Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
File:                     zFDm0Igy-da0ktsaCun0dMNadjo.mft (raw, json)
Hash identifier:          oBLjHu+pwL6KT3GfoeMU5DMJQugx3JtLHlScAwzAacA=
Subject key identifier:   D5:7F:A2:0C:BC:27:91:F9:3A:BD:ED:3C:A4:43:B8:5B:ED:C5:5D:EA
Authority key identifier: CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A
Certificate issuer:       /CN=F36EBB83AF/serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
Certificate serial:       FC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
Manifest number:          FB
Signing time:             Sun 20 Sep 2026 05:22:37 +0000
Manifest this update:     Sun 20 Sep 2026 05:22:37 +0000
Manifest next update:     Tue 22 Sep 2026 05:22:37 +0000
Files and hashes:         1: zFDm0Igy-da0ktsaCun0dMNadjo.crl (hash: 0fvZX4k22kSmBIgKP1wk+d2RnWraaTj4P3xFBeVstM4=)
                          2: 890714D6F13C11F0A8B5B8EEDAE4EC9C.roa (hash: jpMzBp+XA2OT7GpKVUf61L9TEAnmUra8ZP6BY3MSD60=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 05:22:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EBB83AF, serialNumber=CC50E6D08832F9D6B492DB1A0AE9F474C35A763A
        Validity
            Not Before: Sep 20 05:22:37 2026 GMT
            Not After : Sep 22 05:22:37 2026 GMT
        Subject: CN=6aaf6d9d-1715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:f0:0e:eb:3a:26:c3:66:52:02:b5:02:d5:
                    67:c2:0b:c2:84:e6:4a:a1:2d:cf:da:27:e8:74:cf:
                    75:e6:35:14:23:31:01:54:39:c4:19:6c:3a:bc:a0:
                    ed:ad:e8:47:53:c8:45:d8:13:35:da:b7:33:20:c4:
                    52:0a:26:53:4e:7f:d8:89:ef:b4:ba:89:4a:40:e2:
                    83:1f:ee:e7:90:63:56:bd:40:ab:68:d1:3e:36:ab:
                    a4:aa:66:46:42:50:b3:2b:dd:71:8f:54:ae:40:57:
                    fc:00:62:42:ab:ac:86:be:0d:c1:50:48:da:29:39:
                    f3:2d:92:06:7d:98:6d:04:9c:22:96:fc:83:36:7b:
                    92:18:50:e4:46:45:2d:1a:95:98:e9:4c:e0:66:cd:
                    6e:57:8c:30:78:b6:01:68:66:0a:3d:af:7e:d6:ed:
                    dc:c7:96:fc:a5:3d:9d:93:2e:c9:ed:38:13:3f:4d:
                    e7:9e:87:c4:09:c3:d3:be:e9:08:72:9f:4e:e7:d2:
                    5d:e0:e7:25:46:08:0e:92:13:c6:32:60:ea:cf:ea:
                    c3:3e:ed:43:5f:e3:80:09:7a:eb:da:a5:22:6e:4e:
                    fe:c2:70:c2:59:61:8c:68:a8:93:40:a3:b2:5c:03:
                    a3:f2:46:c4:57:67:d5:26:d1:17:7f:c9:c3:4b:32:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:7F:A2:0C:BC:27:91:F9:3A:BD:ED:3C:A4:43:B8:5B:ED:C5:5D:EA
            X509v3 Authority Key Identifier:
                keyid:CC:50:E6:D0:88:32:F9:D6:B4:92:DB:1A:0A:E9:F4:74:C3:5A:76:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zFDm0Igy-da0ktsaCun0dMNadjo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EBB83/1F3BA6F2F13C11F09C267DECDAE4EC9C/zFDm0Igy-da0ktsaCun0dMNadjo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:09:e8:da:49:1d:76:83:77:aa:c3:07:9f:5c:63:49:64:22:
         eb:40:70:55:da:84:4d:89:68:86:e7:80:06:a2:3c:3f:38:d7:
         31:d6:a6:65:8c:0d:de:c2:f5:39:a9:82:f2:cd:43:84:a7:e5:
         54:3b:aa:6f:88:41:77:af:63:11:4f:bf:c4:d0:ee:47:d7:c0:
         e4:26:57:8e:4f:74:94:4a:e6:59:6a:c3:21:0c:8f:bc:a2:94:
         dc:cd:16:d3:28:2d:d3:e4:5c:fa:a5:c6:97:3e:ec:65:47:90:
         c6:5d:53:34:80:c6:7b:ea:18:84:93:4c:3b:5e:f2:0c:73:67:
         0b:86:de:08:0c:b5:34:35:50:6f:72:bf:9d:ae:67:04:b3:c7:
         23:84:34:8a:4e:99:41:62:90:a2:6a:1b:2d:89:fe:65:d8:c6:
         2d:ea:3c:c8:2d:0b:3c:c4:39:16:ca:d7:54:3d:ce:ac:d1:88:
         6e:b0:9b:b2:02:5e:1c:3d:60:3a:b5:63:03:7f:2f:78:7e:86:
         3c:bb:77:78:02:ef:b9:47:e7:4c:89:3d:d8:04:f6:6a:3f:4a:
         cb:37:7f:74:a7:fd:b1:d0:c6:69:9a:bf:6b:b9:bb:f5:35:96:
         e6:d4:b2:f9:ac:bb:79:a0:a9:e0:e5:14:dd:14:2d:ab:f9:59:
         be:fc:31:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----