Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          XmIPMJd3jYm5FMigXYlmQt82niToS4Ofgx4CMUeT4fI=
Subject key identifier:   E0:B2:92:4E:46:74:23:75:9D:C7:1B:5A:34:A7:F1:2D:19:A7:81:D5
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       056D
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          056B
Signing time:             Sat 26 Sep 2026 03:11:12 +0000
Manifest this update:     Sat 26 Sep 2026 03:11:11 +0000
Manifest next update:     Mon 28 Sep 2026 03:11:11 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: 0QlUebJRd/1ggjYt6yHEqu1fZEE2E0GY/bTyk4uHAAw=)
                          2: 05934784930B11F19AA2B6FBCE1D38B0.roa (hash: nb6/XJ6e4mY9S+Wo7/PcMs8AFDHTkQOgBHpBhQIhJuU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1389 (0x56d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: Sep 26 03:11:11 2026 GMT
            Not After : Sep 28 03:11:11 2026 GMT
        Subject: CN=6ab737d0-2861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:c2:5f:7c:44:43:f6:bb:df:e4:d2:5a:0a:8b:
                    11:a5:19:34:30:35:fd:21:03:ee:7e:a4:51:df:a4:
                    b5:c4:20:39:19:2f:0d:b2:5f:db:9a:f5:9a:2c:af:
                    96:ec:b8:0e:20:c8:45:f3:25:df:52:39:58:9e:7e:
                    6b:bc:53:6a:09:31:61:5b:aa:73:ff:4c:e1:0e:80:
                    8a:ee:e2:3c:84:c5:0a:d7:ab:45:70:4c:4b:f2:22:
                    72:f9:ce:96:3a:ce:56:0c:71:be:9a:89:f3:69:e2:
                    fc:f8:ac:e0:f3:d3:13:1f:21:bf:6a:d5:7b:f4:93:
                    fd:c5:40:af:5a:45:d5:f1:cb:cf:a5:e8:38:5c:61:
                    af:30:9d:8b:8d:25:2f:80:04:44:e5:f1:c2:14:30:
                    f5:61:ad:5a:7c:8c:9b:10:a3:5a:c7:6a:19:7f:ff:
                    19:34:01:cf:eb:eb:d4:82:4c:4d:d1:fd:21:cf:67:
                    c7:4a:38:9a:84:43:b4:54:9b:f3:a2:83:bd:43:9c:
                    fe:07:b8:ce:ec:af:48:1e:63:49:e1:17:6d:d3:9e:
                    05:fb:25:b4:53:da:02:9a:b2:3c:b4:ab:9a:ae:ec:
                    d0:c9:c7:38:d2:98:5c:94:9c:46:8b:33:3b:94:51:
                    f9:b6:95:20:56:a6:32:46:f6:07:34:df:f5:b8:04:
                    31:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B2:92:4E:46:74:23:75:9D:C7:1B:5A:34:A7:F1:2D:19:A7:81:D5
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f5:4f:95:2c:74:7b:26:96:32:40:60:97:66:10:dc:b1:d2:
         df:d6:f3:de:e4:47:8b:c9:e9:01:21:1a:ec:ed:c6:c8:d9:42:
         73:68:d7:fd:80:ba:1f:03:96:83:dc:42:dd:25:f7:d5:39:bd:
         90:7d:48:2c:f8:84:e7:b4:89:83:ee:55:80:eb:6d:de:f5:c7:
         d5:a2:d3:88:19:a0:8c:4d:78:b7:ac:ff:f9:69:13:23:20:cf:
         b9:5d:45:f8:db:0b:83:be:71:36:41:87:29:c6:a2:40:ed:9b:
         59:39:47:ae:55:aa:ea:ae:35:05:14:81:91:72:bb:0a:10:1a:
         e2:b2:87:02:e2:55:72:24:a4:5c:db:c9:ed:7b:01:c8:74:1e:
         8e:54:bb:49:19:6d:e8:fb:f9:1e:35:28:88:cd:f2:cc:c4:0e:
         14:a5:cd:ba:53:1c:24:b4:a0:58:22:d1:cf:ed:f1:de:44:da:
         2f:6f:7a:a1:73:d9:3f:4b:19:91:a5:10:2a:0b:1b:fd:19:be:
         7b:51:6c:e7:95:4f:e4:e0:1a:5c:a9:a3:19:5c:f8:54:3d:66:
         45:54:f6:97:07:d2:10:c9:f5:8e:07:5b:48:fe:2f:68:e3:2e:
         cc:11:ae:62:ff:1b:1a:d7:6c:39:4e:5e:42:01:dd:2c:ba:7e:
         9a:68:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----