Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
File:                     XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft (raw, json)
Hash identifier:          4U08JAzLK8OgM1n71zuDyzSb2SMfwb/lZ6GJjxm/y04=
Subject key identifier:   72:1C:C2:1F:28:05:F6:3E:07:05:D3:31:3F:D9:27:8A:0C:FA:A7:4F
Authority key identifier: 5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32
Certificate issuer:       /CN=F3644DABAF/serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
Certificate serial:       0676
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
Manifest number:          0674
Signing time:             Sun 15 Nov 2026 02:46:45 +0000
Manifest this update:     Sun 15 Nov 2026 02:46:44 +0000
Manifest next update:     Tue 17 Nov 2026 02:46:44 +0000
Files and hashes:         1: XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl (hash: Xt/EdMA2FZa6xKSMIzI7MN6DiiBHFa4M97XnU2zloj0=)
                          2: 23D327BA3B9111EF8FF3E059762E951A.roa (hash: ZJ3xXOXKk7e28z2xIgECvNbu0qz58iXckPb6BX56yvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1654 (0x676)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3644DABAF, serialNumber=5D5C2A96B2E372B0AC47F48DBDC7D7FD1FBDB132
        Validity
            Not Before: Nov 15 02:46:44 2026 GMT
            Not After : Nov 17 02:46:44 2026 GMT
        Subject: CN=6af91d15-4f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:9d:77:66:38:da:71:e8:61:15:44:45:60:
                    17:83:f6:17:5c:68:27:39:d4:76:dc:74:92:99:80:
                    88:3a:4a:13:f3:98:42:be:af:77:f8:b8:09:a6:e0:
                    30:93:cc:54:b2:fa:eb:c3:c5:0d:62:bd:28:48:12:
                    94:b7:e4:52:f3:cd:eb:40:9e:3e:e9:37:7c:68:5b:
                    6c:14:5d:ea:a4:dd:8c:31:33:cc:24:8b:7e:6e:37:
                    86:80:bc:45:4e:52:67:56:c1:07:d8:74:4f:8f:73:
                    b2:82:05:d8:a5:42:03:62:0d:10:5f:ed:ff:0f:65:
                    48:ca:8d:5b:bd:2b:af:3c:36:80:6d:3b:18:17:c1:
                    fc:8f:71:2e:38:ee:22:1c:12:04:c8:fc:83:bb:38:
                    61:92:15:e2:3b:b2:81:f7:e2:41:61:94:4d:bb:a0:
                    e6:68:9c:26:3d:e7:19:6a:a2:8f:37:af:cb:a6:07:
                    38:98:1e:e7:8f:19:ec:79:ee:0e:07:f1:df:ef:a2:
                    08:80:de:19:f4:79:96:61:bc:80:f5:d2:ae:8e:04:
                    a5:29:45:a1:60:bf:b8:cf:82:51:42:75:c7:3c:ad:
                    10:97:de:d3:56:d6:f5:56:18:16:c3:e8:34:87:e3:
                    55:1c:cd:02:ff:03:d9:54:a4:31:96:06:af:e4:41:
                    5d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1C:C2:1F:28:05:F6:3E:07:05:D3:31:3F:D9:27:8A:0C:FA:A7:4F
            X509v3 Authority Key Identifier:
                keyid:5D:5C:2A:96:B2:E3:72:B0:AC:47:F4:8D:BD:C7:D7:FD:1F:BD:B1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XVwqlrLjcrCsR_SNvcfX_R-9sTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3644DAB/B511F7E4F24911ECA2791192F1222468/XVwqlrLjcrCsR_SNvcfX_R-9sTI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ce:1f:6c:23:d2:78:ed:83:6d:26:05:a9:ce:42:2c:0d:b3:
         24:46:17:d7:d2:7d:ed:4b:9b:2e:56:61:b8:ff:fa:32:96:fe:
         83:87:69:7e:0e:2a:61:db:5d:f4:4c:2c:c0:6f:67:74:3d:5d:
         3e:e1:c0:74:be:50:33:37:88:34:aa:fb:2a:17:a1:b3:f5:df:
         ef:ef:6c:2d:a1:29:d7:4c:51:9c:8b:90:42:95:f5:18:f5:97:
         fe:89:28:4a:bc:4d:38:37:86:ae:8d:b7:2e:72:53:e8:ff:bc:
         84:77:cb:38:80:65:de:c4:c2:c7:fe:60:f7:1b:dc:14:27:b9:
         66:2b:6a:9b:b7:af:95:ba:40:ec:2f:d3:7f:0d:fe:cf:5a:80:
         c6:68:83:df:e1:c7:d1:24:d9:36:ee:8b:df:bc:3b:61:bc:25:
         ae:f7:a8:9f:e7:8f:8a:5d:86:75:88:e6:12:6d:15:05:99:0c:
         36:a7:4f:21:12:36:5a:23:54:38:ee:39:c6:22:2f:cc:18:0e:
         73:a2:3b:60:ec:00:4d:cb:9a:83:cd:0f:0a:8d:4f:16:69:b6:
         4e:c9:6c:ec:7e:3e:0f:94:8b:7a:a4:8d:2d:a8:0c:ad:a9:0f:
         c8:11:b2:f6:26:99:e8:4c:41:31:56:9e:43:9b:32:52:c8:6e:
         f3:2b:cc:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----