Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
File:                     4sEXgjtyd70rre-ytXfGz5x2TY4.mft (raw, json)
Hash identifier:          VR9/aFJZV7PS02L9aEpjZyYmFLhy2kK10owDZC9nt2c=
Subject key identifier:   F9:FA:6E:7A:8D:CD:6D:C1:4E:2A:E3:73:30:09:35:A5:D5:2C:1A:CF
Authority key identifier: E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
Certificate issuer:       /CN=F36592B4AF/serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
Certificate serial:       04C9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
Manifest number:          04C9
Signing time:             Fri 25 Sep 2026 03:31:49 +0000
Manifest this update:     Fri 25 Sep 2026 03:31:48 +0000
Manifest next update:     Sun 27 Sep 2026 03:31:48 +0000
Files and hashes:         1: 4sEXgjtyd70rre-ytXfGz5x2TY4.crl (hash: vqSniZhg4huUhAGm7Xf9qGivDxIiTPbNdw+Ywf3jeUo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 03:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1225 (0x4c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36592B4AF, serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
        Validity
            Not Before: Sep 25 03:31:48 2026 GMT
            Not After : Sep 27 03:31:48 2026 GMT
        Subject: CN=6ab5eb25-11bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:e4:b5:6a:5b:12:37:a9:9b:d0:97:70:10:fb:
                    25:eb:d5:90:bd:fa:75:e2:aa:36:75:e0:76:ff:88:
                    4c:7b:15:b4:62:db:2c:cd:98:82:38:96:fe:e9:a1:
                    90:44:49:51:85:06:e6:52:60:ef:f9:f1:24:29:d2:
                    2b:e8:fd:5f:06:fe:a6:04:68:98:16:d3:9c:41:28:
                    7b:27:90:84:b8:4e:7f:a0:e3:f3:c6:60:46:86:7e:
                    25:59:5b:42:f2:13:e3:00:ce:f8:aa:e0:aa:5d:25:
                    d9:26:12:c3:2e:b8:9a:9f:76:8f:72:c7:0a:b5:8d:
                    44:75:6b:b3:5f:ec:6e:3a:19:ed:5a:fa:c1:ec:15:
                    ee:88:03:42:2a:13:a3:6b:d7:76:e3:24:dd:ed:72:
                    08:07:ac:47:57:2c:4c:3a:17:00:0c:a4:d8:b9:55:
                    07:5e:a8:4d:b4:d8:96:07:70:0b:7c:ac:1e:3b:81:
                    e1:0b:fa:08:59:86:a8:3e:76:6e:7f:0e:fc:a7:f2:
                    18:60:fa:2d:18:1d:d4:8a:52:0f:c6:2f:93:3d:bd:
                    2e:6e:4b:96:24:6e:2b:3b:15:0e:c5:1a:5c:7b:4a:
                    76:d8:db:4d:5f:80:ab:8f:83:43:a9:32:26:9f:4f:
                    3b:1e:56:db:7a:f8:4f:c3:b4:e3:de:33:6d:ba:bc:
                    23:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:FA:6E:7A:8D:CD:6D:C1:4E:2A:E3:73:30:09:35:A5:D5:2C:1A:CF
            X509v3 Authority Key Identifier:
                keyid:E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:6c:7b:cb:7a:60:dd:a6:a4:cb:4c:7d:fe:2e:7c:a6:ad:2a:
         8c:25:68:a4:a8:d4:29:ce:50:9d:89:28:9b:9d:08:cf:05:5c:
         c5:07:57:41:a0:b5:72:48:ed:68:0d:44:fd:68:71:d2:41:99:
         cd:09:d1:6b:cb:40:51:73:48:86:ea:5c:da:61:45:9b:2a:51:
         05:80:48:d6:da:19:eb:a6:40:61:51:11:03:59:74:ac:db:f2:
         f5:c9:92:c5:40:18:1a:82:b1:ce:c4:4b:7e:ca:0e:a6:3a:c1:
         a1:1b:b4:16:91:1a:26:fe:96:fc:49:c4:55:c9:99:26:c2:77:
         d5:c1:6e:a2:ed:8e:41:b8:a7:44:50:f8:96:e0:b0:8f:f4:da:
         d0:94:aa:0c:4b:a4:73:6e:41:a5:78:b1:58:7c:f4:bd:be:a9:
         1a:89:de:7d:7a:fc:14:b4:fe:f3:6a:e4:bb:a5:8a:d3:12:9e:
         19:c5:5a:e7:22:b4:7e:10:59:e0:9c:4d:07:9c:13:1c:0c:66:
         61:b3:65:68:9d:29:8e:86:43:d5:92:4e:8a:f3:f9:6d:90:a6:
         2f:f7:41:ef:cc:ec:0a:14:c2:0d:05:4d:94:1e:65:c5:de:43:
         a5:7d:98:50:eb:91:96:62:7e:1f:de:6c:2c:8c:2b:5e:67:4e:
         8e:d6:1d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----