Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
File:                     Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft (raw, json)
Hash identifier:          JNu8AnY9dLBkDPKzSkVE+Ce1IeJ+6kbl5VqPkw+w3dE=
Subject key identifier:   0A:75:1D:E2:C7:04:50:72:40:2A:C1:FB:71:D4:6B:10:57:1A:6D:0B
Authority key identifier: 67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52
Certificate issuer:       /CN=F36AA788AF/serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
Certificate serial:       05F1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
Manifest number:          05EF
Signing time:             Thu 24 Sep 2026 02:58:21 +0000
Manifest this update:     Thu 24 Sep 2026 02:58:21 +0000
Manifest next update:     Sat 26 Sep 2026 02:58:21 +0000
Files and hashes:         1: Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl (hash: uxxI9SgIZNa4/fMswyI20xtVjqL3Rzmgoi/2zUa7Dvk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1521 (0x5f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA788AF, serialNumber=67C82EB3A2B1DAB73991FA23A128A251752F3352
        Validity
            Not Before: Sep 24 02:58:21 2026 GMT
            Not After : Sep 26 02:58:21 2026 GMT
        Subject: CN=6ab491cd-1e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:dd:a5:b7:f5:b5:d8:b8:a3:b6:dd:8d:ba:
                    ca:7c:5b:7d:1c:53:f6:d1:f3:e3:ec:00:17:b9:0d:
                    ad:f6:f6:ed:be:95:02:90:dd:66:a2:d0:33:62:ac:
                    e6:35:f6:4b:aa:0b:eb:72:91:75:de:81:5c:0a:76:
                    cd:22:6d:8d:f1:a3:8c:c5:af:b8:ae:72:9a:78:74:
                    59:c5:c3:28:8c:bb:76:b5:36:43:87:41:5e:2d:93:
                    5e:62:40:32:ba:73:ee:71:50:01:be:b2:08:b2:5b:
                    97:56:b9:bc:69:92:c2:6b:1c:f6:e4:3e:98:bb:bf:
                    c7:0c:16:8c:d1:71:4c:8a:9d:db:81:24:b4:14:44:
                    0d:aa:0a:44:2e:d5:35:d8:0a:9c:d3:cc:67:67:84:
                    d9:6f:8c:eb:ac:3b:00:61:98:73:70:83:31:65:51:
                    88:48:29:af:dc:c9:02:7b:31:55:8d:b6:c4:a5:fc:
                    53:ce:d4:71:79:b3:9c:3c:ad:bf:f7:64:1e:2a:97:
                    69:23:8b:43:a1:20:55:c5:10:7c:c2:f3:81:27:44:
                    38:2c:e9:52:b5:98:6d:48:35:e6:09:20:19:95:b7:
                    5b:7f:7c:90:5c:b2:d5:f5:69:5e:ca:83:7d:17:fb:
                    04:ca:b4:7f:b1:fe:6e:03:e2:0c:4b:22:1f:3d:43:
                    ef:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:75:1D:E2:C7:04:50:72:40:2A:C1:FB:71:D4:6B:10:57:1A:6D:0B
            X509v3 Authority Key Identifier:
                keyid:67:C8:2E:B3:A2:B1:DA:B7:39:91:FA:23:A1:28:A2:51:75:2F:33:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Z8gus6Kx2rc5kfojoSiiUXUvM1I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA788/ACDA0636301D11ED92C97595F1222468/Z8gus6Kx2rc5kfojoSiiUXUvM1I.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:3a:3d:2e:52:5b:27:cd:56:a3:d6:94:d5:f8:da:bf:ff:16:
         95:62:8d:87:b5:65:8b:68:6b:96:6f:89:7e:6c:35:8c:d6:59:
         dc:1b:4d:24:3b:a6:76:a4:01:25:a1:fd:cd:4a:fd:a8:ad:f3:
         ae:38:84:74:7d:5e:10:be:50:70:99:36:09:96:05:9d:03:3f:
         8e:07:8c:bf:b3:f7:ad:26:68:37:f6:18:6f:ab:56:5a:68:e3:
         1c:6b:84:33:7a:a1:5e:6d:5c:80:81:ef:00:ab:50:f7:70:ce:
         36:af:1a:d0:03:cc:5b:f4:85:2b:fb:07:5c:85:c6:15:90:30:
         cb:30:3d:c0:69:25:cf:dc:82:99:ab:5f:3d:3c:5e:98:4b:b7:
         ea:65:a1:08:5d:8c:93:39:30:8b:98:0d:9d:bc:64:c9:79:ee:
         0b:3a:ad:5b:3f:ef:b0:cc:c6:5e:b7:20:a7:f8:45:93:5b:56:
         83:82:16:ab:eb:21:40:e4:22:82:89:40:44:7a:ff:df:e1:40:
         89:96:b5:4e:89:7b:79:39:a5:e8:28:ea:09:4b:60:7e:6b:e8:
         fa:2a:40:86:96:3a:e4:6d:3d:4a:f9:1c:d5:20:7c:f9:cb:d6:
         cc:25:56:92:b5:ca:1b:75:b0:9f:8b:bf:a8:5d:19:4b:3e:53:
         3b:e3:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----