Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
File:                     2FLZY43gNj3YSH_gDch1vI-a080.mft (raw, json)
Hash identifier:          KzgBynZcIHsbBnJHC2f6ZL/wulPezeKFMngX/lK1Nus=
Subject key identifier:   89:47:24:55:B6:C0:31:EA:5B:F3:FF:5A:2E:E8:23:94:42:E3:03:E4
Authority key identifier: D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD
Certificate issuer:       /CN=F3636791AF/serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
Certificate serial:       B1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
Manifest number:          AE
Signing time:             Fri 25 Sep 2026 05:32:48 +0000
Manifest this update:     Fri 25 Sep 2026 05:32:47 +0000
Manifest next update:     Sun 27 Sep 2026 05:32:47 +0000
Files and hashes:         1: 2FLZY43gNj3YSH_gDch1vI-a080.crl (hash: BzuOAoKxPPG79oacfz2VAvP/v7XOSK/9LsDMQHGCa3k=)
                          2: 3CC30608340711F1AFB184CFCE1D38B0.roa (hash: I53gWi2CJOwoPI79Xfi6bjQo4aU2ORPkeD1ir1Rh7cI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3636791AF, serialNumber=D852D9638DE0363DD8487FE00DC875BC8F9AD3CD
        Validity
            Not Before: Sep 25 05:32:47 2026 GMT
            Not After : Sep 27 05:32:47 2026 GMT
        Subject: CN=6ab60780-3300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ac:1e:d0:9b:58:c9:54:ef:93:f7:c7:46:ab:
                    1a:0f:fe:d0:00:70:91:42:27:b1:ca:9c:17:fc:56:
                    1b:06:3f:bb:23:07:48:c5:cf:06:54:86:e4:31:27:
                    2d:e7:d2:3f:29:be:92:36:cd:a9:c2:50:2f:73:ae:
                    12:a9:9c:9c:05:76:50:a9:e9:a9:99:59:05:75:a3:
                    ca:21:2b:b9:58:b6:f5:4a:fd:86:cc:04:a0:c3:71:
                    76:eb:7f:a3:2c:bd:6a:67:32:d2:9b:70:e7:12:c0:
                    54:6c:6f:8b:ab:e3:c7:da:f8:60:87:a3:96:6f:f9:
                    90:d7:0f:ab:31:49:c6:6a:44:90:75:83:39:a7:79:
                    97:ea:64:e6:c9:c3:f1:ad:27:12:45:9b:ef:39:a1:
                    e1:bc:67:4a:0a:59:1b:8e:be:0f:8b:ab:ed:8c:e2:
                    8d:d3:38:a6:0e:d8:c9:cb:20:02:9c:0a:bb:bf:6b:
                    f6:3e:1c:22:bd:72:d5:3e:73:7f:50:d2:ed:d5:89:
                    59:c9:63:bc:7c:ff:11:c9:6b:eb:64:55:e5:5c:3d:
                    8b:e8:56:89:c8:97:02:2e:f0:be:77:cf:bb:83:e2:
                    52:13:e7:10:fc:f8:8f:10:8c:db:d9:e5:1b:ec:9e:
                    8a:f4:22:a1:95:62:2c:e0:c8:83:b8:58:85:be:07:
                    b6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:47:24:55:B6:C0:31:EA:5B:F3:FF:5A:2E:E8:23:94:42:E3:03:E4
            X509v3 Authority Key Identifier:
