirU=)
                          5: 7F80E364058F11EFB71B1335017001B1.roa (hash: rJz+n5vELGUm/ZVnAC3v32ehr4m666WbMOKDdNfrYmo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3693AE0AF, serialNumber=09B34E133639D3B4EE351613B8A60D6B1902AD63
        Validity
            Not Before: Oct 13 04:08:55 2026 GMT
            Not After : Oct 15 04:08:55 2026 GMT
        Subject: CN=6acdaed8-31f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:03:63:ca:b8:ed:1b:ca:e0:ae:19:4f:86:4d:
                    b5:22:a1:5b:33:57:95:ca:e0:16:9c:18:8b:03:95:
                    81:24:f7:87:61:c7:e8:3f:5c:93:20:de:eb:04:98:
                    00:6f:c2:99:4a:0c:e2:ed:0d:14:9f:ba:b5:3c:ef:
                    7f:8f:9e:ee:2f:a4:9d:97:70:37:17:1d:79:b7:68:
                    5d:d1:dd:df:48:3b:8a:8b:89:8f:87:ef:6f:6e:5e:
                    ce:96:25:96:e4:57:53:79:ae:f7:01:b3:fb:7a:d5:
                    de:71:14:6f:2a:3f:db:4e:06:65:1f:a7:d0:1d:5f:
                    aa:cc:a7:5a:6a:2b:89:ff:68:81:ca:d4:d2:7e:6b:
                    d7:b6:96:9e:7c:23:20:3d:79:56:6b:f5:fa:03:ab:
                    4f:46:44:23:d4:ba:2f:a3:99:de:3e:33:d9:69:03:
                    a1:02:c6:d8:18:85:32:0a:69:63:bc:82:e2:df:56:
                    a6:02:d8:2c:73:08:33:bb:f2:10:66:bc:52:6a:64:
                    99:d2:14:c2:be:b3:23:47:53:75:ef:d6:23:99:57:
                    c3:9c:bf:d4:dd:45:a2:51:41:4e:db:4f:0f:05:ef:
                    74:3c:54:c4:88:6c:53:d3:13:ca:3b:6f:c3:d5:aa:
                    df:17:af:83:a0:a5:f1:36:07:d2:df:aa:a5:51:02:
                    4a:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:47:0F:56:76:FA:FA:0A:36:B6:87:D7:31:0D:E8:F7:69:13:C6:E5
            X509v3 Authority Key Identifier:
                keyid:09:B3:4E:13:36:39:D3:B4:EE:35:16:13:B8:A6:0D:6B:19:02:AD:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CbNOEzY507TuNRYTuKYNaxkCrWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3693AE0/BBE52FF200E111EFAF84D607017001B1/CbNOEzY507TuNRYTuKYNaxkCrWM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:03:da:77:6b:b1:9d:e9:c2:25:82:dd:23:b4:d0:df:08:06:
         70:30:5b:22:8f:31:90:49:9e:54:d5:8b:8c:9c:25:88:84:f8:
         ce:c8:b8:7f:dd:10:05:26:83:7a:59:bf:be:eb:2c:de:1e:9f:
         33:c7:32:d9:83:28:25:45:75:eb:a3:02:f8:39:bb:ce:28:16:
         51:ff:ee:eb:55:bf:1e:08:87:2e:fd:ed:92:f2:fa:52:8d:30:
         ed:e5:58:12:d6:e7:32:22:e0:88:1a:78:27:30:b5:c0:ba:00:
         07:6b:f3:b4:74:1c:8d:45:68:4c:ed:a8:7f:a9:d2:9d:a0:66:
         ed:41:f4:3c:d7:c1:11:43:86:10:33:f7:90:82:ba:eb:18:f5:
         1b:1d:1d:59:3b:71:9c:6f:81:94:51:9d:71:7c:ed:82:dc:48:
         0a:87:c1:70:17:65:64:a4:ee:b5:d2:51:36:50:da:11:2e:65:
         93:23:dd:a3:e9:3d:4c:96:44:57:a2:80:1a:65:cb:67:b6:0e:
         7e:a4:15:4a:4c:44:c9:10:f0:1f:42:fe:f3:90:9e:ff:e9:ca:
         bb:27:22:cc:2f:09:3d:32:86:df:27:d9:2f:5b:86:4e:88:f8:
         f8:d9:34:94:9e:32:1b:ce:3c:5e:5d:69:e3:bc:1e:b3:23:37:
         d0:83:41:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----