Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
File:                     UpunS83yaGnfBI9JzaZV3lnZgeE.mft (raw, json)
Hash identifier:          znoxhRVcX4I0UcOVMCb0DCUlBSUptHAC8kmKLkiMrdk=
Subject key identifier:   E0:C3:E1:A3:1F:85:32:5C:1F:E8:D6:B3:1E:B2:62:55:3E:19:21:F3
Authority key identifier: 52:9B:A7:4B:CD:F2:68:69:DF:04:8F:49:CD:A6:55:DE:59:D9:81:E1
Certificate issuer:       /CN=F36596DEAF/serialNumber=529BA74BCDF26869DF048F49CDA655DE59D981E1
Certificate serial:       0151
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
Manifest number:          0150
Signing time:             Thu 24 Sep 2026 05:11:40 +0000
Manifest this update:     Thu 24 Sep 2026 05:11:39 +0000
Manifest next update:     Sat 26 Sep 2026 05:11:39 +0000
Files and hashes:         1: UpunS83yaGnfBI9JzaZV3lnZgeE.crl (hash: XZCZ+HYeD7nSl+iC06zWFhT+w0c5R7W1nZdi8L3H8qk=)
                          2: 6FAF0A32B3C711F0B62E26D6DAE4EC9C.roa (hash: WZmCRWW8TtxV2D+03+Gg2hGc4lK2ghh6H+qHzsYjVjY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 05:11:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36596DEAF, serialNumber=529BA74BCDF26869DF048F49CDA655DE59D981E1
        Validity
            Not Before: Sep 24 05:11:39 2026 GMT
            Not After : Sep 26 05:11:39 2026 GMT
        Subject: CN=6ab4b10b-1fcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ca:71:e0:a9:70:6e:5a:12:cb:26:91:48:cf:
                    db:08:b9:00:65:c9:94:3a:ec:70:86:5f:84:a5:83:
                    8b:74:22:93:cc:75:63:11:31:43:f2:71:85:5e:9e:
                    45:12:bf:22:01:6d:c0:86:71:45:8f:d1:2e:14:55:
                    25:b6:82:bb:9e:0a:3e:14:2f:ec:1a:2f:a0:10:64:
                    65:ee:cc:99:f9:e1:9c:3e:26:8c:31:15:17:fd:d9:
                    14:46:69:58:c4:01:aa:cc:83:34:f4:7f:e0:72:bc:
                    3d:d0:1a:5a:25:21:03:3e:ff:4f:57:40:a8:3e:56:
                    36:f1:6e:ff:2d:1b:e3:18:a7:36:8d:83:89:4f:82:
                    03:fa:c3:08:86:e9:b5:4e:30:51:1e:bb:c9:d1:5a:
                    d2:eb:19:71:83:54:1d:00:f0:0f:4d:c9:69:c2:f7:
                    c6:de:cb:42:cd:12:d8:85:48:1c:46:80:45:93:72:
                    4b:c3:d7:05:e8:40:83:4f:d2:a9:d5:eb:83:36:3c:
                    a8:bd:06:b2:42:bf:13:e0:ac:93:3e:2b:fd:27:67:
                    9e:a4:49:24:17:b2:7c:dc:c7:17:33:3c:fe:cb:40:
                    0c:b0:fa:b7:81:a0:75:b2:2b:6e:59:20:1a:b1:6f:
                    ff:d3:ad:59:06:87:02:bd:64:a9:ec:5b:73:c1:e7:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C3:E1:A3:1F:85:32:5C:1F:E8:D6:B3:1E:B2:62:55:3E:19:21:F3
            X509v3 Authority Key Identifier:
                keyid:52:9B:A7:4B:CD:F2:68:69:DF:04:8F:49:CD:A6:55:DE:59:D9:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UpunS83yaGnfBI9JzaZV3lnZgeE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36596DE/965DA4FAB33A11F097B64ACDDAE4EC9C/UpunS83yaGnfBI9JzaZV3lnZgeE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:ae:47:7d:68:b0:4d:58:27:fc:fb:0c:c4:3e:24:f8:5f:0e:
         4b:c4:cb:09:53:c7:aa:25:04:d1:04:73:8d:ec:0a:2c:e3:46:
         bb:ca:7d:2d:96:58:85:86:99:52:3d:49:f2:c9:9c:1e:75:4c:
         7e:36:d0:83:1c:b7:c2:1d:7d:8a:85:29:d4:b5:2e:0a:0d:48:
         07:64:1c:24:db:39:d0:52:9c:17:ec:40:7b:fe:66:6f:36:42:
         9d:be:bb:5b:b7:19:25:f6:0e:60:0d:a9:b8:52:ba:8c:f9:54:
         9e:19:ab:09:38:5a:6b:14:e6:35:43:24:60:c5:3c:c3:b0:26:
         9e:8d:80:cf:24:f4:2d:ea:92:19:a6:fc:67:39:9f:f6:83:67:
         96:cd:6e:82:a2:5b:0f:eb:64:e8:09:8b:72:c3:05:1f:6a:9e:
         f3:ca:02:17:7f:1a:26:99:ba:6f:2c:3c:fb:e0:41:0a:85:35:
         fb:0c:d6:dc:71:b6:d3:db:14:6d:d3:64:ce:f6:b2:9c:ca:09:
         69:9e:bf:bf:71:a8:11:2f:d6:33:42:f2:41:73:02:c9:d2:16:
         78:b3:ee:1c:32:c1:a7:c3:8f:e2:42:76:8d:53:56:9b:97:a2:
         1c:ad:d3:f7:d0:b0:32:05:f2:6b:ad:d1:ea:49:08:be:c9:43:
         f2:7b:57:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----