Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
File:                     KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft (raw, json)
Hash identifier:          cKmVL32d9FuJeIWcr35CJcTfN8Pph52t3h5zbAMnk3A=
Subject key identifier:   34:6B:84:02:25:22:A6:90:5F:E6:1C:3C:1A:9B:AF:E9:9B:39:B2:45
Authority key identifier: 2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A
Certificate issuer:       /CN=F36E29EDAF/serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
Certificate serial:       0683
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
Manifest number:          067A
Signing time:             Tue 13 Oct 2026 02:44:55 +0000
Manifest this update:     Tue 13 Oct 2026 02:44:54 +0000
Manifest next update:     Thu 15 Oct 2026 02:44:54 +0000
Files and hashes:         1: KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl (hash: eBg/Rr6DnqD/o5J6Ue2H01VqvpqjACAdqzqFVT4IoO0=)
                          2: 073BD64605C911EE95E74F304AD9E6FC.roa (hash: In9Q3d/Y0USLa0Qt9FonWtXn6zDCpfpzJ3Ey6VoUa4c=)
                          3: 9A828E6C873B11F1B4DF4612CF1D38B0.roa (hash: SJmKynizrKbgn8FXg01sBl/VLgxAY5x4y0EbkwRQIh4=)
                          4: A9F0CED005CB11EEAE1D25384AD9E6FC.roa (hash: zxEwyc9gplQBJFrp7SAoD+b4/1ve107UCm4IoIpj8I0=)
                          5: BF8426E405CA11EE92157D354AD9E6FC.roa (hash: A+WykTSmvAsx1MAKq+Pb3eSJ+oLcJkndPTp4NaD0n4Y=)
                          6: 3DA37FA805CA11EE97650D344AD9E6FC.roa (hash: qnjPAnaVGfXdRft23JxV+6Cp0V+QdoJKnDCoKaZOhOc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 02:44:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E29EDAF, serialNumber=2A3CC9E5519A5A5BB13D08310CA934824896FA5A
        Validity
            Not Before: Oct 13 02:44:54 2026 GMT
            Not After : Oct 15 02:44:54 2026 GMT
        Subject: CN=6acd9b27-1a3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:b7:78:6c:d0:37:34:b8:7b:e6:72:a4:28:
                    66:32:28:de:38:04:f1:f1:64:54:35:0c:16:4a:61:
                    ca:51:fd:5b:31:60:09:6b:84:de:da:e2:20:a3:d8:
                    81:8d:aa:b2:4c:dd:eb:bb:1d:7e:8a:92:6f:62:15:
                    74:c9:cb:28:08:f9:d1:a3:f8:25:ea:84:0b:fa:62:
                    df:3f:6a:a5:be:53:ef:63:20:b4:29:d1:68:20:c1:
                    32:85:e8:e3:c6:4a:38:a2:53:96:02:9e:ce:c7:3b:
                    8d:41:04:f5:19:33:db:e9:70:72:23:f5:ea:c2:dd:
                    27:4e:bf:38:b5:c3:af:4d:67:73:de:2c:1f:e1:91:
                    6e:e1:75:68:4b:f1:72:6b:fb:ae:97:27:96:55:5d:
                    2d:c4:ba:b9:0e:aa:2d:0a:2c:a4:5a:4c:d2:99:88:
                    c4:a3:04:32:0a:45:2d:2a:aa:b0:30:6b:79:76:8f:
                    2f:9d:36:8f:6c:48:82:b0:c9:a6:16:58:59:85:c8:
                    21:17:92:ae:6e:74:2d:6c:61:fe:61:af:da:63:16:
                    51:b5:44:95:c1:cd:ea:18:00:59:be:66:9c:be:1c:
                    ca:7f:5b:1f:8e:1d:e0:5c:5f:b0:a2:62:41:e4:a3:
                    a3:d7:ec:f1:23:fe:f6:e5:2e:50:6f:6a:c5:b1:af:
                    29:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:6B:84:02:25:22:A6:90:5F:E6:1C:3C:1A:9B:AF:E9:9B:39:B2:45
            X509v3 Authority Key Identifier:
                keyid:2A:3C:C9:E5:51:9A:5A:5B:B1:3D:08:31:0C:A9:34:82:48:96:FA:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KjzJ5VGaWluxPQgxDKk0gkiW-lo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E29ED/1C5B5D02DC0911EC9CEBDE9BF1222468/KjzJ5VGaWluxPQgxDKk0gkiW-lo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:08:b7:9d:f4:90:ba:85:d7:eb:23:a5:90:77:39:8c:63:ad:
         9b:34:6f:49:3f:bd:eb:4b:05:16:19:09:0e:be:b7:ed:2b:98:
         98:73:f0:d3:87:96:b6:46:a7:cf:08:33:37:6f:e9:29:20:1d:
         ee:9e:f4:88:b4:67:9d:ca:28:98:b4:68:a7:af:fa:ef:21:57:
         ce:8a:33:f9:43:f2:85:24:55:7e:60:c8:ba:10:97:72:68:3f:
         dd:d4:29:fb:46:fb:6e:8c:ea:d3:14:41:dc:44:8a:f3:88:f6:
         4c:79:ee:42:64:88:8b:fe:e6:9d:b9:a0:2d:1a:6c:a4:5f:02:
         2c:f2:28:ee:1b:97:ae:1e:33:81:dd:8b:eb:a4:ee:74:a6:3f:
         01:48:9a:41:91:57:4b:f7:b7:87:0b:04:69:ee:f6:2c:f0:04:
         e5:99:6c:11:43:b3:98:f8:dd:96:1e:62:43:ce:e8:05:74:f8:
         ee:23:da:21:e1:a1:b9:38:65:00:0e:33:55:67:06:55:07:e9:
         01:67:bb:1a:39:80:d2:45:b1:a4:64:c2:cd:c6:a4:47:06:d7:
         d9:fc:d7:fb:9d:b5:1b:19:0d:38:98:9a:72:ff:47:7d:d1:5c:
         74:a8:c1:fe:c5:02:ab:47:cb:ff:dc:20:de:5d:cc:15:99:15:
         5c:cb:9f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----