Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36390A1/2C13266AACEA11F18BFF4DF9CE1D38B0/x9JovGbhbHHc4QOH9B52cMHIYr0.mft
File:                     x9JovGbhbHHc4QOH9B52cMHIYr0.mft (raw, json)
Hash identifier:          Hq/6VAdql3WyZ/dgM4nXRGUowJWMsd35h3o18/XFNyo=
Subject key identifier:   36:92:88:F4:19:D6:50:6C:AD:64:03:55:73:1A:FC:7E:1A:7C:85:06
Authority key identifier: C7:D2:68:BC:66:E1:6C:71:DC:E1:03:87:F4:1E:76:70:C1:C8:62:BD
Certificate issuer:       /CN=F36390A1AF/serialNumber=C7D268BC66E16C71DCE10387F41E7670C1C862BD
Certificate serial:       15
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9JovGbhbHHc4QOH9B52cMHIYr0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36390A1/2C13266AACEA11F18BFF4DF9CE1D38B0/x9JovGbhbHHc4QOH9B52cMHIYr0.mft
Manifest number:          14
Signing time:             Mon 28 Sep 2026 05:58:32 +0000
Manifest this update:     Mon 28 Sep 2026 05:58:31 +0000
Manifest next update:     Wed 30 Sep 2026 05:58:31 +0000
Files and hashes:         1: x9JovGbhbHHc4QOH9B52cMHIYr0.crl (hash: Ec6a0/sdHyT4dUi5w683M1vgM7tah5aBIt8ypuP2kDY=)
                          2: A1C41AE0ACEA11F19D2210FDCE1D38B0.roa (hash: bkucK1k4IWmUgSBEcjON7FnH1EnBozN3akOLZzVakCc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36390A1/2C13266AACEA11F18BFF4DF9CE1D38B0/x9JovGbhbHHc4QOH9B52cMHIYr0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36390A1/2C13266AACEA11F18BFF4DF9CE1D38B0/x9JovGbhbHHc4QOH9B52cMHIYr0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9JovGbhbHHc4QOH9B52cMHIYr0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36390A1AF, serialNumber=C7D268BC66E16C71DCE10387F41E7670C1C862BD
        Validity
            Not Before: Sep 28 05:58:31 2026 GMT
            Not After : Sep 30 05:58:31 2026 GMT
        Subject: CN=6aba0208-7ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:b5:f1:7e:71:1c:3e:45:d9:ea:7f:3c:c5:cd:
                    d7:d2:9e:84:5e:1f:ba:f4:3d:0f:90:cf:37:ab:76:
                    19:d6:ad:ab:5c:94:e1:11:59:e4:78:6b:39:b8:e3:
                    fe:81:f7:a6:7f:a9:bc:ed:6c:c6:79:3a:4d:55:d2:
                    de:2a:93:45:db:6e:fb:c1:57:be:8f:79:a7:de:98:
                    eb:ed:32:71:df:d8:30:b0:0e:e8:9b:1d:4e:f7:48:
                    0b:45:08:2e:7e:c0:ce:bb:fe:a1:7e:4c:74:f9:60:
                    79:52:47:f5:55:82:a4:0a:e5:63:7e:bb:f1:b2:4e:
                    bf:a3:d5:fe:30:97:78:b6:ce:6b:0e:68:d3:ef:d7:
                    f3:15:b1:6c:7d:ed:4b:c6:89:61:52:5e:c5:36:25:
                    6f:b8:1e:06:35:81:0b:75:ce:8e:a9:e9:1f:43:c7:
                    9f:86:b2:65:bd:20:aa:90:0a:36:6e:51:10:48:0f:
                    0e:7d:5c:b5:38:3b:13:0a:d1:ff:55:6d:ca:99:b3:
                    dd:44:8f:0c:7a:8b:2a:c0:a5:96:54:2e:68:72:63:
                    b0:2b:42:ee:66:26:ad:e5:6a:19:1b:98:67:d9:07:
                    20:88:90:d4:22:b7:ea:0c:ec:e7:bb:27:d8:72:5d:
                    f0:2a:d7:36:00:f7:24:ff:39:35:09:e1:b8:27:36:
                    06:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:92:88:F4:19:D6:50:6C:AD:64:03:55:73:1A:FC:7E:1A:7C:85:06
            X509v3 Authority Key Identifier:
                keyid:C7:D2:68:BC:66:E1:6C:71:DC:E1:03:87:F4:1E:76:70:C1:C8:62:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A1/2C13266AACEA11F18BFF4DF9CE1D38B0/x9JovGbhbHHc4QOH9B52cMHIYr0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9JovGbhbHHc4QOH9B52cMHIYr0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36390A1/2C13266AACEA11F18BFF4DF9CE1D38B0/x9JovGbhbHHc4QOH9B52cMHIYr0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:8b:e3:43:89:01:3c:39:cb:3e:b8:93:46:a3:a4:5f:a2:fa:
         3b:c8:b5:40:74:e8:b7:05:d7:37:20:2d:c5:4d:87:dd:c5:b0:
         67:b8:60:5a:08:63:77:7d:b5:7a:df:1b:93:67:28:fa:eb:9f:
         2f:f6:f4:5a:7f:85:ab:55:26:a0:e3:d2:8b:00:d4:3a:03:49:
         93:64:7f:d6:4b:c6:03:7a:ca:83:f5:b7:73:7a:81:c4:09:74:
         29:ad:8a:0b:88:51:45:e4:66:9c:1f:c4:2f:12:9f:bd:2a:4e:
         2d:5e:68:b1:71:53:42:05:a6:7e:e0:90:c6:69:01:cf:f1:46:
         42:fe:49:b6:00:f6:4b:9c:d2:27:a3:a2:6b:e5:7c:85:76:cd:
         df:ee:92:5b:9c:b3:ce:f4:f2:f8:a9:46:46:0a:40:fa:b9:d3:
         e1:a2:a7:4e:d6:c0:b1:06:37:33:0d:09:9f:82:9c:d6:f8:60:
         d2:d9:1a:88:c5:55:29:d4:12:e1:a0:a1:ef:e1:44:cf:a5:bf:
         f8:88:02:66:35:b7:9a:c5:4b:93:dd:e6:2a:73:88:4d:f1:b6:
         ed:b1:4f:61:dd:40:2c:48:dc:37:8f:b8:3d:d8:ff:29:e7:57:
         0c:ca:7b:98:22:72:32:1e:f3:c6:a2:3f:14:18:58:aa:b8:c6:
         a0:b0:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----