Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
File:                     Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft (raw, json)
Hash identifier:          VtUYhBqWT/nKeuMeiOpJdNmAVWgN7k/oVfAvDOhYOvQ=
Subject key identifier:   3D:41:E1:5E:DF:5F:3A:02:47:7F:6B:7C:FD:DD:CB:2D:AE:E2:1D:5D
Authority key identifier: 35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53
Certificate issuer:       /CN=F36D3930AF/serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
Certificate serial:       06B9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
Manifest number:          06B0
Signing time:             Wed 23 Sep 2026 02:39:23 +0000
Manifest this update:     Wed 23 Sep 2026 02:39:22 +0000
Manifest next update:     Fri 25 Sep 2026 02:39:22 +0000
Files and hashes:         1: Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl (hash: A6G90M3LoWKhnyxOvwQWMaUpn2o3qVsm4j3+cVg8Da8=)
                          2: B483DD5260AD11F186FE20D2CE1D38B0.roa (hash: N08HMzaJrPQG98yF1dW42tjXRI8KTIgg1jSIS0yuaAc=)
                          3: 139A49B660AE11F1B99DE7D5CE1D38B0.roa (hash: rarFIEocrc0sUeZ7yyVNoX9GlR16ogXiHgAmgUr4kRc=)
                          4: 50EB151660AE11F1946459D6CE1D38B0.roa (hash: 3jYVZX446QMMMo1B09+QFtsPNpHJUqVfEGEWSu2C7qM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 02:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1721 (0x6b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D3930AF, serialNumber=35CF067DC26EE4895F4B16AD9BD300FEABC3A353
        Validity
            Not Before: Sep 23 02:39:22 2026 GMT
            Not After : Sep 25 02:39:22 2026 GMT
        Subject: CN=6ab33bdb-922d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b9:da:b6:2e:f8:f2:38:de:18:e9:9b:37:11:
                    c0:b4:e5:95:e2:7a:a6:86:73:8a:5e:4c:db:75:d0:
                    f7:2e:6e:2f:cb:eb:74:c2:12:8b:9b:8c:cc:8b:69:
                    8b:d5:7f:da:44:f4:1c:fe:06:10:19:27:37:ce:6a:
                    61:ed:c8:05:6d:c2:e9:58:52:5c:86:d4:7f:26:a4:
                    25:05:b1:38:86:bf:3c:1b:b7:4e:34:14:98:f7:0c:
                    4a:d5:3e:b6:d0:b0:bb:29:d1:91:ab:c9:4b:f7:26:
                    cf:0c:84:a0:58:be:95:40:61:8f:dd:cc:92:28:e3:
                    3e:6b:10:57:f8:0b:69:75:05:c9:62:7c:cb:96:bf:
                    d1:df:05:9e:24:ac:0f:84:6c:82:a0:6e:b2:4d:8e:
                    77:71:bb:2b:ba:67:2d:13:51:30:f8:d1:71:13:a8:
                    92:01:e4:2a:db:59:96:12:c1:c7:a4:4a:5d:6d:b0:
                    2d:11:b3:e2:3a:d8:4c:5b:eb:73:cc:4b:6f:71:37:
                    40:de:de:b2:57:da:01:be:87:f4:1d:18:a5:c0:27:
                    95:d3:81:ba:3e:a1:9d:09:ab:b0:03:8d:ed:b1:c0:
                    0b:0c:71:bd:fe:12:ce:cc:47:a3:c7:ac:0b:93:28:
                    c5:da:a3:11:cc:a1:1f:3e:79:48:01:d5:0f:05:5b:
                    bf:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:41:E1:5E:DF:5F:3A:02:47:7F:6B:7C:FD:DD:CB:2D:AE:E2:1D:5D
            X509v3 Authority Key Identifier:
                keyid:35:CF:06:7D:C2:6E:E4:89:5F:4B:16:AD:9B:D3:00:FE:AB:C3:A3:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Nc8GfcJu5IlfSxatm9MA_qvDo1M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D3930/63C46EC8A0F311EC946EDA945A40D577/Nc8GfcJu5IlfSxatm9MA_qvDo1M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3f:e6:e6:da:a2:68:9c:22:0b:19:95:ea:38:cb:66:9e:80:
         7c:aa:1e:33:8e:51:b8:94:10:a6:fb:0e:65:28:40:a7:48:63:
         d5:00:31:b6:8f:a5:5b:70:7c:1c:f7:57:b5:96:e3:44:19:6d:
         cf:49:28:4a:cc:89:a8:a3:0c:e8:67:4c:72:2e:86:64:05:ec:
         6f:30:4f:be:17:26:7f:d5:1d:f1:d6:1f:70:b0:df:8d:33:62:
         3c:25:bb:bf:42:2e:55:a7:a6:1f:13:97:38:d7:50:2f:8f:09:
         01:8e:6c:3e:2d:a6:4a:fa:a7:9f:7e:3a:af:83:17:d8:6e:55:
         d4:be:88:0f:d8:d8:0d:bd:3f:41:e5:ea:27:89:33:8a:94:60:
         59:c6:92:3f:ff:34:d3:b7:a8:51:df:07:d6:75:5f:10:9b:10:
         35:07:4e:e5:76:6f:76:6e:8a:e3:f5:19:20:c0:31:9f:cd:43:
         02:db:6e:04:f6:9e:a8:b7:13:aa:f1:22:b5:b9:68:a2:66:df:
         2c:08:3f:c4:3c:7e:ce:3e:87:e2:80:55:ef:17:1a:c1:bf:e0:
         8a:49:ba:4a:2d:b4:85:cb:75:96:4c:ad:92:60:34:a3:9e:d1:
         bf:6d:70:e0:cc:3e:06:e9:30:19:96:41:a0:74:17:15:6a:67:
         4e:5b:e0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----