Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
File:                     XzgIgB6hYgLrL2fOP2WA29PCwuI.mft (raw, json)
Hash identifier:          LP1ALobpgnboD22nxcWwVQllhtr5bTJGGJJEbnHUQ7s=
Subject key identifier:   BB:64:46:57:9C:35:FC:40:DF:65:0A:95:C3:8E:5F:F9:08:48:AC:06
Authority key identifier: 5F:38:08:80:1E:A1:62:02:EB:2F:67:CE:3F:65:80:DB:D3:C2:C2:E2
Certificate issuer:       /CN=F3652A25AF/serialNumber=5F3808801EA16202EB2F67CE3F6580DBD3C2C2E2
Certificate serial:       38
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
Manifest number:          37
Signing time:             Thu 24 Sep 2026 05:47:59 +0000
Manifest this update:     Thu 24 Sep 2026 05:47:58 +0000
Manifest next update:     Sat 26 Sep 2026 05:47:58 +0000
Files and hashes:         1: XzgIgB6hYgLrL2fOP2WA29PCwuI.crl (hash: OibxPRlAX7Tk8NfTYtd+E43qClqPJAtdH9ETgY9U0Ik=)
                          2: B910CB028E6E11F1845A6602CF1D38B0.roa (hash: w0divEnGeKhPaNpp5pSAeh2v6YZz+bPKKZA6O6oQeAo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3652A25AF, serialNumber=5F3808801EA16202EB2F67CE3F6580DBD3C2C2E2
        Validity
            Not Before: Sep 24 05:47:58 2026 GMT
            Not After : Sep 26 05:47:58 2026 GMT
        Subject: CN=6ab4b98f-467a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:6b:00:58:ff:6e:0e:a9:96:bb:bf:53:5c:a7:
                    dd:8b:11:a3:00:5d:1b:90:99:61:ce:b9:7c:87:b6:
                    63:0e:55:a2:93:6e:81:f8:86:0e:db:d9:d3:b0:95:
                    60:55:18:b1:99:7c:a6:f5:bd:79:ea:ec:fd:a6:fb:
                    21:00:d1:e8:46:99:f7:f7:61:66:52:6d:0e:9a:83:
                    41:43:3c:0d:06:c6:c6:42:ce:2e:46:df:83:4c:45:
                    e2:6d:29:9e:d4:96:69:64:d1:74:13:e6:5c:8f:7a:
                    38:b4:26:14:56:f9:3d:a9:ab:11:dd:11:c0:cd:8b:
                    05:98:43:f5:4b:4a:ba:91:46:18:5a:d1:ee:ee:34:
                    4e:27:41:d7:68:8c:74:d3:08:63:be:b5:cf:aa:d1:
                    6b:33:40:d1:61:57:1f:3d:74:d2:dc:e4:29:a2:cb:
                    a0:5b:81:ce:7e:87:9f:78:c0:74:b3:8d:dd:73:89:
                    91:81:e7:65:58:d6:48:8c:c9:6d:2d:c8:d6:90:b2:
                    05:95:21:96:6b:34:c8:4b:c3:b8:57:bf:e3:6e:71:
                    30:57:b2:c3:ed:5b:6e:02:77:5b:5a:16:2d:06:1a:
                    08:05:87:4f:02:99:9b:d3:cb:07:24:51:6b:93:af:
                    67:c1:18:15:67:ea:21:7c:4e:0c:a1:36:f3:4b:06:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:64:46:57:9C:35:FC:40:DF:65:0A:95:C3:8E:5F:F9:08:48:AC:06
            X509v3 Authority Key Identifier:
                keyid:5F:38:08:80:1E:A1:62:02:EB:2F:67:CE:3F:65:80:DB:D3:C2:C2:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/XzgIgB6hYgLrL2fOP2WA29PCwuI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3652A25/E90D653E8E6B11F1A03034F2CE1D38B0/XzgIgB6hYgLrL2fOP2WA29PCwuI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:8d:e8:21:30:30:c1:40:da:a0:96:d8:8c:90:4b:f8:71:44:
         e8:ae:b1:fa:f9:fc:63:34:8b:6f:14:50:8e:9a:d1:d5:14:1b:
         53:d0:c8:07:94:59:28:f9:7e:6f:1e:92:e8:0d:3c:28:f8:37:
         c4:ff:36:36:7a:1c:9c:75:76:45:a9:93:20:13:02:f9:15:ce:
         06:51:18:52:33:81:e5:dc:44:ab:6e:55:fa:4a:d2:85:e6:d3:
         e4:b9:2b:2d:81:a9:6a:e2:37:27:5d:f0:7a:7f:55:af:78:66:
         e1:8d:08:3f:a0:c0:33:ce:b6:c1:f4:19:9a:bb:83:4d:cb:03:
         3d:25:14:52:b1:ac:34:40:ba:56:5d:cf:04:8d:5a:8c:e4:a9:
         54:a7:9b:f0:4b:9f:f2:b3:9e:b4:78:a0:7f:21:c0:4b:33:7b:
         d2:e5:f7:71:ab:7b:ca:41:5b:bf:b8:f7:1e:93:1f:14:94:fc:
         87:27:c9:f2:da:68:4d:dc:5b:68:4b:8e:dd:4e:23:16:04:a6:
         b3:65:6c:08:9a:7b:24:81:a4:42:da:7a:dc:82:9e:a7:f2:46:
         10:45:19:8d:d2:bd:a8:c4:66:3f:59:1c:5f:e3:72:e3:24:90:
         79:e9:b1:d1:cd:df:53:db:d4:34:11:e5:3d:87:18:d7:36:ab:
         9a:fa:40:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----