Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
File:                     3YlMw4XaLW71JrsLssqqX8pm8MM.mft (raw, json)
Hash identifier:          JugCBSXWn2bXbcG190jpqQWtpWmYIp8Ya/2/7/PY2n0=
Subject key identifier:   0F:71:6C:D9:D8:4B:31:81:BC:26:54:7A:34:4E:AF:E7:24:C8:1D:A9
Authority key identifier: DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3
Certificate issuer:       /CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
Certificate serial:       04C7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
Manifest number:          04C6
Signing time:             Mon 21 Sep 2026 03:29:40 +0000
Manifest this update:     Mon 21 Sep 2026 03:29:39 +0000
Manifest next update:     Wed 23 Sep 2026 03:29:39 +0000
Files and hashes:         1: 3YlMw4XaLW71JrsLssqqX8pm8MM.crl (hash: ySkBpZtg5GpeyOQ9yhZCJw2FCcoL+eC+TO0XRNDg7y0=)
                          2: A0B834A6403611EF97C8EE46762E951A.roa (hash: kJ/+tKAV2nU5Yw7yHfU4bK7cxohBTA9n07WDnp1GBUA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1223 (0x4c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAF, serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
        Validity
            Not Before: Sep 21 03:29:39 2026 GMT
            Not After : Sep 23 03:29:39 2026 GMT
        Subject: CN=6ab0a4a3-89a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6a:b6:ec:10:12:e2:5b:e3:12:d1:fb:5d:b3:
                    3a:24:e6:46:ce:53:c4:21:ee:55:85:97:ee:c4:c4:
                    20:f8:f6:06:8f:39:45:21:3a:1a:95:9b:7e:56:2b:
                    08:73:36:a6:ff:42:e7:3e:de:c9:d6:7a:0d:19:20:
                    61:78:76:c3:73:cd:97:3d:0d:b1:59:f0:c5:b7:65:
                    f5:b9:9b:13:d5:a0:bb:bf:6a:ee:3a:f2:71:3f:77:
                    5f:06:cf:ef:7b:b8:73:77:17:83:1b:a5:47:87:38:
                    a4:be:e6:39:b9:4b:61:c7:d0:dc:60:bf:15:dd:17:
                    d8:46:a5:05:f2:39:b6:f5:72:f2:8d:ba:d0:c7:80:
                    cd:03:28:8c:86:c1:36:ab:d4:c5:60:4e:e9:29:8f:
                    fe:d4:8d:b0:56:4d:41:85:3e:6d:b2:84:fe:de:b9:
                    22:57:ac:d2:b9:b0:fa:f5:b6:3c:f8:1e:c2:19:07:
                    61:59:7b:15:b8:45:d6:45:cf:f8:64:04:a0:9e:a1:
                    3e:9a:8b:56:7f:ec:14:fd:90:d8:f7:b5:c2:08:99:
                    7c:d9:b2:71:6f:56:3d:49:7d:c4:0f:b3:8c:5e:07:
                    0a:c0:fa:d4:5b:20:e8:aa:82:f3:60:d4:1b:3b:e8:
                    28:2b:f5:cd:2d:9c:11:6e:7b:a1:ef:6a:7a:56:a3:
                    59:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:71:6C:D9:D8:4B:31:81:BC:26:54:7A:34:4E:AF:E7:24:C8:1D:A9
            X509v3 Authority Key Identifier:
                keyid:DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:16:b3:28:2e:3b:da:be:56:4f:23:d0:c2:c5:a5:2e:bd:49:
         93:5a:76:a8:25:22:1f:d1:71:6b:0e:25:a8:39:42:59:bc:a0:
         34:69:65:92:67:48:84:41:82:cd:2d:85:30:65:f0:27:5f:d6:
         06:91:f6:fc:d7:61:c3:9c:b3:07:34:19:50:b0:bf:42:8d:a8:
         41:82:ca:e8:77:87:37:09:7d:1c:e5:d2:31:f6:b7:62:42:9d:
         ca:ad:a6:73:86:b5:51:09:c7:ce:8f:74:6e:fd:80:7d:2f:23:
         56:eb:ca:b0:25:5d:59:3a:13:07:7b:8e:7e:24:65:41:6a:f4:
         68:2c:d6:62:db:fa:1b:10:3b:2d:99:f7:b5:7d:4a:b3:d7:43:
         de:cd:3f:77:3b:49:76:2e:7d:ae:65:47:cc:6f:e6:d9:80:fe:
         e1:be:4d:61:5c:47:9a:03:a2:5a:01:10:ea:64:e2:19:d1:fc:
         50:37:73:11:28:25:72:0f:ba:a4:c9:9d:97:9a:7a:45:3e:e5:
         43:38:4a:cb:09:74:e6:85:b1:0f:61:87:6c:07:d5:99:a1:ce:
         9d:20:7c:b7:e3:56:aa:c2:43:70:7e:41:0e:d5:1b:2b:77:61:
         2e:ae:ef:72:32:db:7b:1e:52:69:67:56:8b:02:bc:9d:67:97:
         9d:63:82:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----