Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
File:                     QrWM7qosEujy3JjWRMIM-BzhzgU.mft (raw, json)
Hash identifier:          aZnxdUaDE9Uc2jF5dzU1PG8ZXwpJg2KftZboZKhTMwI=
Subject key identifier:   2F:C8:0C:01:C6:2E:24:EF:26:85:00:FA:F8:88:5F:83:B0:D2:33:72
Authority key identifier: 42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05
Certificate issuer:       /CN=F3628DDEAF/serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
Certificate serial:       0B35
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
Manifest number:          0B30
Signing time:             Wed 14 Oct 2026 01:17:12 +0000
Manifest this update:     Wed 14 Oct 2026 01:17:11 +0000
Manifest next update:     Fri 16 Oct 2026 01:17:11 +0000
Files and hashes:         1: QrWM7qosEujy3JjWRMIM-BzhzgU.crl (hash: H2xZDlcXoAnISfO6YKN46n1zCELubpp0hB2Ue/1s6Mk=)
                          2: 1119CD76DFD311EB88361B37F8AEA228.roa (hash: 4I2Xxy2pBMpErR6JgtR0kZIJe7vFEf1qAmaSQyw+k7I=)
                          3: 86A30800B0DE11F1BCFD8EEDCE1D38B0.roa (hash: C0T/vA48xNWnd3+iRMQmrJv+PCXqT16VLz0/ESUXyhU=)
                          4: F539AC2ADFD211EBB0D1FD36F8AEA228.roa (hash: eXFh4emIQs516bgW52azXjxVc2VVoIN8dsu/3Z+Sdok=)
                          5: EE5F2E50369E11E98EDB1621F8AEA228.roa (hash: weMqKqZKyHm0tyqjfHAxnqGFkomIgwidKnm2Dpx5xnA=)
                          6: 14DA972C369F11E9A85A3C21F8AEA228.roa (hash: rRgU+4tFqjCwv3sj5zK6L+vCSIEp2/0zfXQO2ATh2MM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 01:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2869 (0xb35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628DDEAF, serialNumber=42B58CEEAA2C12E8F2DC98D644C20CF81CE1CE05
        Validity
            Not Before: Oct 14 01:17:11 2026 GMT
            Not After : Oct 16 01:17:11 2026 GMT
        Subject: CN=6aced818-152b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:28:56:b4:f0:86:ef:ac:98:ad:64:7e:fd:
                    7c:b6:d2:67:71:75:66:a3:b6:b0:f1:64:ad:3a:ff:
                    fb:3d:d4:a9:4c:35:d2:cb:3c:f8:da:84:42:3d:84:
                    b8:5d:df:f1:4b:86:e1:a5:ec:70:b5:93:f7:35:d2:
                    d9:6a:c0:02:d4:da:0a:ec:1f:04:ab:27:c7:f2:f3:
                    8e:93:ad:da:50:17:3c:ab:be:7e:17:03:74:83:d7:
                    43:37:aa:9c:85:aa:d2:8e:9e:d7:d7:af:57:cc:ed:
                    87:1c:ac:d0:e4:c4:87:29:29:f6:65:6a:12:10:a4:
                    2c:4d:cd:bc:a3:3b:e6:12:9f:8b:d1:a2:66:80:cd:
                    fd:46:99:d2:e4:90:6b:13:9a:41:18:45:c5:17:fc:
                    ea:e0:0f:06:a9:d0:8a:6c:62:29:9f:4e:59:77:08:
                    ee:df:b3:bc:7d:39:e2:af:3b:b8:0f:82:13:92:52:
                    cd:c9:1a:0c:8e:c5:d5:43:42:af:62:41:34:a6:6a:
                    29:5c:9b:4f:01:25:e6:45:e1:7d:ee:de:e3:d1:6b:
                    4b:d9:28:31:2e:53:c5:01:22:6f:e2:00:b3:83:5f:
                    01:fb:59:97:51:69:fe:5b:8f:09:3f:e3:b5:3a:3d:
                    d5:1e:e1:4e:83:40:03:4d:f5:ef:8a:a2:28:9e:0c:
                    0a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C8:0C:01:C6:2E:24:EF:26:85:00:FA:F8:88:5F:83:B0:D2:33:72
            X509v3 Authority Key Identifier:
                keyid:42:B5:8C:EE:AA:2C:12:E8:F2:DC:98:D6:44:C2:0C:F8:1C:E1:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QrWM7qosEujy3JjWRMIM-BzhzgU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628DDE/BF78233A369E11E9A7D5E220F8AEA228/QrWM7qosEujy3JjWRMIM-BzhzgU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:bf:86:47:ad:ee:c3:70:44:12:bc:ad:d1:a9:df:57:9c:e0:
         52:e8:9d:8b:2b:11:99:2c:26:27:61:1a:12:5d:b2:8a:50:18:
         16:7e:09:39:68:b3:ed:ee:e7:10:03:69:b7:c5:a1:79:cb:79:
         4f:a8:43:ea:49:79:aa:2d:3a:50:1f:d3:29:2a:a7:f5:3d:ee:
         6e:95:75:4d:a3:aa:7e:7c:a5:c6:c2:53:37:27:ce:01:1d:75:
         58:7d:b6:1f:c7:22:e9:ae:55:11:88:ba:37:07:c1:db:2f:41:
         fd:51:e7:02:84:e3:6c:55:a0:5f:c8:dc:e2:2c:fb:5f:3d:a1:
         6e:7f:45:1b:6c:92:65:b6:5a:2f:5e:11:b6:bb:81:30:cb:c3:
         42:d0:90:d2:b6:dc:d7:f4:a6:c1:64:26:1a:69:75:be:b6:7e:
         06:87:05:a7:06:46:0e:af:8e:d4:91:a6:ea:40:b6:6b:41:8b:
         1c:a5:03:72:b9:37:20:6c:0a:3e:4b:03:27:cb:33:02:35:95:
         cf:f3:cd:1f:d7:39:7b:f1:49:0d:2e:30:f6:85:6b:6c:a6:6b:
         bc:98:49:24:3f:2f:fc:49:21:7d:75:62:d5:68:1a:1f:73:48:
         7c:c3:1a:0c:0b:41:7f:62:a1:9e:b4:7e:da:ac:a3:41:37:e4:
         5d:26:5c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----