Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
File:                     aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft (raw, json)
Hash identifier:          EsokYNSpvAMjQaye+85294veNjNBlc3M7nZrk5ZFv1o=
Subject key identifier:   29:CE:D2:AE:5B:F5:60:D6:06:4D:21:24:F1:B8:DA:3C:E5:09:2D:DC
Authority key identifier: 68:53:C4:E2:1B:5D:33:70:8B:0F:5E:AE:18:B7:89:FC:67:7C:81:08
Certificate issuer:       /CN=F36BB70AAF/serialNumber=6853C4E21B5D33708B0F5EAE18B789FC677C8108
Certificate serial:       60
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
Manifest number:          5A
Signing time:             Tue 22 Sep 2026 05:43:22 +0000
Manifest this update:     Tue 22 Sep 2026 05:43:22 +0000
Manifest next update:     Thu 24 Sep 2026 05:43:22 +0000
Files and hashes:         1: aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl (hash: BYw0/Si15QKqcqfPet3XP74Yv5N/SyUYhZgmsvU+1b0=)
                          2: B263604E7B9011F18B89CAB7CE1D38B0.roa (hash: agshf4kc1QeGwzwdxAbbchgJDxavR9643QWxtUo7IzQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BB70AAF, serialNumber=6853C4E21B5D33708B0F5EAE18B789FC677C8108
        Validity
            Not Before: Sep 22 05:43:22 2026 GMT
            Not After : Sep 24 05:43:22 2026 GMT
        Subject: CN=6ab2157a-314e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:18:56:d8:36:02:42:dc:e9:4d:dd:6e:1b:c5:
                    ec:20:2c:5c:3e:bb:39:c1:05:0c:55:29:aa:04:e9:
                    5b:d5:48:bc:58:83:7b:c9:7a:94:35:d5:03:23:ee:
                    43:4f:dc:3c:df:b3:ce:5d:cb:d8:c0:69:5c:a0:58:
                    36:8b:d3:c2:8c:b2:ef:b6:68:02:78:e3:fe:61:22:
                    f5:fe:18:79:1b:1c:dd:98:cd:dd:b3:9b:df:6e:43:
                    27:20:5d:da:ac:a1:35:8d:54:e6:fc:18:39:2a:d0:
                    d2:43:0b:82:8b:fc:40:b1:c5:2f:2b:fb:62:ca:31:
                    fe:2d:4f:aa:55:d4:d9:dc:55:86:e3:88:11:8f:96:
                    fc:b5:15:a6:79:84:ca:73:d2:67:6d:92:cb:79:2e:
                    3d:4e:36:45:a4:7e:73:86:f1:f4:91:52:ad:ad:65:
                    3e:b7:af:68:c5:03:c7:98:6a:69:bc:fc:fd:6c:0c:
                    9f:7b:eb:01:74:3a:fd:1b:02:1e:11:08:d3:68:ea:
                    66:65:fd:d4:df:2e:16:d9:dc:5e:3d:28:f2:32:54:
                    1e:4a:02:cf:b6:44:93:53:eb:07:91:8b:f4:14:c1:
                    54:75:76:ed:7b:48:04:cc:57:6a:da:c8:3d:a4:d5:
                    2d:09:ad:64:62:a8:c7:89:54:92:ff:27:fb:07:34:
                    9b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:CE:D2:AE:5B:F5:60:D6:06:4D:21:24:F1:B8:DA:3C:E5:09:2D:DC
            X509v3 Authority Key Identifier:
                keyid:68:53:C4:E2:1B:5D:33:70:8B:0F:5E:AE:18:B7:89:FC:67:7C:81:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:cc:e0:c4:5d:7b:0b:1b:d6:19:5f:f3:08:12:2b:ae:70:fe:
         d4:c7:65:1f:dc:86:2b:89:8c:97:d2:ca:79:70:f8:b6:6a:fa:
         4a:99:1b:bd:c0:1e:27:78:23:ad:49:cc:4e:47:21:99:58:45:
         3f:90:21:c1:54:54:a6:da:10:50:17:56:6b:c6:78:d1:12:26:
         a0:2f:47:db:31:64:fe:19:9c:b6:65:30:80:6d:e3:0d:6a:a5:
         1e:de:f3:15:a7:6b:4f:06:24:d9:a0:d3:6c:51:c5:4f:3c:89:
         3e:0a:95:ba:68:84:f1:a9:39:5a:7b:2a:c8:30:58:a8:2b:68:
         73:22:e1:79:e9:01:42:03:dd:44:9d:f7:94:0d:fe:2a:0e:d6:
         3f:30:6d:a8:40:ca:45:0f:dc:fe:7d:b1:ad:fb:d5:25:01:10:
         b4:7e:0a:3d:a3:5f:1c:64:ed:bf:77:35:aa:b1:67:7c:5c:53:
         50:b2:61:45:27:9a:c1:a2:da:df:81:c1:33:ab:08:72:d9:21:
         7c:e1:d6:7a:48:48:49:23:66:d6:9f:6e:b7:d9:63:fb:12:ee:
         a3:30:26:6a:b6:e7:d8:65:57:a6:b7:7a:56:86:5a:e0:ae:aa:
         e3:b7:42:be:9d:42:53:70:3c:c5:0b:51:4a:20:68:ba:09:fc:
         53:ee:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----