Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
File:                     h-G7jI0reZLqTr7rMz_hQp5w7po.mft (raw, json)
Hash identifier:          ihVGQIBLteIg+nLSOAQy1KXTocHgcHX+asewynk5fZQ=
Subject key identifier:   DE:5A:BE:DF:6D:8F:4F:91:9D:2C:DE:D9:D1:E0:DA:CC:1E:AD:FE:76
Authority key identifier: 87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A
Certificate issuer:       /CN=F3646FFEAF/serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
Certificate serial:       06A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
Manifest number:          06A0
Signing time:             Tue 13 Oct 2026 02:40:21 +0000
Manifest this update:     Tue 13 Oct 2026 02:40:20 +0000
Manifest next update:     Thu 15 Oct 2026 02:40:20 +0000
Files and hashes:         1: h-G7jI0reZLqTr7rMz_hQp5w7po.crl (hash: lmHnc+4wGCkbQutIp6O8XF10UXBapaw/9/5M5aRIZM4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 02:40:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1696 (0x6a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3646FFEAF, serialNumber=87E1BB8C8D2B7992EA4EBEEB333FE1429E70EE9A
        Validity
            Not Before: Oct 13 02:40:20 2026 GMT
            Not After : Oct 15 02:40:20 2026 GMT
        Subject: CN=6acd9a15-44a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:98:6d:f4:db:0d:44:03:59:9a:c7:ca:7e:bf:
                    0b:c5:55:4d:93:5d:87:5d:e7:19:0b:5d:12:a3:89:
                    7f:c5:a1:02:9e:df:15:f1:ac:17:21:3e:aa:4f:95:
                    49:fb:88:02:58:28:dc:44:71:a4:65:26:51:3c:d0:
                    3f:32:a0:9f:e3:31:d2:ce:d1:f7:ff:64:66:87:39:
                    54:88:e3:e9:00:65:c0:3d:9c:6e:70:ae:25:10:fa:
                    16:d7:13:bb:10:71:12:f2:2a:f8:ea:d6:d1:c9:f3:
                    0e:74:a8:3b:4c:cc:04:1d:ac:08:23:d4:99:3a:dd:
                    9a:3e:c9:03:3f:c2:95:4d:ee:f4:4e:20:b9:78:e7:
                    60:b9:42:ba:3d:e6:31:cd:13:d3:f8:e4:58:58:5e:
                    3f:09:7f:25:bd:ab:9b:b3:e7:8f:5e:ba:44:06:de:
                    c2:46:b7:19:56:12:25:fb:7e:07:f3:1a:45:94:c9:
                    91:09:33:40:30:a6:ef:b5:82:7b:71:95:59:ad:a5:
                    97:56:eb:33:97:84:25:41:01:43:ab:b5:3f:d0:70:
                    cd:af:ab:fb:f1:7f:33:93:e5:33:d0:0d:9a:a0:92:
                    8c:2d:29:e6:6c:33:0b:57:2d:70:04:5c:24:e0:94:
                    74:c3:34:47:bb:a0:b7:31:fc:d7:8f:36:fd:30:4d:
                    e5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:5A:BE:DF:6D:8F:4F:91:9D:2C:DE:D9:D1:E0:DA:CC:1E:AD:FE:76
            X509v3 Authority Key Identifier:
