Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft
File:                     Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft (raw, json)
Hash identifier:          1N7SuD3qhMhU13WStxBz/b2t/mb4JNNHW/bBln8ZXgc=
Subject key identifier:   18:DB:86:4F:3E:93:AB:E1:BD:03:D2:78:63:0E:CC:F0:67:E2:FA:79
Authority key identifier: 43:2E:D8:5C:AC:11:7E:60:35:4A:FF:E8:27:E7:42:83:AA:8E:80:3F
Certificate issuer:       /CN=F3697D5CAF/serialNumber=432ED85CAC117E60354AFFE827E74283AA8E803F
Certificate serial:       30
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft
Manifest number:          30
Signing time:             Sun 27 Sep 2026 05:50:25 +0000
Manifest this update:     Sun 27 Sep 2026 05:50:24 +0000
Manifest next update:     Tue 29 Sep 2026 05:50:24 +0000
Files and hashes:         1: Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.crl (hash: YGRRRe/MEhMmWzXvJZDHs4sMxCzGPSuNbUAV/Y4HpHw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 05:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697D5CAF, serialNumber=432ED85CAC117E60354AFFE827E74283AA8E803F
        Validity
            Not Before: Sep 27 05:50:24 2026 GMT
            Not After : Sep 29 05:50:24 2026 GMT
        Subject: CN=6ab8aea1-d13e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:43:b4:43:fe:52:d2:9e:1d:90:2b:48:01:41:
                    fd:fb:40:9f:b5:1c:cb:e2:cd:b0:95:d8:48:9a:bf:
                    61:70:b3:0c:11:1b:ad:c2:cc:37:fe:56:79:26:2a:
                    dd:43:59:bd:35:df:e0:2c:b9:9b:e9:2b:5a:83:de:
                    a0:9a:5c:12:07:2c:39:ee:ff:b3:89:6e:c8:21:07:
                    53:06:0d:83:e7:39:c0:f2:83:15:85:01:e6:92:1b:
                    f1:18:77:2b:50:c5:a1:1c:3a:d4:e8:59:c9:48:dc:
                    fe:76:83:b5:57:cd:60:9d:ee:38:c2:a9:46:5e:30:
                    31:39:ed:c7:ca:2b:b1:bb:f5:d3:1e:c0:18:f2:11:
                    29:55:f7:c7:ba:66:2b:60:d8:5e:74:e5:56:95:85:
                    8c:1a:bf:b7:de:f3:17:66:c5:1d:15:0c:53:23:1c:
                    72:7a:41:ca:f7:15:ca:18:a8:62:c3:e5:5d:9a:c5:
                    b7:0a:b0:b2:4d:0c:b8:44:18:a2:a2:b9:6a:99:a4:
                    93:f8:34:d7:2f:9a:88:68:b5:f0:aa:0a:cb:bd:b0:
                    b6:cf:50:3c:b1:82:8e:4d:0d:dd:7b:3e:21:46:05:
                    74:41:bd:aa:b0:b4:2f:10:24:e7:8e:18:60:ab:56:
                    2d:c1:0e:2f:da:1a:34:54:cd:4c:64:e3:ed:df:69:
                    bf:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DB:86:4F:3E:93:AB:E1:BD:03:D2:78:63:0E:CC:F0:67:E2:FA:79
            X509v3 Authority Key Identifier:
                keyid:43:2E:D8:5C:AC:11:7E:60:35:4A:FF:E8:27:E7:42:83:AA:8E:80:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697D5C/8A0990FC96A011F1A8F13FA2CE1D38B0/Qy7YXKwRfmA1Sv_oJ-dCg6qOgD8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b8:07:64:94:8e:6b:cc:70:ce:9e:2f:f1:ad:22:51:ae:c6:
         ee:1c:40:a5:c0:37:7d:a6:f3:56:10:91:0c:4a:b3:d9:43:69:
         65:fc:a2:e8:3b:55:f9:1f:3c:d7:61:a9:ea:4b:41:17:87:5b:
         5f:e6:ea:62:91:d4:be:57:eb:0a:1d:cf:8e:5f:e4:7d:2f:06:
         f5:11:26:a1:c2:ae:7c:d3:bc:ea:73:ad:81:13:41:10:c0:4e:
         e0:cc:a3:84:b8:81:0b:2b:42:4e:cc:cb:1d:8d:3d:58:9c:c7:
         f0:ea:11:a5:5c:7b:75:c7:d0:96:39:41:a2:fb:37:09:43:a9:
         1f:cc:ea:3d:4a:66:b8:12:37:f1:ec:7e:25:09:88:b4:3e:cc:
         b8:c6:76:5b:d2:bc:c3:a1:eb:6b:6a:b8:e9:7c:88:7b:97:75:
         3c:29:f4:ec:e3:f5:09:7b:ef:d3:55:e3:2d:63:bc:c2:58:be:
         63:21:cd:92:3a:ed:cc:88:44:15:57:b5:9c:54:5a:04:4d:12:
         1f:6f:2d:54:41:fc:7d:a1:0f:92:04:6d:db:db:6e:f5:70:4f:
         d7:97:94:17:c0:0f:f1:5f:8b:95:a6:8e:58:94:a1:4e:bd:d4:
         f3:0d:aa:c8:dd:5a:97:38:76:c9:a0:8d:18:e6:b8:a2:bb:24:
         c8:e2:e2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----