Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft
File:                     B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft (raw, json)
Hash identifier:          /ozxQEgwF/hgHARLSA510CUIT95XGFQmc/Ekh8eh/U4=
Subject key identifier:   68:2D:20:0B:27:FE:A6:A4:C5:D1:10:4B:81:DD:F4:AA:4B:C8:86:78
Authority key identifier: 07:E6:65:30:BA:54:25:EC:EA:C5:E3:C3:0A:92:78:18:CD:FF:AD:BF
Certificate issuer:       /CN=F36297A8AF/serialNumber=07E66530BA5425ECEAC5E3C30A927818CDFFADBF
Certificate serial:       15
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/B-ZlMLpUJezqxePDCpJ4GM3_rb8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft
Manifest number:          14
Signing time:             Sat 26 Sep 2026 05:53:44 +0000
Manifest this update:     Sat 26 Sep 2026 05:53:43 +0000
Manifest next update:     Mon 28 Sep 2026 05:53:43 +0000
Files and hashes:         1: B-ZlMLpUJezqxePDCpJ4GM3_rb8.crl (hash: V3HqqTFpdQoH33PMU3PCk53zwkD9juMKbJkeTZ1rXoA=)
                          2: EBAC716AAB6511F193033AC8CE1D38B0.roa (hash: 7Idq3YwjiHdERP1x0fXbeTuTnxcNWtbWLH9CE2SMjo4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/B-ZlMLpUJezqxePDCpJ4GM3_rb8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 05:53:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36297A8AF, serialNumber=07E66530BA5425ECEAC5E3C30A927818CDFFADBF
        Validity
            Not Before: Sep 26 05:53:43 2026 GMT
            Not After : Sep 28 05:53:43 2026 GMT
        Subject: CN=6ab75de8-ffa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:2a:a6:b8:0e:23:cf:f5:c8:49:73:69:18:
                    19:26:7a:b9:ca:72:54:d4:15:6c:a8:9d:d5:2f:ce:
                    7b:cf:7a:b5:36:86:f0:d8:d4:9f:f4:55:46:44:0f:
                    d1:df:65:a8:88:1c:64:99:14:ea:08:f2:ac:6f:ae:
                    83:9d:5e:af:fb:b3:2a:0f:09:11:95:99:f1:47:16:
                    86:ef:51:d8:d3:6c:5f:28:7b:a7:27:30:c8:fc:c4:
                    67:ab:60:7e:ee:15:6d:35:ca:4e:d4:47:e6:48:e7:
                    60:74:1a:ef:93:03:57:cc:1f:1e:17:b1:5f:5b:e4:
                    0c:48:f9:b0:1b:38:5f:b3:e0:49:94:15:de:e3:aa:
                    71:79:06:85:b1:00:54:77:13:e8:63:d9:67:b6:e7:
                    0f:e7:db:72:9a:07:72:c4:18:4c:03:c7:41:eb:32:
                    13:b4:9a:88:92:81:3a:10:b2:63:e2:75:84:4a:00:
                    7d:25:7f:af:62:5c:ea:60:8a:17:ae:0f:75:29:1d:
                    ef:06:1a:3d:9d:90:7b:52:55:32:be:a0:28:d1:7e:
                    56:06:78:e3:a4:b5:c6:ee:7b:fa:59:e8:f9:ac:4f:
                    85:11:3c:9d:08:b5:9c:4d:d7:2a:1a:26:32:00:57:
                    70:f5:fe:78:f1:70:99:2c:96:e4:7a:21:5a:2b:76:
                    f2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:2D:20:0B:27:FE:A6:A4:C5:D1:10:4B:81:DD:F4:AA:4B:C8:86:78
            X509v3 Authority Key Identifier:
                keyid:07:E6:65:30:BA:54:25:EC:EA:C5:E3:C3:0A:92:78:18:CD:FF:AD:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/B-ZlMLpUJezqxePDCpJ4GM3_rb8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36297A8/FDC41778AB6411F1810BD2C1CE1D38B0/B-ZlMLpUJezqxePDCpJ4GM3_rb8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:bb:90:cd:ad:94:fd:95:20:0b:84:5f:2d:01:74:96:4a:3f:
         d4:d5:27:d3:3f:4e:f4:52:ea:7c:7c:cc:58:b6:b0:d7:06:ee:
         04:0a:dc:79:78:95:fe:ba:fd:66:d7:dd:48:27:6d:bd:cc:76:
         1c:43:ff:92:c9:4a:ce:c6:7d:c0:37:7a:e4:e2:65:62:f7:0b:
         1d:be:5b:80:31:df:32:20:52:ca:15:ca:dc:dc:dd:d5:41:8a:
         50:df:59:4f:0c:cc:6d:d5:f6:bf:73:6d:d1:16:6f:49:14:ae:
         7c:19:61:bc:55:ae:fa:e0:b2:2f:8e:5c:db:a0:31:9c:b0:f6:
         a5:4b:a9:9c:3f:a1:d0:f1:df:aa:69:95:3a:56:77:3e:4a:5a:
         f1:7b:7a:a9:91:5e:20:0c:f9:0b:0c:5c:39:48:08:2c:e8:2d:
         e6:4d:c0:3a:b9:fb:f0:57:2a:55:43:28:06:a3:70:e3:d1:9a:
         2c:f2:e1:30:df:9d:bc:f3:ec:b4:3a:e4:d7:28:eb:7f:01:d1:
         ae:cb:a5:f9:5b:61:a6:0b:06:21:8c:e8:84:12:6b:7c:f1:ab:
         5b:fd:2d:b6:9d:96:c9:0e:82:35:bf:c4:d2:7a:b5:d0:b9:99:
         88:e9:5a:97:ca:a8:32:3b:f4:56:a8:59:dd:44:eb:cc:c0:9d:
         cb:a7:e0:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----