Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
File:                     tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft (raw, json)
Hash identifier:          giWvmS0oedbtL2y9CwajA+eEkIoHrHhN0ssqt7lENAI=
Subject key identifier:   8A:41:EB:C4:C5:80:18:8B:DB:CF:3C:0E:64:F4:64:94:7A:30:92:31
Authority key identifier: B6:7E:CB:16:38:71:0A:F3:1E:6E:2A:8F:BD:D5:53:95:75:25:CF:F4
Certificate issuer:       /CN=F364563FAF/serialNumber=B67ECB1638710AF31E6E2A8FBDD553957525CFF4
Certificate serial:       01BB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
Manifest number:          01B7
Signing time:             Thu 24 Sep 2026 05:02:00 +0000
Manifest this update:     Thu 24 Sep 2026 05:01:59 +0000
Manifest next update:     Sat 26 Sep 2026 05:01:59 +0000
Files and hashes:         1: tn7LFjhxCvMebiqPvdVTlXUlz_Q.crl (hash: rFzgElAmTcGtFdoK3c6l4MPHdFhpBbirJNeLLzdjZRM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:01:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364563FAF, serialNumber=B67ECB1638710AF31E6E2A8FBDD553957525CFF4
        Validity
            Not Before: Sep 24 05:01:59 2026 GMT
            Not After : Sep 26 05:01:59 2026 GMT
        Subject: CN=6ab4aec8-e9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f4:f4:ff:c0:c0:5a:39:6d:0a:b5:c0:a6:c4:
                    88:2b:f1:4e:a4:dc:92:86:2a:9f:2f:70:0e:d4:db:
                    bb:b4:50:93:4b:f3:b0:2c:8e:81:1b:3a:78:fa:19:
                    59:78:67:38:de:3a:64:82:73:40:04:15:82:99:78:
                    f7:90:c0:2c:dc:57:80:2e:a4:5b:70:51:89:fc:13:
                    a8:00:a6:14:9b:bf:af:a3:c5:84:05:42:bf:9c:70:
                    9b:d2:5a:69:f9:55:dc:1f:4d:2a:5a:fe:ac:6f:2d:
                    33:67:cb:35:83:b7:7c:4e:c4:fd:60:99:65:64:8a:
                    57:df:52:d2:2b:33:80:8e:57:a5:1f:40:09:e5:aa:
                    bc:f7:7d:2d:32:be:76:f4:50:99:9c:ea:15:57:98:
                    3f:c9:a8:f7:b6:90:1c:31:20:86:ea:58:3b:8b:86:
                    d0:5b:fe:3e:4b:09:95:f8:26:7a:0a:47:e5:26:7c:
                    77:2f:18:5e:3b:65:5e:f4:9e:dc:d2:e6:7c:34:68:
                    58:dd:d6:3d:ba:bd:b0:af:91:63:c4:fe:eb:26:c9:
                    e0:e8:57:f8:6e:ee:39:47:0e:cf:25:64:c9:12:ca:
                    7d:69:ad:3f:bf:76:37:98:9c:4f:6e:c8:d0:7d:90:
                    69:6c:42:53:10:84:4c:6c:d5:15:c6:c1:04:64:91:
                    37:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:41:EB:C4:C5:80:18:8B:DB:CF:3C:0E:64:F4:64:94:7A:30:92:31
            X509v3 Authority Key Identifier:
                keyid:B6:7E:CB:16:38:71:0A:F3:1E:6E:2A:8F:BD:D5:53:95:75:25:CF:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tn7LFjhxCvMebiqPvdVTlXUlz_Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364563F/7E79C460686A11F0ACC5D07FDAE4EC9C/tn7LFjhxCvMebiqPvdVTlXUlz_Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:59:b8:b0:35:11:87:e6:54:f7:70:6e:b3:d5:1a:c5:23:51:
         46:61:db:ef:9d:f2:e8:79:4a:f5:09:b0:ef:95:66:8e:c1:37:
         ba:1d:b4:12:47:f1:cc:8c:bb:f7:aa:3b:bb:ba:25:51:78:18:
         b8:84:27:a8:df:42:2f:c4:cf:a2:35:d3:56:d3:69:ba:f6:a8:
         6e:66:f0:6e:00:7e:44:29:8b:50:c4:f9:a8:03:aa:48:46:d6:
         81:f4:43:d8:c0:cd:fe:39:82:f6:f6:d9:7a:f1:d6:17:ba:78:
         90:87:f4:35:54:8f:7d:29:63:75:0c:2a:d7:e5:11:79:71:c1:
         f8:ed:aa:21:1f:55:2b:37:67:bb:3d:15:50:4e:1b:01:0b:41:
         0e:4b:b3:b3:90:dd:15:e6:0a:a9:b4:73:9b:80:de:9f:f7:ff:
         85:a0:bc:b5:d6:b2:3f:ad:87:74:2e:c1:c3:83:64:1d:de:04:
         8b:a2:74:47:aa:8e:2f:68:19:a4:f0:f0:07:82:1f:30:2f:a6:
         c2:24:70:e0:94:7e:9e:71:36:d8:38:f6:6e:89:79:52:be:43:
         50:ca:07:4c:45:be:37:09:13:fd:27:62:5b:12:22:13:4d:47:
         dc:00:c8:f6:54:35:5a:5c:46:22:9a:47:50:f2:44:af:69:df:
         50:1a:3d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----