Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
File:                     A7HsVImnJFpUDQglPfhVKV6iF1s.mft (raw, json)
Hash identifier:          KysbU5y5/KwSvoEwQI+KetTlDTYGuQbQ4kpnTnPrINk=
Subject key identifier:   70:C5:48:F7:BE:1C:87:1E:39:D4:4C:AF:F4:B0:67:1F:C0:34:8B:42
Authority key identifier: 03:B1:EC:54:89:A7:24:5A:54:0D:08:25:3D:F8:55:29:5E:A2:17:5B
Certificate issuer:       /CN=F361B707AF/serialNumber=03B1EC5489A7245A540D08253DF855295EA2175B
Certificate serial:       01CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
Manifest number:          01C6
Signing time:             Sun 27 Sep 2026 05:00:48 +0000
Manifest this update:     Sun 27 Sep 2026 05:00:47 +0000
Manifest next update:     Tue 29 Sep 2026 05:00:47 +0000
Files and hashes:         1: A7HsVImnJFpUDQglPfhVKV6iF1s.crl (hash: WQx4/pVH9L7PEfzMgsrovM57uQo0VzNumZE25oiWY3k=)
                          2: CB94846E5D6211F0B1684ACBDAE4EC9C.roa (hash: q7K9u94mHC6e9oaI7qiGUP+yKcVwp0btej/mCAe6shI=)
                          3: ADE00A565D6211F098A518CBDAE4EC9C.roa (hash: jpOBdkhBjVVYI3nmszZNhPcIYkBWvx4dgsFhzZiXUPs=)
                          4: 75866D765D6211F093F8A7CADAE4EC9C.roa (hash: UWso/XNlMKwadlU6ptT5mDWK+nIqDiP9OSyNwe4vkPQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
                          rsync://rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 458 (0x1ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361B707AF, serialNumber=03B1EC5489A7245A540D08253DF855295EA2175B
        Validity
            Not Before: Sep 27 05:00:47 2026 GMT
            Not After : Sep 29 05:00:47 2026 GMT
        Subject: CN=6ab8a300-8662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:2c:b5:e9:97:64:89:82:b8:b4:b3:56:26:bf:
                    14:1f:c2:2d:db:c2:82:34:5d:73:89:de:ce:9c:67:
                    d9:ae:e2:28:fa:81:60:a6:5d:de:64:79:21:e1:50:
                    46:c5:1a:65:b8:2b:36:ae:4d:01:ce:ec:35:02:e8:
                    3e:b5:fc:bc:8f:18:ca:f0:c6:27:80:33:88:89:ad:
                    0e:e2:98:71:41:a9:86:1c:d7:f8:81:f9:b0:27:46:
                    a6:c4:07:14:1d:9e:75:dd:be:9a:f4:fb:4b:a2:77:
                    9d:74:f2:e5:f1:78:83:bf:4d:c7:60:75:a5:a5:e9:
                    f7:0b:22:80:54:dd:16:94:93:84:ec:cb:51:07:37:
                    1e:64:cc:60:f2:c9:91:dc:36:e3:d2:01:c1:3b:d8:
                    94:5c:13:12:05:de:40:03:84:11:d9:ab:f3:d6:a4:
                    20:6f:6f:d5:d5:29:da:f3:c5:6b:eb:1b:a4:c6:80:
                    f1:6e:dd:09:39:9e:8c:9f:33:e0:89:f0:eb:60:14:
                    6a:d1:a1:35:57:c9:ca:51:ef:af:e6:20:00:b0:0f:
                    02:e6:21:16:cb:92:c9:38:26:80:1d:fe:e1:ff:93:
                    fb:fa:7c:28:13:d7:5a:c2:7f:fa:80:87:34:d0:ed:
                    27:3e:1c:7b:72:de:ef:d3:72:43:2e:cf:ab:64:7b:
                    68:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:C5:48:F7:BE:1C:87:1E:39:D4:4C:AF:F4:B0:67:1F:C0:34:8B:42
            X509v3 Authority Key Identifier:
                keyid:03:B1:EC:54:89:A7:24:5A:54:0D:08:25:3D:F8:55:29:5E:A2:17:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/A7HsVImnJFpUDQglPfhVKV6iF1s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361B707/97762DB65D5A11F0A1BEE598DAE4EC9C/A7HsVImnJFpUDQglPfhVKV6iF1s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:73:4d:ad:14:bf:eb:f9:4f:3b:48:cd:b5:ef:6f:0c:f4:4e:
         e0:ff:1a:8e:cd:9d:75:15:ac:d1:85:9e:ea:33:bf:1d:6d:2d:
         44:ba:d4:60:f5:2c:a0:02:cc:7e:f9:01:68:8e:19:81:90:74:
         3d:43:b0:6c:3a:91:f8:92:fe:ec:b3:49:67:ef:f3:08:64:67:
         42:c2:10:03:e0:fa:41:73:0e:9e:0c:29:61:63:ec:04:9f:91:
         d5:80:c9:40:b3:4f:9a:34:83:44:89:1d:40:51:33:4f:ec:bc:
         b2:93:de:36:be:57:3e:c6:aa:5a:9f:e2:ef:3b:fe:d5:0a:a6:
         d0:1c:d7:ae:92:b0:9e:ff:e8:0e:48:77:1b:f6:95:5d:5b:25:
         c6:91:8e:0d:1f:78:2e:65:89:6e:cc:e5:c0:0f:12:94:40:5a:
         9a:2e:d4:b9:b9:52:29:e1:d0:59:8f:65:95:92:21:b8:ff:21:
         85:c9:bd:72:71:0a:08:90:73:1e:01:2c:8d:a5:be:0d:41:4d:
         4a:07:bb:7f:9e:fd:5b:43:66:b8:32:a8:ca:b1:3f:15:e3:ec:
         51:05:68:8d:cc:1a:be:c3:89:2a:e8:12:4c:3b:8a:84:fd:b9:
         ca:ec:93:af:ab:5d:63:20:dc:22:1c:4c:55:14:3e:ed:33:e6:
         29:48:94:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----