Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
File:                     b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft (raw, json)
Hash identifier:          GBMCOqs3IR0PFiF1el5xc3sQCOCU8ol2wTKJl2ZJ+gc=
Subject key identifier:   2A:6B:14:06:16:89:1E:90:CD:0A:09:85:8F:32:B1:AA:4D:7D:E9:64
Authority key identifier: 6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66
Certificate issuer:       /CN=F36E94D7AF/serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
Certificate serial:       0683
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
Manifest number:          067D
Signing time:             Sat 10 Oct 2026 02:43:10 +0000
Manifest this update:     Sat 10 Oct 2026 02:43:10 +0000
Manifest next update:     Mon 12 Oct 2026 02:43:10 +0000
Files and hashes:         1: b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl (hash: zzuWYAHwLIAbo2iLwVO/8VU71LRy0PtW4l6KOX2aUec=)
                          2: F532EE8E8D7511F1969D33A0CE1D38B0.roa (hash: SIxmlHckbhsXHCegpL/XNKa7J+R67ZPGCubikG2qARU=)
                          3: 5156704C8D7511F1B90CF51ACF1D38B0.roa (hash: 3A2ssmGFuuN+MJD7vHz6VAcC5JTqcWYRQfIkL36SqRI=)
                          4: A61F12AA8D7511F1B00E0A1BCF1D38B0.roa (hash: b9TCBFUNLfLaUSigVaYq828sCFL0o9xUvQVNYUUJxC8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1667 (0x683)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E94D7AF, serialNumber=6F80C0A1907680D97900DF451CD554D7FADBCC66
        Validity
            Not Before: Oct 10 02:43:10 2026 GMT
            Not After : Oct 12 02:43:10 2026 GMT
        Subject: CN=6ac9a63e-6ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:56:e8:56:b6:0a:1b:ea:bd:b4:2a:58:ce:2a:
                    bc:e0:ff:81:2b:c0:ec:aa:85:07:8b:51:70:25:fd:
                    c6:82:93:86:b4:7d:6c:2e:c4:bf:57:fc:65:76:b1:
                    91:43:82:db:3e:08:10:f9:c6:b7:cc:87:1f:38:4c:
                    13:a0:ec:06:f6:67:3e:0c:47:52:77:70:6f:52:6b:
                    c8:e5:1e:cc:f6:6c:fc:0f:8f:31:f8:3c:5c:ee:8a:
                    c5:cf:3d:12:de:3f:36:c4:64:03:3d:27:e3:7c:1b:
                    68:20:bc:f1:c9:b2:b9:66:21:e1:04:ff:0e:aa:15:
                    21:fd:12:34:a0:ba:ee:b0:94:b3:bd:ea:32:62:4e:
                    6b:46:fa:0e:28:4a:48:ab:75:d3:23:e5:60:08:b7:
                    57:79:ca:f8:26:83:19:ce:6b:69:94:f2:a0:31:b3:
                    28:71:ea:2b:51:0c:ff:55:de:c9:8f:5d:c1:d6:a8:
                    33:f6:2e:2a:55:a4:1b:1f:19:3b:32:37:95:fe:f2:
                    3d:24:c2:65:33:18:6b:2a:22:c8:6d:b0:41:6b:26:
                    8b:9d:b6:d3:e8:a1:28:3c:23:fe:f3:d1:00:c7:fc:
                    6c:ff:57:f2:34:c3:56:a8:4b:c5:ee:1c:b4:12:53:
                    75:f7:c8:6d:8d:e6:4c:b2:91:4e:3b:df:c0:65:c9:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:6B:14:06:16:89:1E:90:CD:0A:09:85:8F:32:B1:AA:4D:7D:E9:64
            X509v3 Authority Key Identifier:
                keyid:6F:80:C0:A1:90:76:80:D9:79:00:DF:45:1C:D5:54:D7:FA:DB:CC:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b4DAoZB2gNl5AN9FHNVU1_rbzGY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E94D7/42D42708D28511EC92ED97AFF1222468/b4DAoZB2gNl5AN9FHNVU1_rbzGY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:fe:a0:5d:e1:e4:06:94:f6:14:bf:f4:f9:ac:6b:ea:30:0f:
         f9:36:bb:eb:87:9d:ec:33:45:e4:74:ad:36:31:71:72:3f:13:
         ec:af:37:e1:9b:b6:4f:9e:bb:b5:3d:73:2d:a9:f4:3a:e3:1a:
         76:05:3d:d8:6b:e8:b3:26:75:e1:79:24:fb:bb:f6:68:16:32:
         28:da:4e:c0:b6:0d:a3:07:47:62:9f:12:a6:79:eb:ca:47:20:
         86:a5:bb:d4:e8:4a:05:b8:9d:80:f0:6f:65:20:b1:61:81:36:
         1e:22:2e:24:66:7d:f9:4f:db:45:31:de:f7:ab:0f:9b:44:f4:
         33:c1:59:ab:aa:c6:ef:26:ee:0e:16:65:ee:3b:62:fb:30:40:
         44:ca:67:dd:f2:35:3d:e7:44:07:72:f1:21:41:79:d1:65:64:
         c5:04:e3:e6:d4:e0:ca:c7:09:00:f1:f6:ca:5d:3a:cb:40:cd:
         33:86:f7:3c:18:24:55:2f:29:a3:b2:45:b6:ab:ae:e5:a2:e7:
         15:c0:ae:67:5d:66:6c:98:fc:18:22:74:cd:2a:8a:71:ca:10:
         8d:4e:47:c8:19:27:09:00:03:67:a4:9f:60:a0:ac:4b:39:90:
         33:37:da:d6:39:de:59:a3:2e:2a:ec:6f:2a:c1:d8:e0:73:40:
         1c:42:7b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----