Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
File:                     SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft (raw, json)
Hash identifier:          19MUT+rBQ1zXcSHCFVouxuL2Xx/51nIHUEByFLgkfnI=
Subject key identifier:   4C:B5:D0:77:DB:52:A8:4A:33:A5:32:9B:E5:38:8F:32:9D:FA:89:CB
Authority key identifier: 4A:6A:66:3E:7B:46:90:35:3D:2D:F7:B9:50:C9:80:97:C2:80:D5:98
Certificate issuer:       /CN=F3654A44AF/serialNumber=4A6A663E7B4690353D2DF7B950C98097C280D598
Certificate serial:       0590
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
Manifest number:          0590
Signing time:             Sat 14 Nov 2026 03:10:54 +0000
Manifest this update:     Sat 14 Nov 2026 03:10:53 +0000
Manifest next update:     Mon 16 Nov 2026 03:10:53 +0000
Files and hashes:         1: SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl (hash: AZ72iH5uUfbAIjNZbtmV26S//o4Da4eAKNzq0sUHeN8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1424 (0x590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654A44AF, serialNumber=4A6A663E7B4690353D2DF7B950C98097C280D598
        Validity
            Not Before: Nov 14 03:10:53 2026 GMT
            Not After : Nov 16 03:10:53 2026 GMT
        Subject: CN=6af7d13e-96f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9e:96:4a:4f:e6:6c:bd:a7:8c:67:20:b2:8c:
                    0d:16:fb:4b:e0:f8:16:d1:c7:f3:60:26:52:a6:3e:
                    bf:ce:d2:9e:34:1a:3a:5b:2b:57:d8:59:c4:fd:e6:
                    1c:f6:8c:a1:f9:ec:95:bb:86:60:c5:7d:4d:5f:e1:
                    a4:1a:3d:4c:6a:ef:46:c4:34:cf:c8:da:ea:42:3b:
                    94:54:d6:9f:11:ec:87:4e:7d:5e:af:52:2f:30:6c:
                    0a:37:22:39:1b:24:6a:e1:ac:03:10:24:4b:4f:21:
                    87:52:2e:7b:f2:02:ad:fe:20:7b:36:b1:fc:85:bb:
                    e1:80:47:39:df:cd:bd:ef:6d:0a:12:6d:d4:34:f1:
                    a5:19:e7:db:56:ad:13:6e:cf:8c:0e:dd:8a:74:b8:
                    4b:df:d9:1b:a3:5a:7f:d8:f0:52:fc:0f:fa:83:24:
                    14:16:f9:fb:2d:c5:7a:f9:0e:62:b7:d3:af:de:1a:
                    38:20:45:1a:2b:28:f4:49:ec:08:3c:6f:ec:c1:54:
                    2a:38:1a:3a:5e:4d:76:d3:41:69:a2:2c:58:2d:88:
                    42:98:47:d0:da:b1:34:45:ce:77:31:27:73:86:e5:
                    46:3b:87:90:eb:14:40:14:f6:70:d3:6c:33:14:4c:
                    79:9d:2b:92:d8:21:2a:7d:98:2f:8b:ed:62:a3:aa:
                    b6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B5:D0:77:DB:52:A8:4A:33:A5:32:9B:E5:38:8F:32:9D:FA:89:CB
            X509v3 Authority Key Identifier:
                keyid:4A:6A:66:3E:7B:46:90:35:3D:2D:F7:B9:50:C9:80:97:C2:80:D5:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654A44/4A23DA369CA511ED8D0D4D9AF1222468/SmpmPntGkDU9Lfe5UMmAl8KA1Zg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9b:40:3d:58:e4:d7:2c:f9:89:bf:ed:51:88:53:11:8c:e3:
         b3:c6:7e:e6:b1:ce:f8:9f:39:44:ad:06:6e:a0:6a:3e:7e:3e:
         c6:99:e6:51:c7:41:23:8e:c7:cd:31:eb:6e:c5:00:6e:62:f9:
         95:33:4e:62:26:f2:a0:c5:30:10:ec:d6:99:0c:29:84:17:cf:
         55:d1:4c:9b:32:7d:eb:4d:73:e3:f3:51:56:0b:5a:f2:ee:90:
         1c:39:fc:2c:82:e7:d7:f3:81:c1:6a:1c:7e:b3:c7:f2:43:8f:
         aa:bc:a8:c6:11:0b:61:dc:36:33:23:86:7f:67:c7:1d:f8:49:
         b1:ba:7d:af:e0:5a:75:9d:af:10:08:84:f0:46:c3:6a:40:e8:
         a3:9c:d3:35:06:5f:5c:12:f2:29:b6:9c:98:53:63:e3:1f:a2:
         3f:83:da:f8:97:f3:8d:6f:d0:cd:ca:6c:69:af:5a:9e:dd:c6:
         31:f2:18:f2:29:1a:d4:10:25:40:1b:8e:a4:27:a9:f7:b1:ee:
         ca:cd:60:dc:30:2b:03:41:83:99:bc:43:f8:64:ee:38:c8:69:
         5f:3b:e4:36:10:94:a7:0d:62:32:b9:cb:a1:9e:47:59:f8:cd:
         1c:1b:4b:70:11:b3:44:03:40:97:f7:4c:2e:90:78:1c:f8:44:
         82:2f:f6:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----