Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
File:                     2S3BlA86xFACYfqliK5STwS9244.mft (raw, json)
Hash identifier:          Hy6DOGH31Wd7B9ktTlJfxi5BnnwW3TBcLBTsZrSf5Dc=
Subject key identifier:   EE:D1:FA:A2:82:45:CD:53:55:3C:46:1B:73:00:BD:F6:0F:5F:9A:8B
Authority key identifier: D9:2D:C1:94:0F:3A:C4:50:02:61:FA:A5:88:AE:52:4F:04:BD:DB:8E
Certificate issuer:       /CN=F363FC87AF/serialNumber=D92DC1940F3AC4500261FAA588AE524F04BDDB8E
Certificate serial:       5C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
Manifest number:          5B
Signing time:             Sun 15 Nov 2026 05:48:04 +0000
Manifest this update:     Sun 15 Nov 2026 05:48:03 +0000
Manifest next update:     Tue 17 Nov 2026 05:48:03 +0000
Files and hashes:         1: 2S3BlA86xFACYfqliK5STwS9244.crl (hash: DVrdpxhWICGKf1oNQWhR1Z1zpeeRYg49+esDegsj51g=)
                          2: 05A0B69E9B0811F1A0808FE3CE1D38B0.roa (hash: pasTsat2fXh6YiGvMvYT8AvkfmPYbd9JwrzF0OlGv9U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FC87AF, serialNumber=D92DC1940F3AC4500261FAA588AE524F04BDDB8E
        Validity
            Not Before: Nov 15 05:48:03 2026 GMT
            Not After : Nov 17 05:48:03 2026 GMT
        Subject: CN=6af94794-b0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:84:e0:f2:1a:ae:bb:f6:7b:a8:89:4f:b6:65:
                    4b:75:30:c5:ad:b6:a7:14:8f:ff:37:eb:f1:74:b3:
                    fa:0d:d5:f6:ca:4c:1a:04:c3:e4:d1:80:83:31:73:
                    08:8d:44:e1:0a:16:f0:9b:9c:7a:e1:65:85:bb:21:
                    51:85:08:60:ca:9e:bc:03:99:ee:92:8e:79:14:cb:
                    b3:24:c7:8b:32:31:ef:b9:d2:32:b2:86:3f:de:f3:
                    18:d7:19:f0:29:4e:93:52:79:b4:3d:d4:72:42:6e:
                    36:9e:3e:e6:0f:9e:1b:c3:c3:ab:5d:cf:e6:32:8e:
                    50:03:c4:c5:01:61:ec:43:68:57:e4:cd:d0:a7:74:
                    09:94:97:07:23:d0:34:5a:ea:26:eb:98:52:80:9f:
                    a4:43:13:96:f8:50:3e:69:f0:9f:9a:9b:3e:eb:d7:
                    6f:4a:79:6d:40:9d:cd:aa:cd:ee:4c:54:74:95:18:
                    bb:98:d1:22:c0:88:94:fd:08:5a:82:59:3c:3e:04:
                    3d:f8:15:a5:af:da:9d:ca:87:6e:70:95:2e:c6:c6:
                    7d:cc:09:8e:95:db:cf:45:4f:56:c4:79:78:12:53:
                    46:24:52:6a:20:39:08:94:20:85:17:6f:af:5c:61:
                    41:03:0a:13:75:8a:87:de:19:d8:12:99:52:cc:b8:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D1:FA:A2:82:45:CD:53:55:3C:46:1B:73:00:BD:F6:0F:5F:9A:8B
            X509v3 Authority Key Identifier:
                keyid:D9:2D:C1:94:0F:3A:C4:50:02:61:FA:A5:88:AE:52:4F:04:BD:DB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:fb:d5:4f:6a:5a:41:e1:4a:11:f4:92:4a:58:44:d1:d9:bb:
         33:1a:77:c5:b7:8b:28:fd:f9:b7:e1:4e:96:24:7f:8f:de:a2:
         78:a6:73:49:35:c0:b2:e5:a5:0a:ce:30:d8:04:53:07:fa:81:
         e5:6a:3c:58:ad:58:a2:ce:5e:0a:df:91:c0:85:78:1b:23:c6:
         39:1a:0c:f1:96:33:d4:e6:26:c6:4e:49:46:60:5f:16:62:d9:
         55:d6:69:b7:26:78:8e:f5:92:24:48:d3:28:05:a8:c9:40:31:
         8f:0f:f4:dc:dc:25:51:22:6c:da:2e:73:14:38:ac:8e:e1:7d:
         5e:e3:49:70:45:58:c0:69:b1:86:4b:f7:93:d2:fd:b2:e4:e4:
         71:20:1e:0f:77:19:8a:8f:a7:ea:80:88:66:91:68:0f:be:ca:
         40:e4:63:f2:7c:89:e7:8b:e4:c4:c8:09:f1:b1:89:02:4d:d2:
         c2:91:0c:41:83:6c:94:f6:78:9d:6c:1a:85:d2:17:25:4e:ad:
         f0:a9:54:7b:cd:88:a1:31:91:35:19:58:9d:6c:a6:5b:2f:9f:
         c6:93:15:68:dd:83:29:17:3f:9e:ba:60:1a:ce:f9:49:6c:1b:
         c5:62:8c:e3:b7:ab:92:41:a5:5d:aa:b1:12:f5:6b:0a:96:85:
         ee:f2:9d:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----