Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
File:                     KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft (raw, json)
Hash identifier:          tU3HJh9X4xjzzs24X8LDiWDt2J1OZO5HGZoKJkCoelM=
Subject key identifier:   49:B3:60:72:E9:A2:8E:73:4B:7C:C9:72:A4:A5:FD:33:C9:3E:7C:DC
Authority key identifier: 28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D
Certificate issuer:       /CN=F3618EDBAF/serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
Certificate serial:       015C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
Manifest number:          0154
Signing time:             Sat 14 Nov 2026 05:19:19 +0000
Manifest this update:     Sat 14 Nov 2026 05:19:19 +0000
Manifest next update:     Mon 16 Nov 2026 05:19:19 +0000
Files and hashes:         1: KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl (hash: oNt3KzRdaHiYz5y4MQCnK8jczZ93JZHmzDz8fVZPVI0=)
                          2: 17A6E9ECE0F711F0A114E9DFDAE4EC9C.roa (hash: oUTiQVRlxq9bUqRcd4ce+yhUVNhKDDkTPe1EsY3iBbE=)
                          3: 5E79FB8CE2AC11F0A6234B98DAE4EC9C.roa (hash: Lb+wrneK44yBD0CAONsxLgg7KqMCARKbOXH5GvTo2qM=)
                          4: 08555AE2E2AE11F0B1962FA1DAE4EC9C.roa (hash: 3dtsbRMFUQeDPfQli+f46C9vMLlNlqAr7VBqoPX8KyQ=)
                          5: A7C55AB0E2AD11F0BB83F89EDAE4EC9C.roa (hash: 6WEM00ZKqEuwevPcgj7EKqQZy0f2qOX5R1pO+pIZTdk=)
                          6: 0A5D7A3CE2AD11F08E50859CDAE4EC9C.roa (hash: l9uO6T9qnIveSVMO0EAfStM5WqM8vIz3UlicMoWrw2s=)
                          7: D5DEA21CE2AD11F0900CC4A0DAE4EC9C.roa (hash: AsFQ03ZNXkHPbbINQUBNQ5N+wl37nGduJvWmVv5sY+I=)
                          8: BEF7090AE2AC11F08942E698DAE4EC9C.roa (hash: FhBtGfwBJqyBaCCf7eyjt0uPvyWt1f6aEoLSZs81xgc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 348 (0x15c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618EDBAF, serialNumber=283274C4309B027A9BD5E064BC6ED0CF3FDF9B7D
        Validity
            Not Before: Nov 14 05:19:19 2026 GMT
            Not After : Nov 16 05:19:19 2026 GMT
        Subject: CN=6af7ef57-5767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d1:69:e4:dd:d3:f1:b9:24:b5:10:2e:64:16:
                    da:53:c7:64:42:b0:81:8c:2a:1f:23:86:4a:a4:72:
                    64:7e:36:8b:74:68:cd:bb:b9:9d:1d:9b:b9:7e:c1:
                    0e:f4:f8:1d:9e:c1:a7:38:e6:fc:7c:2e:8e:42:55:
                    c7:41:08:cb:47:95:d4:53:53:b7:b0:22:80:78:94:
                    ed:09:df:0e:fa:ed:76:3e:4c:77:22:87:37:89:df:
                    7c:f3:17:94:1d:de:72:74:8d:5b:1e:6c:5c:f3:b4:
                    85:2c:61:12:fb:53:35:4f:72:0b:53:b6:ff:e8:41:
                    46:b1:a2:1b:eb:ca:a2:42:ea:8e:59:d8:dc:2e:e5:
                    d7:1e:23:83:67:6b:7a:37:7a:56:a7:a4:cd:98:7e:
                    a5:74:99:24:71:4a:78:d2:c9:f9:97:2e:28:ea:4d:
                    f4:c5:ef:a4:71:b1:2c:2c:e1:9c:d6:98:ef:95:74:
                    62:2a:b5:2f:6c:fa:33:da:63:51:1e:b2:d3:f5:17:
                    88:e7:48:d2:c2:88:16:68:b1:c9:c4:dd:e4:70:7b:
                    74:bd:45:1d:86:90:3d:32:ba:b1:3f:9e:fe:9b:93:
                    42:91:4f:25:fa:3d:d9:60:56:9c:a2:c7:8c:c9:dc:
                    51:dd:c9:ca:25:26:8f:e9:89:d7:e3:b8:f5:7b:1b:
                    00:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:B3:60:72:E9:A2:8E:73:4B:7C:C9:72:A4:A5:FD:33:C9:3E:7C:DC
            X509v3 Authority Key Identifier:
                keyid:28:32:74:C4:30:9B:02:7A:9B:D5:E0:64:BC:6E:D0:CF:3F:DF:9B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618EDB/EC72AC3AE0F511F09640CAD7DAE4EC9C/KDJ0xDCbAnqb1eBkvG7Qzz_fm30.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d7:1a:96:b4:8e:8b:17:a8:05:9f:d2:cd:ee:fb:f4:97:47:
         08:60:bb:68:04:17:69:08:62:d3:4c:27:24:45:3d:f6:8f:4c:
         aa:76:ed:a9:60:0b:2b:0d:ae:44:f7:78:f3:9a:99:c0:c1:d9:
         6d:59:cf:81:39:db:b0:5e:08:15:0a:db:cc:a8:8f:4b:88:14:
         09:c5:8d:52:b7:08:86:7a:7f:d0:8d:36:82:67:c0:cd:0f:1b:
         ae:a6:15:84:35:0e:5d:6d:94:d1:40:ed:79:f6:31:d1:2d:a7:
         37:56:9e:df:f5:54:13:f3:27:d5:09:83:54:ed:67:db:1f:55:
         4a:cb:5b:6a:e0:ba:02:be:70:4f:ef:d8:ce:1d:e8:54:a6:7f:
         02:36:42:8e:97:12:ac:7b:40:7f:b6:15:da:b4:f0:99:7f:7a:
         f7:8d:12:9f:27:f4:33:f5:c7:1a:8d:4d:2f:19:52:e4:ab:99:
         81:7f:4c:0f:aa:a9:25:4d:05:f8:5f:3f:42:c2:3b:b0:0c:4f:
         9f:1f:4b:31:73:7e:70:a6:4e:cb:1d:5b:32:bc:0b:a2:69:83:
         91:b4:ec:a4:cd:df:e0:a9:93:87:14:ec:77:09:c2:e2:f9:18:
         08:50:14:96:49:d7:1f:ad:a6:4f:2c:fd:22:d5:4e:bf:26:13:
         46:b1:0d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----