                keyid:D8:52:D9:63:8D:E0:36:3D:D8:48:7F:E0:0D:C8:75:BC:8F:9A:D3:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2FLZY43gNj3YSH_gDch1vI-a080.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3636791/557822D8340611F1A55233CBCE1D38B0/2FLZY43gNj3YSH_gDch1vI-a080.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f2:bf:6b:f1:5d:32:e4:73:7c:1f:74:88:56:5a:0e:46:2a:
         72:dc:63:68:34:ca:34:c3:17:75:e2:bb:7b:49:fe:09:aa:3d:
         28:31:66:e5:36:ba:7f:47:2b:ce:20:31:01:21:83:ee:d9:57:
         40:fd:7b:a4:81:9d:0f:39:65:c5:87:a0:a6:00:c7:2b:23:c1:
         96:a0:e3:13:1d:03:e2:8d:fe:56:08:5f:4e:2c:d3:f9:05:13:
         9d:6b:06:8c:42:bc:21:14:0c:5f:96:4b:25:9a:8c:27:99:58:
         09:1d:1a:8c:97:2d:ab:53:ee:e9:b1:b4:68:6f:6e:d6:fa:b5:
         7d:bc:08:4c:85:7d:cd:c5:1b:ac:24:41:06:92:f1:a5:3e:65:
         ce:6c:b8:b0:58:ae:16:c8:31:6a:c1:04:89:69:31:26:94:d0:
         d2:60:d3:9e:58:97:ee:64:c7:9d:9d:b8:fd:68:d8:9c:5e:2d:
         b9:e3:84:9d:15:f7:71:aa:0f:fb:19:b8:b9:2c:c4:78:ac:01:
         ab:54:b7:74:a6:8d:21:02:60:81:6c:6d:f2:de:4a:bd:b0:9c:
         49:3d:66:4a:94:14:f6:6b:78:06:b6:e9:47:ce:92:c9:3d:a2:
         29:fb:c1:7c:4d:ec:9e:f3:5f:b4:97:d1:e6:62:6a:be:eb:df:
         d5:f7:bf:6a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICALEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzY3OTFBRjExMC8GA1UEBRMoRDg1MkQ5NjM4REUwMzYzREQ4NDg3RkUwMERDODc1
QkM4RjlBRDNDRDAeFw0yNjA5MjUwNTMyNDdaFw0yNjA5MjcwNTMyNDdaMBgxFjAU
BgNVBAMTDTZhYjYwNzgwLTMzMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXrB7Qm1jJVO+T98dGqxoP/tAAcJFCJ7HKnBf8VhsGP7sjB0jFzwZUhuQx
Jy3n0j8pvpI2zanCUC9zrhKpnJwFdlCp6amZWQV1o8ohK7lYtvVK/YbMBKDDcXbr
f6MsvWpnMtKbcOcSwFRsb4ur48fa+GCHo5Zv+ZDXD6sxScZqRJB1gzmneZfqZObJ
w/GtJxJFm+85oeG8Z0oKWRuOvg+Lq+2M4o3TOKYO2MnLIAKcCru/a/Y+HCK9ctU+
c39Q0u3ViVnJY7x8/xHJa+tkVeVcPYvoVonIlwIu8L53z7uD4lIT5xD8+I8QjNvZ
5Rvsnor0IqGVYizgyIO4WIW+B7b7AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiUck
VbbAMepb8/9aLugjlELjA+QwHwYDVR0jBBgwFoAU2FLZY43gNj3YSH/gDch1vI+a
080wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM2NzkxLzU1NzgyMkQ4MzQwNjExRjFBNTUyMzNDQkNFMUQzOEIwLzJGTFpZ
NDNnTmozWVNIX2dEY2gxdkktYTA4MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJGTFpZNDNnTmozWVNIX2dEY2gxdkktYTA4MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzY3OTEvNTU3ODIyRDgzNDA2MTFGMUE1NTIzM0NCQ0Ux
RDM4QjAvMkZMWlk0M2dOajNZU0hfZ0RjaDF2SS1hMDgwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAx8r9r8V0y5HN8H3SIVloORipy3GNo
NMo0wxd14rt7Sf4Jqj0oMWblNrp/RyvOIDEBIYPu2VdA/XukgZ0POWXFh6CmAMcr
I8GWoOMTHQPijf5WCF9OLNP5BROdawaMQrwhFAxflkslmownmVgJHRqMly2rU+7p
sbRob27W+rV9vAhMhX3NxRusJEEGkvGlPmXObLiwWK4WyDFqwQSJaTEmlNDSYNOe
WJfuZMednbj9aNicXi2544SdFfdxqg/7Gbi5LMR4rAGrVLd0po0hAmCBbG3y3kq9
sJxJPWZKlBT2a3gGtulHzpLJPaIp+8F8Teye81+0l9HmYmq+69/V979q
-----END CERTIFICATE-----