Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
File:                     qv9F7YLc9bhYA4mULVnp0p9bwuE.mft (raw, json)
Hash identifier:          1znmHJxM5jhy79xRi1XRekW0EtOUHviykQs44LBnopM=
Subject key identifier:   9C:C9:5D:B3:1D:E0:21:45:12:97:90:06:41:7C:6B:7C:EF:45:8B:BA
Authority key identifier: AA:FF:45:ED:82:DC:F5:B8:58:03:89:94:2D:59:E9:D2:9F:5B:C2:E1
Certificate issuer:       /CN=F36E0972AF/serialNumber=AAFF45ED82DCF5B8580389942D59E9D29F5BC2E1
Certificate serial:       0425
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qv9F7YLc9bhYA4mULVnp0p9bwuE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
Manifest number:          0424
Signing time:             Sat 26 Sep 2026 03:50:51 +0000
Manifest this update:     Sat 26 Sep 2026 03:50:50 +0000
Manifest next update:     Mon 28 Sep 2026 03:50:50 +0000
Files and hashes:         1: qv9F7YLc9bhYA4mULVnp0p9bwuE.crl (hash: qWI1HY4fYwZW3tAaYnstVyQgIgc2O0gBlSKbDWOjV38=)
                          2: 17B6FBFE87C911EEBD3EF6264AD9E6FC.roa (hash: 5ZD1WUDmaiv05T51fwwZBTVbvUWprAEi25d+4iZwaOA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qv9F7YLc9bhYA4mULVnp0p9bwuE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0972AF, serialNumber=AAFF45ED82DCF5B8580389942D59E9D29F5BC2E1
        Validity
            Not Before: Sep 26 03:50:50 2026 GMT
            Not After : Sep 28 03:50:50 2026 GMT
        Subject: CN=6ab7411b-41ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:de:f4:94:cd:28:0b:fc:d7:90:b7:67:2a:
                    e9:94:ad:ee:08:cc:b7:c8:4b:78:8d:c0:20:dd:18:
                    dd:b1:79:f9:f6:2e:5f:bc:99:3c:78:8f:21:ca:bc:
                    91:e9:b7:66:c8:d2:43:83:49:d4:f0:13:3b:6c:91:
                    45:1a:ba:41:3b:d5:46:d4:9d:75:cf:eb:71:96:0b:
                    23:47:f0:f9:64:91:99:f7:d5:0d:e5:06:27:a2:ee:
                    1b:ce:ce:ce:4b:e9:e2:1b:41:f0:4d:98:1c:83:31:
                    c7:b8:d7:b4:76:e4:bc:c7:a9:25:d8:d8:52:f5:1e:
                    86:ba:dd:65:42:0e:26:41:9b:6d:97:36:83:84:c6:
                    ce:76:a5:c1:aa:aa:0b:88:01:8d:65:b8:8e:df:7b:
                    c6:2a:a1:2d:57:1c:b5:d8:ba:f4:c9:7a:88:ca:ff:
                    0e:97:8c:6e:6c:d3:39:75:d5:82:13:10:85:5c:e9:
                    94:38:9e:56:52:ee:cb:03:56:97:3b:ac:94:f8:40:
                    43:26:7c:ee:8e:12:41:a1:5f:f1:d5:83:5f:cf:58:
                    f5:af:b4:d4:90:d1:92:9b:5b:fb:b4:4b:2d:cf:8f:
                    16:8f:b4:f1:b9:f3:f7:e1:d5:fd:51:08:4b:5d:17:
                    86:7d:e2:e3:89:f5:1e:85:9b:0a:91:75:4a:be:42:
                    3b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C9:5D:B3:1D:E0:21:45:12:97:90:06:41:7C:6B:7C:EF:45:8B:BA
            X509v3 Authority Key Identifier:
                keyid:AA:FF:45:ED:82:DC:F5:B8:58:03:89:94:2D:59:E9:D2:9F:5B:C2:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qv9F7YLc9bhYA4mULVnp0p9bwuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0972/C9BF12CE87C811EE816035264AD9E6FC/qv9F7YLc9bhYA4mULVnp0p9bwuE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:81:d7:c0:1a:6e:85:5b:b8:0e:9e:63:c5:e4:e0:4a:1c:0a:
         34:51:10:9e:e1:c0:a7:d4:88:59:be:4b:af:8f:cd:d7:bd:ee:
         66:28:65:73:15:54:1f:61:52:25:8a:6f:29:33:6b:82:f0:39:
         98:51:f6:bc:7c:f4:db:bc:48:07:30:38:e9:a5:e9:73:72:82:
         b6:29:1f:46:d2:1d:9b:2a:48:24:86:f7:22:91:a3:3b:fe:63:
         31:81:62:95:37:4f:88:5d:d4:1a:f2:d6:16:0b:f3:45:9f:19:
         38:2f:4f:1c:f0:3e:46:dd:bd:88:9b:23:01:a1:66:44:c3:28:
         b1:2f:2f:a7:03:e3:3a:d6:e2:63:e6:57:68:b7:05:ec:59:fa:
         5d:0b:d4:60:b0:af:d8:e5:c9:d4:ac:b2:9d:b4:47:98:75:70:
         89:55:7b:76:9a:05:c8:c5:3e:e8:cb:a0:6e:1b:e7:f7:8d:5d:
         e8:bc:f8:e2:df:70:a9:22:ab:28:dd:c4:cd:2b:85:32:29:80:
         d6:18:4e:74:35:cf:2a:94:8c:cf:0f:19:1d:df:2f:f8:67:14:
         67:65:ad:69:3d:df:db:80:5c:16:f7:54:93:98:30:15:26:87:
         75:88:7e:7e:d7:cc:f7:c1:f2:a3:41:4a:51:13:1a:35:c4:60:
         00:f4:d3:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----