Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
File:                     0unaaO71cIn0RVxxt8nHfu3iFmI.mft (raw, json)
Hash identifier:          DjRsi0NXO1naXEgddEmCtJ4QPLwIj+yHnwkMm4jZJqw=
Subject key identifier:   C1:45:EA:EA:79:59:BC:2A:1B:60:1A:29:77:31:17:58:A4:BA:63:42
Authority key identifier: D2:E9:DA:68:EE:F5:70:89:F4:45:5C:71:B7:C9:C7:7E:ED:E2:16:62
Certificate issuer:       /CN=F362E505AF/serialNumber=D2E9DA68EEF57089F4455C71B7C9C77EEDE21662
Certificate serial:       0205
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
Manifest number:          0204
Signing time:             Sat 14 Nov 2026 04:54:52 +0000
Manifest this update:     Sat 14 Nov 2026 04:54:51 +0000
Manifest next update:     Mon 16 Nov 2026 04:54:51 +0000
Files and hashes:         1: 0unaaO71cIn0RVxxt8nHfu3iFmI.crl (hash: lofFQiNOrusn6QWA9uJ/OXQnGagy764u/KnqDTxJKog=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E505AF, serialNumber=D2E9DA68EEF57089F4455C71B7C9C77EEDE21662
        Validity
            Not Before: Nov 14 04:54:51 2026 GMT
            Not After : Nov 16 04:54:51 2026 GMT
        Subject: CN=6af7e99c-fa70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b0:a8:1d:2d:f2:f9:34:24:ed:d9:18:c0:30:
                    e5:4c:51:19:92:44:f6:a1:29:7c:bc:40:a0:5a:3d:
                    71:19:86:db:a1:64:3f:26:09:90:63:7f:e6:80:41:
                    8a:42:71:b0:23:76:b2:ea:1b:d9:b3:57:09:4d:ed:
                    06:eb:b2:4f:ce:5b:ae:bf:38:c4:1c:40:e0:4c:77:
                    ea:c6:59:6f:4a:66:ee:07:0a:65:a1:dd:dc:11:52:
                    0a:d2:99:70:a6:48:fa:27:7d:81:56:6d:dd:6a:52:
                    ba:cf:fe:e8:f2:e3:66:66:2f:99:c3:e0:09:04:a8:
                    72:c6:01:9c:8b:a6:41:cb:f7:e7:e6:6b:24:f5:b5:
                    26:11:6f:c1:bb:4d:94:ab:f8:5e:b1:34:bf:55:b3:
                    1d:3d:7b:e0:8c:55:29:9a:dd:66:73:f6:65:73:4b:
                    ba:fb:d8:58:30:8d:62:1c:f7:c3:5b:6e:c2:74:a3:
                    b7:44:05:0e:37:4f:91:25:07:3d:58:c1:ae:eb:f8:
                    dc:71:8e:c7:1e:80:ef:57:61:48:d1:62:b7:a7:cb:
                    38:41:bc:6c:3d:6a:ce:e9:11:c7:8a:c7:81:ee:a1:
                    ac:a8:fc:84:52:ce:00:ac:5b:3b:e2:15:db:b2:23:
                    22:a1:10:38:b7:8a:da:12:b4:45:ad:92:9c:ef:ca:
                    b4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:45:EA:EA:79:59:BC:2A:1B:60:1A:29:77:31:17:58:A4:BA:63:42
            X509v3 Authority Key Identifier:
                keyid:D2:E9:DA:68:EE:F5:70:89:F4:45:5C:71:B7:C9:C7:7E:ED:E2:16:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:7c:88:2e:ff:c5:19:49:ee:f7:ac:68:f7:60:7f:b8:f2:0a:
         46:17:18:77:f0:20:5d:4c:5f:0f:d0:ac:85:42:8d:ad:d9:8a:
         a1:6f:b0:3a:10:44:ba:f3:e4:0d:43:82:a4:88:78:52:c0:41:
         ff:0f:99:40:4f:cb:76:4c:9a:db:55:8e:63:0f:cd:45:a7:0b:
         71:90:e3:01:ac:6b:5b:4c:ce:75:2e:e8:9f:45:a8:b9:49:fb:
         ab:28:34:5e:79:43:63:d5:12:01:ac:32:36:8e:cd:4c:de:95:
         f5:05:57:87:0a:68:84:ef:fe:17:39:b5:e4:ec:33:08:63:6b:
         16:a5:8e:a7:33:a1:3a:b6:f8:fb:31:35:0e:4b:cf:4e:97:ad:
         92:ef:65:ea:3f:4d:8f:41:83:13:66:19:88:ba:90:ad:f9:18:
         41:53:a3:ed:dc:9f:35:2a:6f:2b:e8:68:3e:d2:74:6a:8f:9c:
         2a:9b:65:4d:60:88:35:b8:7f:bc:dd:1c:6f:94:77:d3:e4:71:
         56:30:29:a3:72:42:df:1c:17:b3:bd:cd:88:ac:ba:5d:d0:9e:
         7a:0d:8e:d9:d7:8a:88:56:dc:f4:8a:58:74:bb:67:bb:56:b2:
         7e:e5:15:bc:3f:51:2b:18:09:f1:4c:40:8c:40:d0:2e:a5:26:
         b7:4f:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----