Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
File:                     gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft (raw, json)
Hash identifier:          SAx60CwUqEls+2VkFRD2LOe68Kw+QXKq5qEUnv5otBg=
Subject key identifier:   AD:49:82:68:A9:0F:25:EA:9C:A0:85:F3:D0:2C:35:26:77:C1:32:FF
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Certificate issuer:       /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial:       03DD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
Manifest number:          03D4
Signing time:             Sat 26 Sep 2026 04:02:40 +0000
Manifest this update:     Sat 26 Sep 2026 04:02:39 +0000
Manifest next update:     Mon 28 Sep 2026 04:02:39 +0000
Files and hashes:         1: gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl (hash: 30FHiXxmVA8FCZobrduPNHnpmAt6rOlYAOaFYg2hvtQ=)
                          2: 2AA9064EA65E11EF9B4C49B3762E951A.roa (hash: l3UjS75Wddi3tQ56JCO9mzw04osMIVHGG4lmyDGrGpo=)
                          3: 12F6BC8EA65F11EFBD05BFB7762E951A.roa (hash: As2odCsPm4vEHElY0hwwZoUwDbYLoyLhd4dK1enI6Hg=)
                          4: 3566B206A65F11EFA911EDB9762E951A.roa (hash: BmgLIdkjAVVpbq4Muw+sVecnxg7GBO2Ss9+TP+TqAns=)
                          5: B2F145D4A65E11EF8E98B0B5762E951A.roa (hash: D8cU2N+EHK3tg0aoMbKQ1AquxfaJi2Vqr4i3VqzQqrQ=)
                          6: 2DD1E2A2C11811F09F7B83BEDAE4EC9C.roa (hash: wvL1zVkk4PrEbO1hOI+/jbrgVbiJrtyBQ/7aczeZOJg=)
                          7: 615FFEA4A65E11EF903E76B3762E951A.roa (hash: AaKVjZQe73GcXnsIAj31QxOm6ROcXoPa0qfMAokaUHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654AD1AF, serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
        Validity
            Not Before: Sep 26 04:02:39 2026 GMT
            Not After : Sep 28 04:02:39 2026 GMT
        Subject: CN=6ab743e0-fdb1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:1a:d2:14:42:33:64:90:33:a6:fe:83:3b:e1:
                    1d:cd:5b:c9:19:cd:5f:98:e2:a5:c7:62:c9:21:e7:
                    95:21:df:45:80:de:19:1f:30:77:0c:c7:10:74:5a:
                    86:37:18:c1:6f:95:07:dc:94:91:72:cd:30:31:95:
                    b8:5c:e8:ec:d1:f2:74:a1:44:30:14:99:7d:cb:5c:
                    20:fb:82:b5:56:51:08:a1:85:70:6f:f9:c7:db:9f:
                    2b:8f:87:e9:07:30:6b:cc:13:59:4a:b9:26:6a:68:
                    5e:53:05:1c:42:6a:b0:68:94:7c:41:97:40:f9:88:
                    73:7c:03:05:46:3a:62:5b:69:3a:91:d8:76:b9:f3:
                    72:7a:c9:e5:74:d5:c2:09:23:7f:38:75:f1:77:1f:
                    64:ac:d6:84:d7:7d:a0:48:7b:2a:ce:2b:66:2e:b1:
                    d0:c5:9d:34:33:22:8c:ef:9b:75:14:c9:c3:88:06:
                    7e:b2:c2:2f:9f:9c:5c:0c:59:c0:17:35:ae:93:53:
                    a8:36:71:b8:ba:96:a1:34:3a:03:01:61:f8:44:e8:
                    a9:c9:8e:a5:be:48:b4:9a:df:d0:67:9c:8e:b6:df:
                    d8:cb:c8:87:53:de:0e:0a:ba:9d:3a:15:8f:67:79:
                    ec:05:f9:46:c9:66:3e:6d:22:08:d0:3d:34:5e:bd:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:49:82:68:A9:0F:25:EA:9C:A0:85:F3:D0:2C:35:26:77:C1:32:FF
            X509v3 Authority Key Identifier:
                keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5f:f1:6d:74:02:c9:10:c6:bc:eb:b0:5a:fe:56:cc:37:24:
         e6:0e:d7:69:9b:37:c7:5b:d5:44:d0:84:10:af:28:dc:06:5e:
         35:4e:34:ff:fc:a0:8a:32:a5:2f:f1:87:17:2a:e3:04:cb:da:
         54:ec:9c:96:95:5e:f4:aa:c7:fa:9f:ea:9b:0d:ca:d4:9c:e9:
         f7:f6:29:72:5b:b1:84:23:07:a3:6b:6e:0c:0c:58:1a:02:62:
         c6:9a:b0:75:6e:a9:af:9d:5c:ad:1f:94:ed:7d:71:bb:a5:ac:
         5c:0d:bd:71:04:f8:c5:31:cf:5e:4b:85:b6:08:2f:f0:4c:16:
         89:02:31:c5:92:88:b3:48:98:7a:24:70:e3:c6:bc:eb:0e:bb:
         54:41:85:b4:68:5f:fc:3d:3a:bc:34:5e:ab:b4:8a:57:90:0a:
         29:d3:84:fe:81:15:d2:8c:50:91:be:87:4f:08:c7:30:03:b9:
         8b:c3:8e:cb:43:49:19:59:66:23:20:95:0b:ab:85:0b:95:8f:
         37:a9:a9:fe:59:62:1b:20:82:f1:9a:71:67:88:ef:5b:dd:ef:
         2f:56:af:72:f2:b5:90:7d:49:72:62:21:cc:44:5f:4d:4d:46:
         ea:fb:ad:c2:ce:a5:1a:a7:10:f6:bd:43:71:1f:1b:cf:41:33:
         a5:12:58:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----