Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
File:                     LJfYJaoVfLyDVnkqObq3O2s8epE.mft (raw, json)
Hash identifier:          oheO8LhjVaEByYNMRF+MqmRQgi3IiWEp405LPtG88DI=
Subject key identifier:   F1:FF:F5:45:91:77:EF:60:3D:A6:CB:09:56:D7:96:2D:8D:FD:A9:35
Authority key identifier: 2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91
Certificate issuer:       /CN=F3614F54AF/serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
Certificate serial:       07CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
Manifest number:          07CF
Signing time:             Sat 14 Nov 2026 02:14:43 +0000
Manifest this update:     Sat 14 Nov 2026 02:14:42 +0000
Manifest next update:     Mon 16 Nov 2026 02:14:42 +0000
Files and hashes:         1: LJfYJaoVfLyDVnkqObq3O2s8epE.crl (hash: Xh9gp3FjHyqoEg5IEgvzcr0eaCRQ9W1YPKI8X4GQIYI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999 (0x7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3614F54AF, serialNumber=2C97D825AA157CBC8356792A39BAB73B6B3C7A91
        Validity
            Not Before: Nov 14 02:14:42 2026 GMT
            Not After : Nov 16 02:14:42 2026 GMT
        Subject: CN=6af7c412-ed54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5f:11:7b:06:d9:bd:4e:39:26:3f:e7:ea:b4:
                    ef:3d:ab:d6:1a:d4:c2:08:33:bc:2c:e9:6a:03:46:
                    72:26:1a:ec:7e:17:24:fd:67:9f:d1:78:42:ea:23:
                    41:f3:99:b9:03:f3:ea:ae:59:44:37:bb:0e:f0:38:
                    a9:83:19:a7:f1:e9:13:00:dc:b0:f6:79:99:bf:7a:
                    de:62:8c:23:39:97:c0:6a:b8:56:4e:6c:cb:63:fe:
                    fc:bb:08:91:d7:93:c8:c3:8e:9f:8b:e1:6d:7a:e8:
                    1a:8d:25:fe:45:e3:6b:bf:1b:f2:0c:c1:56:41:1c:
                    ef:71:78:99:4e:56:c1:08:e2:a6:18:6a:31:67:26:
                    88:6c:e2:25:d7:4c:99:1f:d6:c6:f4:3b:ec:cc:1e:
                    1a:c9:24:82:5d:d1:74:1f:36:1a:f8:d8:62:c6:9a:
                    91:20:a7:20:f7:9c:7c:3c:b0:24:cd:a9:52:60:34:
                    b3:0a:9e:a7:62:e6:7b:13:1f:40:13:9c:6b:07:9f:
                    43:09:17:dd:11:9e:32:6c:ab:19:67:f4:96:d7:27:
                    d0:e5:49:93:74:c4:71:57:ae:57:2c:89:fd:8a:25:
                    cb:ea:05:fa:39:8c:f0:0c:29:df:0f:1a:98:c4:c3:
                    88:13:02:fa:72:60:b4:dd:2d:1e:fb:b3:8c:80:40:
                    71:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FF:F5:45:91:77:EF:60:3D:A6:CB:09:56:D7:96:2D:8D:FD:A9:35
            X509v3 Authority Key Identifier:
                keyid:2C:97:D8:25:AA:15:7C:BC:83:56:79:2A:39:BA:B7:3B:6B:3C:7A:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LJfYJaoVfLyDVnkqObq3O2s8epE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3614F54/EC5B2F8CE15F11EB8686B051F8AEA228/LJfYJaoVfLyDVnkqObq3O2s8epE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:27:1c:eb:ff:10:73:98:6c:19:80:3f:66:cd:ac:47:e6:15:
         70:3f:97:24:16:79:5e:78:3e:e5:17:35:9a:4c:43:3c:fa:31:
         8c:15:a5:8f:8c:3f:5d:ae:a2:10:fb:c7:c4:ea:48:cf:35:5a:
         c6:dd:76:25:c6:cd:6e:1a:45:25:47:a1:45:ef:01:20:14:b8:
         5c:ac:ad:9e:c3:be:6d:87:ea:44:a1:03:7c:cb:2f:77:2a:95:
         b4:84:55:93:83:b3:fb:b6:b5:44:19:2e:a4:06:f8:68:b0:6c:
         be:28:43:de:f0:2e:ee:b9:de:33:fd:13:0a:f7:4d:77:d4:45:
         2b:a6:85:72:6a:34:76:c1:6b:bd:cb:3b:7a:36:bd:c6:d0:20:
         c4:3d:aa:c5:d0:c5:10:fe:50:c1:53:a2:5d:1e:b1:9e:fa:89:
         2e:5e:54:95:cb:99:5e:76:eb:75:9f:c1:7b:c2:e9:9d:d5:b0:
         c1:03:14:77:7c:65:bb:da:f1:a1:b5:9c:1a:5e:8e:d8:a5:76:
         aa:db:11:ff:b2:10:7b:7e:d7:a1:72:fa:90:76:78:ae:60:3e:
         2d:18:da:fd:3a:f6:9d:58:21:60:df:a7:b8:a8:68:cd:63:2b:
         42:43:17:91:15:75:96:9d:36:aa:86:3d:e0:58:66:41:0a:f3:
         c0:23:98:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----