Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
File:                     IU5T_WAV277wRT3vRAdy_7AU3Yo.mft (raw, json)
Hash identifier:          bgsuIVC6dgGBQ0CUtRUX6hP3jFazre1+AeOmVkTPqEg=
Subject key identifier:   65:EF:A7:C6:8E:F4:C1:8D:5B:60:19:9C:99:B8:E8:03:AB:FF:F6:B9
Authority key identifier: 21:4E:53:FD:60:15:DB:BE:F0:45:3D:EF:44:07:72:FF:B0:14:DD:8A
Certificate issuer:       /CN=F3639B67AF/serialNumber=214E53FD6015DBBEF0453DEF440772FFB014DD8A
Certificate serial:       0505
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
Manifest number:          0503
Signing time:             Sun 15 Nov 2026 03:26:44 +0000
Manifest this update:     Sun 15 Nov 2026 03:26:44 +0000
Manifest next update:     Tue 17 Nov 2026 03:26:44 +0000
Files and hashes:         1: IU5T_WAV277wRT3vRAdy_7AU3Yo.crl (hash: B3tePLuSSzVmGfkWV1MQHglUENmqIC2V/Ur5yt33Zyo=)
                          2: 20752E50271A11EFB295582D7DDC24C2.roa (hash: vJwAgE4GViNLt6DStSXnSiz5VQ5wiyhctReG5qMVaz0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1285 (0x505)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639B67AF, serialNumber=214E53FD6015DBBEF0453DEF440772FFB014DD8A
        Validity
            Not Before: Nov 15 03:26:44 2026 GMT
            Not After : Nov 17 03:26:44 2026 GMT
        Subject: CN=6af92674-4524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:71:64:d0:7d:dd:04:b2:f0:2c:cc:01:a1:a2:
                    40:32:12:8c:49:96:54:be:6e:75:2a:90:fc:4f:30:
                    1c:70:38:6b:4d:c9:1d:96:36:50:2a:c0:6d:3b:e2:
                    38:53:68:31:7e:b3:2b:2e:c4:88:a0:88:6b:81:4c:
                    7b:ff:b8:bf:d2:dd:71:8f:e1:72:bd:94:c7:b4:ff:
                    e3:16:c5:33:b5:43:cd:32:b4:06:00:69:3e:6e:d8:
                    dd:93:4b:7f:e3:c7:ee:39:45:bb:5e:1b:18:f3:06:
                    0c:42:2f:7a:9a:ea:db:04:8b:25:f5:f5:bb:19:4d:
                    1b:6d:36:7d:f7:77:1e:f5:9b:3e:33:6e:37:58:ee:
                    8c:64:2f:c0:93:25:b6:83:3d:2c:c9:fb:8c:34:05:
                    fc:09:05:3d:8a:18:2f:65:a6:17:41:8b:4c:d6:86:
                    77:a7:5e:a5:5e:27:25:4b:72:c1:82:70:4e:a5:57:
                    03:d4:75:be:52:5a:12:8d:71:b6:f1:f1:71:7d:83:
                    4d:70:1b:ed:4f:46:7d:3f:20:3d:87:e1:f6:11:de:
                    6b:7c:99:a5:89:93:35:47:44:b9:d6:a0:05:06:32:
                    ad:b5:7b:9f:8f:d5:0f:b0:5a:18:18:0f:67:a3:11:
                    3a:de:fa:34:60:9f:64:9c:ea:34:f0:bf:df:9e:52:
                    07:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:EF:A7:C6:8E:F4:C1:8D:5B:60:19:9C:99:B8:E8:03:AB:FF:F6:B9
            X509v3 Authority Key Identifier:
                keyid:21:4E:53:FD:60:15:DB:BE:F0:45:3D:EF:44:07:72:FF:B0:14:DD:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IU5T_WAV277wRT3vRAdy_7AU3Yo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B67/79267BC0095D11EEAEC04B594AD9E6FC/IU5T_WAV277wRT3vRAdy_7AU3Yo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:41:8f:61:ad:90:6c:c9:f1:8b:a4:85:e3:47:2b:ac:99:ed:
         11:f9:1f:f0:52:3b:f7:f3:cd:d3:f2:4d:b5:bf:0f:cb:9f:08:
         89:6f:bb:92:a6:ec:f7:af:0b:c0:2c:53:90:4e:78:48:77:d3:
         e7:70:ea:ec:ee:af:5d:6a:86:ea:93:3d:69:b0:1a:3f:85:1f:
         0d:1e:c7:0d:5a:bb:ad:62:af:9d:31:38:7e:90:ca:f6:06:0b:
         2b:2c:3d:fd:a3:1a:8f:1f:6d:62:a2:7e:73:e8:a2:72:a9:c7:
         fd:79:4e:81:5d:ad:8a:6b:d6:e4:25:dd:c7:c4:69:48:ee:76:
         13:df:0a:f8:bf:d6:43:7e:87:59:82:2d:f4:d5:ed:55:3b:9c:
         0b:22:61:8f:dc:08:92:82:b9:39:56:cb:b8:00:c6:d5:77:db:
         b5:40:a0:ae:db:16:a3:5d:1c:ed:09:84:36:43:4a:51:e0:d9:
         b1:e3:cf:fe:51:79:52:3d:6f:a3:ff:3d:f7:c2:e0:5d:67:8d:
         9c:c8:36:38:52:a2:b6:b4:0b:e0:d3:6d:53:9c:85:da:2f:04:
         06:af:0b:60:10:e1:93:6c:a4:98:12:b8:57:62:1c:54:96:82:
         f7:9d:f8:65:5b:0b:b7:4c:d4:bd:1a:c8:94:26:68:12:39:97:
         60:c4:a4:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----