Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
File:                     zES432VSaGhWOxfptlH5NdVgDNA.mft (raw, json)
Hash identifier:          r8UbNe4eMEjP+M580av6taxLAcCmDLN3LjxglTqihfA=
Subject key identifier:   BF:DC:87:B2:AF:92:DC:AE:AF:6B:73:2E:A2:B9:59:E9:D5:69:2F:2A
Authority key identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0
Certificate issuer:       /CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
Certificate serial:       090D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
Manifest number:          0909
Signing time:             Thu 24 Sep 2026 01:53:45 +0000
Manifest this update:     Thu 24 Sep 2026 01:53:44 +0000
Manifest next update:     Sat 26 Sep 2026 01:53:44 +0000
Files and hashes:         1: zES432VSaGhWOxfptlH5NdVgDNA.crl (hash: KAjFufSsO+ZLAFLniEaNDSC5ddZfIGX/VFQ5W7nerP0=)
                          2: C665522E84F911F1AF90E6CACE1D38B0.roa (hash: BlAie0Tlat6KcCr7zSL4GFYwdKacjGVvkC5cmrbXIJU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 01:53:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2317 (0x90d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FCC8AF, serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
        Validity
            Not Before: Sep 24 01:53:44 2026 GMT
            Not After : Sep 26 01:53:44 2026 GMT
        Subject: CN=6ab482a9-0807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:52:e6:55:e6:2a:d4:37:c8:89:b6:11:c4:2b:
                    80:ae:8c:ed:d8:78:d1:fb:b0:fa:8e:f8:9f:db:95:
                    be:9b:13:62:69:44:2b:b6:4f:f1:3b:0c:76:de:20:
                    78:21:4b:01:70:88:33:0e:22:5b:39:42:7f:ea:80:
                    bb:07:d7:0d:af:aa:fd:56:10:5f:8c:f8:98:13:11:
                    1f:c1:52:30:ef:8a:70:6c:ad:bb:04:bd:5c:7d:42:
                    98:79:f9:10:4a:fb:46:1a:30:b6:42:75:71:37:af:
                    00:21:40:83:f2:53:0e:48:08:a2:73:12:bc:a6:8f:
                    7e:59:6a:78:61:da:09:0e:c3:81:08:48:ff:b9:e1:
                    9c:e6:a8:30:f2:be:a4:29:58:9c:c2:96:f8:89:ca:
                    0f:3a:eb:3d:81:30:95:d5:46:a8:09:59:31:37:c9:
                    a1:96:48:d0:74:95:32:94:2d:bd:36:b5:38:e9:b1:
                    a3:28:95:31:18:81:ec:76:84:2c:cd:39:f2:0f:52:
                    cf:7f:50:6c:81:35:ee:e3:17:46:77:d6:eb:61:b0:
                    8f:a0:0c:24:b7:67:a7:d2:f5:9e:31:62:e6:d2:e5:
                    bb:79:8a:c0:35:b9:6c:64:78:a9:99:e7:af:e3:a2:
                    16:83:73:c8:5f:eb:36:50:db:b1:87:1c:0f:f0:e3:
                    f6:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:DC:87:B2:AF:92:DC:AE:AF:6B:73:2E:A2:B9:59:E9:D5:69:2F:2A
            X509v3 Authority Key Identifier:
                keyid:CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:55:50:fb:46:b7:a2:ce:8c:19:2d:d4:8e:7c:1c:46:bd:75:
         b9:b3:2c:21:86:af:37:9a:13:98:eb:da:37:3e:a3:62:cc:0c:
         dc:28:0d:b2:57:96:c4:a1:ba:34:c7:06:3a:4d:f4:9b:25:8d:
         20:c5:ad:d7:33:97:6f:77:1f:ea:cc:78:58:ad:85:af:98:07:
         a7:14:3c:2a:0f:dc:c1:4d:00:f2:86:15:ef:e2:a2:c0:a2:09:
         56:75:01:13:3b:34:32:74:1d:be:20:cd:8e:f2:c6:1c:af:19:
         fb:0d:2e:9b:7d:4b:78:5f:fc:1a:94:a0:ef:87:21:fd:5c:39:
         38:ef:29:fd:05:25:93:8d:3b:e3:44:70:41:5f:a6:f3:06:38:
         6b:df:f8:da:a6:e8:bc:a7:02:b2:92:4a:7d:bb:c7:ec:74:2e:
         97:c1:05:23:00:7d:b7:d3:bc:b0:54:4e:29:18:94:a1:ee:7c:
         e4:1e:32:67:f3:3d:78:ef:ef:0f:92:9e:68:c0:43:aa:f7:6d:
         f9:9a:c0:f3:76:70:2f:59:02:5a:6b:d7:8d:93:11:21:af:3b:
         f8:a2:5f:bb:8d:9e:1d:5e:6f:cd:27:fe:89:aa:5a:57:f6:ae:
         81:d5:eb:9d:6d:b9:67:2b:22:b9:10:ac:1b:77:bc:85:6a:47:
         20:a2:29:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----