Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.mft
File:                     T3XDDaGtpMwafonY6RTQz1wvWgs.mft (raw, json)
Hash identifier:          L+R+/8CxUjoodTuxienyQq3LG70+r/YqxYn2rx43Lc4=
Subject key identifier:   67:97:64:AE:AF:61:F4:8D:B7:C0:70:D6:99:E1:99:DF:47:82:BF:2F
Authority key identifier: 4F:75:C3:0D:A1:AD:A4:CC:1A:7E:89:D8:E9:14:D0:CF:5C:2F:5A:0B
Certificate issuer:       /CN=F36EE209AF/serialNumber=4F75C30DA1ADA4CC1A7E89D8E914D0CF5C2F5A0B
Certificate serial:       5E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/T3XDDaGtpMwafonY6RTQz1wvWgs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.mft
Manifest number:          5D
Signing time:             Mon 21 Sep 2026 05:41:04 +0000
Manifest this update:     Mon 21 Sep 2026 05:41:04 +0000
Manifest next update:     Wed 23 Sep 2026 05:41:04 +0000
Files and hashes:         1: T3XDDaGtpMwafonY6RTQz1wvWgs.crl (hash: AIi6KIpmz5I20KF1wn/89t46KkCtM5aiDJ3NQgDs0QM=)
                          2: 8E5119466E2311F189622DE3CE1D38B0.roa (hash: XhsWhAAmmhdpiJK+WNp0zODpLcbXPq81CKKIzHRL6g0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/T3XDDaGtpMwafonY6RTQz1wvWgs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 05:41:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EE209AF, serialNumber=4F75C30DA1ADA4CC1A7E89D8E914D0CF5C2F5A0B
        Validity
            Not Before: Sep 21 05:41:04 2026 GMT
            Not After : Sep 23 05:41:04 2026 GMT
        Subject: CN=6ab0c370-c9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:94:54:4b:53:1f:3d:ad:a7:16:1f:0b:88:de:
                    08:2e:83:d4:25:ba:d8:03:c9:11:63:2c:0f:99:0c:
                    46:81:42:81:22:50:c0:71:6b:d4:20:45:70:79:8f:
                    73:b2:ab:53:c1:ae:a4:c6:84:c1:0a:de:0c:6e:23:
                    94:21:2f:55:9f:76:d5:a2:15:48:04:9a:bb:88:40:
                    0f:61:74:c7:a6:33:b2:c7:fe:84:3f:e4:00:92:1e:
                    7c:dd:08:06:ec:be:15:80:0f:c1:ba:b5:8a:8d:6b:
                    cb:21:85:1a:0b:63:5d:e3:ba:a5:43:b4:d2:0b:be:
                    2f:eb:48:1d:31:76:01:47:7b:97:2d:8c:3c:4f:86:
                    f2:ad:a8:57:78:93:13:e5:24:36:27:02:1a:b9:60:
                    d7:71:99:a3:3a:da:b4:fc:7b:7f:92:da:19:29:56:
                    7f:b3:5a:b2:45:8b:0a:50:02:45:0e:47:4d:ef:a8:
                    3a:4d:4a:5b:20:cb:73:cc:52:ff:1a:d9:4c:21:33:
                    0b:64:18:c6:80:76:88:18:5b:0f:55:2d:83:64:02:
                    2a:d1:5b:91:98:91:d1:ba:40:36:4d:83:14:da:a6:
                    7d:a0:05:d7:da:71:f5:9b:8a:ba:50:b9:76:0c:44:
                    d5:90:d7:e0:f6:be:cd:d6:a2:6b:bc:4e:14:02:9f:
                    19:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:97:64:AE:AF:61:F4:8D:B7:C0:70:D6:99:E1:99:DF:47:82:BF:2F
            X509v3 Authority Key Identifier:
                keyid:4F:75:C3:0D:A1:AD:A4:CC:1A:7E:89:D8:E9:14:D0:CF:5C:2F:5A:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/T3XDDaGtpMwafonY6RTQz1wvWgs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EE209/201345B86E2211F1A78606DBCE1D38B0/T3XDDaGtpMwafonY6RTQz1wvWgs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:be:38:ce:97:cb:0e:3d:e5:dd:f2:00:6a:19:3a:e8:77:13:
         d0:f8:98:66:b7:6d:d6:25:84:b4:49:37:6c:24:cb:46:a5:cb:
         77:e4:42:e6:51:55:c2:4e:44:e2:44:c2:3b:13:47:ec:a2:d3:
         31:13:b7:39:ef:74:b4:f0:72:fa:35:95:91:c9:ee:b8:6c:35:
         28:db:66:64:c4:26:02:b4:ac:0d:30:4a:b1:79:d6:cf:dd:23:
         0e:ca:65:31:22:ce:b1:da:1c:d8:f4:34:ef:62:98:41:d5:d6:
         07:54:af:28:e3:37:51:26:f8:fa:7a:71:55:e2:1b:9b:17:f2:
         5a:67:1e:5f:27:45:70:fc:2c:b5:a4:21:bb:b3:bb:65:4e:c1:
         7f:e4:c3:d8:da:fe:65:70:08:04:1f:8b:e0:4d:86:c7:d3:a4:
         7f:78:88:60:e2:a8:31:47:15:89:4e:79:82:23:16:f3:c3:cc:
         3e:0e:f5:58:38:cf:94:02:ea:42:2a:6f:b3:5d:9e:6e:d0:64:
         3c:8e:75:ab:68:e6:43:b9:1a:35:cb:05:af:8b:de:33:6b:03:
         73:5e:29:49:48:a5:92:dd:7d:be:c7:b3:c5:b6:b6:e2:98:41:
         86:59:fe:25:d7:8e:d3:79:bd:30:ec:5c:52:84:49:54:7c:9f:
         8a:a0:d5:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----