Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
File:                     hOOlVdJh3TLxBhVGYpV82qCdDQY.mft (raw, json)
Hash identifier:          ISU6agdjrD7xYf+JVkAsbEZidaqu+BSdczZzHJDcaeo=
Subject key identifier:   6D:D8:28:6A:E3:F8:D7:2D:96:D9:D6:AC:55:10:F7:BE:55:D3:E4:B3
Authority key identifier: 84:E3:A5:55:D2:61:DD:32:F1:06:15:46:62:95:7C:DA:A0:9D:0D:06
Certificate issuer:       /CN=F36E05BFAF/serialNumber=84E3A555D261DD32F106154662957CDAA09D0D06
Certificate serial:       8B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
Manifest number:          8B
Signing time:             Tue 22 Sep 2026 05:37:00 +0000
Manifest this update:     Tue 22 Sep 2026 05:36:59 +0000
Manifest next update:     Thu 24 Sep 2026 05:36:59 +0000
Files and hashes:         1: hOOlVdJh3TLxBhVGYpV82qCdDQY.crl (hash: cCEzYVNugYHEr3wcEEDeyVIEzhwit7TV8Zh+B0NpZpM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 139 (0x8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E05BFAF, serialNumber=84E3A555D261DD32F106154662957CDAA09D0D06
        Validity
            Not Before: Sep 22 05:36:59 2026 GMT
            Not After : Sep 24 05:36:59 2026 GMT
        Subject: CN=6ab213fc-112b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:72:cc:85:e9:17:3d:c5:ef:da:50:f9:5d:b4:
                    94:11:6e:4a:8a:e5:e0:1c:66:e1:68:ed:4f:cb:7b:
                    cb:1d:6d:f6:44:9c:4a:95:fe:ef:d6:18:3d:8a:54:
                    b5:34:14:86:a5:06:77:9b:67:0a:07:17:66:28:29:
                    05:97:71:dd:b7:04:d9:29:ce:97:c2:9a:0b:15:4c:
                    12:bc:63:ea:e9:f0:92:81:49:61:01:1e:fc:33:d1:
                    8d:48:db:b2:76:04:5f:a6:fc:69:d7:25:c3:ae:18:
                    cf:19:4d:8d:1d:97:03:bc:d3:bd:d8:04:5e:59:1f:
                    1c:d4:87:b2:e5:29:ab:c3:d5:29:a9:74:e4:9b:31:
                    3e:83:37:7e:2c:56:e3:51:ee:40:87:31:06:1f:a2:
                    98:b5:6e:45:6e:3b:9b:85:45:cf:d2:5a:50:2b:01:
                    9c:1a:10:74:1d:8c:ff:26:46:50:f3:45:21:ae:48:
                    3f:ab:00:60:0b:22:74:32:9a:48:e4:44:fc:e9:85:
                    95:08:97:f4:d0:ba:e1:6a:20:31:ac:34:b6:11:37:
                    02:dd:da:b5:bd:e4:e6:4f:a5:2b:4d:b4:7d:a0:19:
                    3b:93:3a:d5:6c:45:0a:cb:1c:b1:4b:50:8c:48:02:
                    59:e6:ef:ab:a7:fa:7f:f9:ca:bd:a5:da:3c:1a:51:
                    fb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D8:28:6A:E3:F8:D7:2D:96:D9:D6:AC:55:10:F7:BE:55:D3:E4:B3
            X509v3 Authority Key Identifier:
                keyid:84:E3:A5:55:D2:61:DD:32:F1:06:15:46:62:95:7C:DA:A0:9D:0D:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hOOlVdJh3TLxBhVGYpV82qCdDQY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E05BF/854CDB3A4BAC11F1A6284106CF1D38B0/hOOlVdJh3TLxBhVGYpV82qCdDQY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0c:ff:8b:60:64:10:08:94:5a:c7:08:93:cd:ea:85:de:2e:
         97:d3:72:52:4e:e1:fc:05:8f:68:c9:bf:10:ed:82:cd:1b:84:
         ed:d8:0e:90:0c:47:ff:ac:37:19:1f:22:aa:fe:b2:08:4b:7e:
         2a:16:56:ae:3a:72:61:8b:2b:06:1e:79:97:4a:b1:09:bc:f7:
         33:18:46:a1:74:da:0e:bd:04:79:56:fd:f6:4d:f9:5a:a4:c6:
         32:7f:48:4d:22:87:10:7b:ab:a3:3b:6d:1f:0a:5e:4c:b8:66:
         f8:7a:7d:42:a0:59:a0:eb:be:09:20:fb:df:5e:c2:ee:2b:61:
         50:b4:73:0e:37:64:02:d4:3e:b9:45:d6:4d:5f:28:d2:82:d1:
         05:fe:d5:8a:36:ae:99:67:fc:0d:96:a9:29:9b:c3:9f:95:fb:
         62:32:96:0f:c2:c8:2a:64:51:3d:06:48:9f:1d:f5:c7:bd:10:
         4c:5a:32:bf:4f:b6:df:43:5c:0e:0d:14:50:13:56:6b:66:34:
         49:ef:b5:d7:58:b7:d6:59:94:71:ed:26:05:c9:67:3f:b6:bb:
         6b:10:6c:c0:5d:53:33:7d:5c:f2:17:fc:55:bb:7d:24:9f:90:
         80:71:a6:cd:e6:0f:75:a5:a5:40:30:ed:85:09:17:07:3f:69:
         de:b1:d1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----