                keyid:87:E1:BB:8C:8D:2B:79:92:EA:4E:BE:EB:33:3F:E1:42:9E:70:EE:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h-G7jI0reZLqTr7rMz_hQp5w7po.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3646FFE/C2CBD65AB02911EC99FA77C05A40D577/h-G7jI0reZLqTr7rMz_hQp5w7po.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e8:e0:a8:80:3a:01:93:d1:67:9f:93:bb:ee:d5:75:9a:eb:
         75:28:f3:6f:57:aa:36:da:ae:f7:57:de:57:86:88:77:df:0a:
         d3:cb:68:49:f2:58:33:ff:cd:28:86:18:bc:d4:64:36:98:b5:
         75:14:51:9b:36:25:b6:b1:37:2f:24:1d:be:3a:58:0a:3e:32:
         90:04:70:ad:c6:b6:99:ba:b1:ce:ae:8c:79:81:a5:eb:d7:64:
         ed:be:87:54:ca:b5:29:78:e8:d1:b4:4a:f5:b2:f3:9c:1b:62:
         38:ed:f9:f1:f0:d0:83:ef:1d:97:29:50:9c:fa:94:21:2c:81:
         6f:61:4a:a8:1c:03:4c:cb:b9:f9:6d:98:7d:fd:fd:cb:9b:eb:
         88:2d:55:3b:62:c9:9f:dc:88:ad:b6:f1:ef:92:e3:df:c7:74:
         f5:25:dc:2f:30:12:96:77:9d:0f:e7:d8:6f:ec:ad:8b:69:5e:
         8d:ec:21:22:94:7c:ea:4e:4b:c2:4d:f3:92:15:86:d5:bb:43:
         b6:d3:f7:14:80:c7:8d:2b:f5:33:44:90:b9:53:88:66:dd:1e:
         61:01:bb:79:a0:23:78:d6:12:e4:b6:52:eb:e8:2d:9f:78:35:
         82:55:a6:19:81:59:b2:03:eb:8c:8d:c3:18:6c:78:ca:a5:bd:
         65:69:11:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBqAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDZGRkVBRjExMC8GA1UEBRMoODdFMUJCOEM4RDJCNzk5MkVBNEVCRUVCMzMzRkUx
NDI5RTcwRUU5QTAeFw0yNjEwMTMwMjQwMjBaFw0yNjEwMTUwMjQwMjBaMBgxFjAU
BgNVBAMTDTZhY2Q5YTE1LTQ0YTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDimG302w1EA1max8p+vwvFVU2TXYdd5xkLXRKjiX/FoQKe3xXxrBchPqpP
lUn7iAJYKNxEcaRlJlE80D8yoJ/jMdLO0ff/ZGaHOVSI4+kAZcA9nG5wriUQ+hbX
E7sQcRLyKvjq1tHJ8w50qDtMzAQdrAgj1Jk63Zo+yQM/wpVN7vROILl452C5Qro9
5jHNE9P45FhYXj8JfyW9q5uz549eukQG3sJGtxlWEiX7fgfzGkWUyZEJM0Awpu+1
gntxlVmtpZdW6zOXhCVBAUOrtT/QcM2vq/vxfzOT5TPQDZqgkowtKeZsMwtXLXAE
XCTglHTDNEe7oLcx/NePNv0wTeXBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3lq+
322PT5GdLN7Z0eDazB6t/nYwHwYDVR0jBBgwFoAUh+G7jI0reZLqTr7rMz/hQp5w
7powDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ2RkZFL0MyQ0JENjVBQjAyOTExRUM5OUZBNzdDMDVBNDBENTc3L2gtRzdq
STByZVpMcVRyN3JNel9oUXA1dzdwby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2gtRzdqSTByZVpMcVRyN3JNel9oUXA1dzdwby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDZGRkUvQzJDQkQ2NUFCMDI5MTFFQzk5RkE3N0MwNUE0
MEQ1NzcvaC1HN2pJMHJlWkxxVHI3ck16X2hRcDV3N3BvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBr6OCogDoBk9Fnn5O77tV1mut1KPNv
V6o22q73V95Xhoh33wrTy2hJ8lgz/80ohhi81GQ2mLV1FFGbNiW2sTcvJB2+OlgK
PjKQBHCtxraZurHOrox5gaXr12TtvodUyrUpeOjRtEr1svOcG2I47fnx8NCD7x2X
KVCc+pQhLIFvYUqoHANMy7n5bZh9/f3Lm+uILVU7Ysmf3IittvHvkuPfx3T1Jdwv
MBKWd50P59hv7K2LaV6N7CEilHzqTkvCTfOSFYbVu0O20/cUgMeNK/UzRJC5U4hm
3R5hAbt5oCN41hLktlLr6C2feDWCVaYZgVmyA+uMjcMYbHjKpb1laRFL
-----END CERTIFICATE-----