Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F361E30D/7C6DAFFA583411F1A8F5DCCDCE1D38B0/zaDgwtksbxxWLMwTKyiqwhBCDqM.mft
File:                     zaDgwtksbxxWLMwTKyiqwhBCDqM.mft (raw, json)
Hash identifier:          LbKVO2BfIkIAfNDPgFtBs1uLnlDT97o11j4jRwXUNsI=
Subject key identifier:   D8:92:15:A2:DF:8E:B3:89:98:62:80:54:FA:FB:A6:9D:75:69:D6:00
Authority key identifier: CD:A0:E0:C2:D9:2C:6F:1C:56:2C:CC:13:2B:28:AA:C2:10:42:0E:A3
Certificate issuer:       /CN=F361E30DAF/serialNumber=CDA0E0C2D92C6F1C562CCC132B28AAC210420EA3
Certificate serial:       7B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zaDgwtksbxxWLMwTKyiqwhBCDqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361E30D/7C6DAFFA583411F1A8F5DCCDCE1D38B0/zaDgwtksbxxWLMwTKyiqwhBCDqM.mft
Manifest number:          7A
Signing time:             Tue 22 Sep 2026 05:38:48 +0000
Manifest this update:     Tue 22 Sep 2026 05:38:47 +0000
Manifest next update:     Thu 24 Sep 2026 05:38:47 +0000
Files and hashes:         1: zaDgwtksbxxWLMwTKyiqwhBCDqM.crl (hash: +mRD8yRBO5LmLvd0D7+mxZ5hCfSZV7+NbKlEQpNQ5pM=)
                          2: 3AC37598583511F19379C6D3CE1D38B0.roa (hash: vJp0k0V9IDKRA1szeqOBDz33F+ZgTPzRcY0N20lDx5k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361E30D/7C6DAFFA583411F1A8F5DCCDCE1D38B0/zaDgwtksbxxWLMwTKyiqwhBCDqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361E30D/7C6DAFFA583411F1A8F5DCCDCE1D38B0/zaDgwtksbxxWLMwTKyiqwhBCDqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zaDgwtksbxxWLMwTKyiqwhBCDqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 123 (0x7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361E30DAF, serialNumber=CDA0E0C2D92C6F1C562CCC132B28AAC210420EA3
        Validity
            Not Before: Sep 22 05:38:47 2026 GMT
            Not After : Sep 24 05:38:47 2026 GMT
        Subject: CN=6ab21468-5302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:82:a8:43:9e:a7:1e:08:12:aa:8e:c4:5d:a4:
                    8f:95:55:0b:e5:0e:e8:13:05:99:ce:14:55:15:d3:
                    33:61:ed:24:0c:62:9a:84:82:75:e2:b7:cc:d1:03:
                    47:1a:3a:10:1c:90:03:c5:52:0b:7f:73:47:41:c4:
                    14:7b:2c:42:c1:0c:43:e5:32:51:c3:51:43:22:1f:
                    8b:65:2a:99:9f:d9:d4:d2:0b:a7:c0:83:39:62:c1:
                    09:ad:c3:11:5f:c7:f3:ae:c0:d1:b2:74:99:25:be:
                    ff:08:6d:36:b6:c5:1b:c2:c3:18:09:b4:de:b7:92:
                    f5:02:d4:b0:57:b5:33:8d:cb:f3:59:dc:b5:5b:35:
                    ce:bb:1c:38:d8:ee:1f:fb:82:dc:7e:bc:a7:b0:4d:
                    b6:df:05:71:5e:be:05:7c:57:50:41:70:7c:e1:c5:
                    07:b5:77:e4:bb:20:83:e9:13:87:5f:f3:b3:b6:f8:
                    90:61:e9:77:b0:2d:bc:50:1f:06:6d:75:17:41:09:
                    c5:51:04:23:56:09:6b:4d:e9:cb:75:0b:b4:0f:0d:
                    a8:47:4e:9e:05:a0:a3:88:fb:35:3b:14:7f:ad:0b:
                    0c:af:82:cd:bd:18:63:91:ab:81:2a:3e:fa:81:ea:
                    5b:2e:48:9e:dc:02:aa:8b:98:c4:8a:d1:1b:8b:bd:
                    27:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:92:15:A2:DF:8E:B3:89:98:62:80:54:FA:FB:A6:9D:75:69:D6:00
            X509v3 Authority Key Identifier:
                keyid:CD:A0:E0:C2:D9:2C:6F:1C:56:2C:CC:13:2B:28:AA:C2:10:42:0E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361E30D/7C6DAFFA583411F1A8F5DCCDCE1D38B0/zaDgwtksbxxWLMwTKyiqwhBCDqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zaDgwtksbxxWLMwTKyiqwhBCDqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361E30D/7C6DAFFA583411F1A8F5DCCDCE1D38B0/zaDgwtksbxxWLMwTKyiqwhBCDqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:a2:78:9d:f8:6e:13:c4:e1:36:e6:d5:23:94:36:df:e0:ea:
         31:aa:b7:f1:e3:eb:b2:37:1d:66:f0:af:33:10:e3:30:19:73:
         ca:fb:0b:4a:0f:13:76:00:fc:c7:49:fa:b1:dd:34:4e:3f:d9:
         12:63:30:6b:03:9e:3f:c1:37:b6:e2:6e:ef:ee:07:51:3a:97:
         53:50:07:ab:71:32:e3:f4:8e:6a:9d:b6:3f:b0:3a:d7:4d:ee:
         5e:6e:cb:07:ff:a8:30:f1:03:e0:8d:c7:45:ff:21:07:88:55:
         8e:8e:f0:d8:b4:bf:63:d5:29:fe:35:a7:e5:53:c4:93:ad:f7:
         92:49:59:9b:a7:e6:1b:da:57:28:13:a3:f9:64:be:13:1c:77:
         45:dc:29:da:5a:e9:ab:c2:0a:e5:59:37:b7:23:02:6a:62:b1:
         d2:9f:b9:bc:ac:16:4b:28:99:b4:1f:77:27:3d:ae:bd:20:15:
         4d:3d:82:74:9f:26:cd:51:fc:12:e4:96:9a:60:3b:ad:5e:57:
         d4:34:ae:ff:25:7a:fd:d2:7e:f6:50:fd:8d:ee:90:1b:74:d8:
         ea:b9:02:75:de:bf:80:bc:ad:16:74:20:e5:4f:f7:75:48:e9:
         6c:2f:76:07:52:33:4f:6d:97:01:62:cd:f5:9c:b9:7c:37:5b:
         ae:61:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----