Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
File:                     _lkJnrBGBmU3CfmlmpxGdQcb7L0.mft (raw, json)
Hash identifier:          bWprgGJwIAMBzwB7Ik3y8SLadaHOEAgq8dUpijb8C7I=
Subject key identifier:   40:44:B9:A4:F5:1A:2D:4A:F5:0D:29:D5:A0:98:E6:14:BC:2D:27:24
Authority key identifier: FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD
Certificate issuer:       /CN=F36A141DAF/serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
Certificate serial:       0483
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
Manifest number:          0482
Signing time:             Tue 22 Sep 2026 03:40:00 +0000
Manifest this update:     Tue 22 Sep 2026 03:39:59 +0000
Manifest next update:     Thu 24 Sep 2026 03:39:59 +0000
Files and hashes:         1: _lkJnrBGBmU3CfmlmpxGdQcb7L0.crl (hash: P1jtrlbnmelQf5M70PXAhHpminfPu1R49tFWX9oImkM=)
                          2: A6CB045440CD11EEA84BD2644AD9E6FC.roa (hash: k2NQBaUwb1pqhxKitutyFUj84i7cH4npO1gBOUjSKLM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1155 (0x483)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A141DAF, serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
        Validity
            Not Before: Sep 22 03:39:59 2026 GMT
            Not After : Sep 24 03:39:59 2026 GMT
        Subject: CN=6ab1f890-4cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:55:7c:c9:2a:88:e3:f9:22:83:ce:cd:ac:ea:
                    35:f8:b8:bf:81:9b:45:f4:8d:dd:59:0d:24:67:da:
                    95:75:8f:4e:9c:73:46:0f:5b:b6:fa:2b:f1:f9:f5:
                    e2:76:77:1c:a3:1a:8d:ae:75:7e:ce:c4:f0:38:0e:
                    f8:2f:88:bb:dd:40:31:b8:ae:73:bc:9b:6b:7c:24:
                    37:8f:9c:44:ab:fe:9f:f2:7e:b9:46:e6:59:29:50:
                    9d:2e:6d:1e:fb:37:a8:8d:eb:59:51:1a:a5:28:7e:
                    a9:71:5d:e0:cd:e7:f1:55:99:8f:a4:fd:2e:37:b8:
                    16:e0:0f:91:f2:c6:07:d3:b4:93:ee:49:2d:c1:99:
                    aa:50:74:7f:b8:a4:c2:91:98:b3:99:c4:63:97:ac:
                    71:93:31:27:44:11:fe:bf:86:4d:89:5e:bc:3b:f4:
                    ec:6d:09:87:d8:c5:43:c8:8b:54:a6:23:1b:30:e3:
                    e1:a5:c8:64:ba:6f:83:75:f5:3c:4d:c3:49:69:be:
                    cd:b8:42:f8:8f:7d:26:c3:69:17:28:17:e3:82:29:
                    f7:f7:ae:66:7f:d1:a9:4e:7a:d4:58:77:ce:fe:a0:
                    25:c9:ae:ee:a1:9d:f9:6f:2a:5b:a6:8e:da:1c:de:
                    af:61:93:6b:6b:eb:e6:0b:07:f5:25:67:88:20:6a:
                    99:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:44:B9:A4:F5:1A:2D:4A:F5:0D:29:D5:A0:98:E6:14:BC:2D:27:24
            X509v3 Authority Key Identifier:
                keyid:FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:64:da:1d:89:1b:55:c2:30:20:81:f9:1e:11:56:46:d1:a2:
         70:71:26:22:17:f9:70:e4:54:8c:68:fc:1b:01:07:12:8b:99:
         fe:5d:01:75:a9:92:33:bc:3f:49:c6:5f:99:76:72:bf:38:2a:
         83:f3:45:bd:e7:51:6a:41:66:91:a6:70:e0:be:65:84:af:95:
         b0:df:bb:36:2e:7f:41:fc:92:27:ca:67:0e:33:9e:6f:9a:b9:
         11:44:c8:a4:77:8d:2a:06:8f:9c:28:df:7f:4d:32:6b:19:27:
         91:6b:bf:26:8e:e7:c1:f6:0c:83:b2:c2:fa:c7:62:71:61:53:
         a1:b3:f1:3f:9c:1a:e2:e8:85:25:d5:f6:32:f9:51:57:12:82:
         6a:79:6e:55:a9:47:61:8e:4f:0b:31:44:ac:28:a5:45:54:ef:
         0d:db:9e:c7:c9:2d:90:36:78:19:37:e1:85:28:40:77:18:2d:
         cd:96:9f:20:98:39:3d:04:a7:27:ca:d8:ec:5c:e8:b7:a5:56:
         c5:ea:e0:7e:ee:2d:f1:8d:7c:10:22:09:51:14:0d:77:a1:5c:
         6f:4b:83:d5:9f:d5:3d:20:75:1e:56:69:d8:64:2d:4d:d2:1d:
         09:6a:f5:3f:aa:5b:b0:12:e0:0b:20:e9:52:5f:17:14:93:b5:
         95:56:26:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----