Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
File:                     UsjVbfSu4mPoplESmKYZzpjIrA4.mft (raw, json)
Hash identifier:          hRSkqRUCGLIvLuwX+yFSMKdTKqNv81TcDeGe8eISC2Y=
Subject key identifier:   68:52:9A:83:3A:81:30:CD:A9:9D:BF:F0:22:38:AE:D6:48:1B:7C:EC
Authority key identifier: 52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E
Certificate issuer:       /CN=F365BF9EAF/serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
Certificate serial:       0554
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
Manifest number:          0554
Signing time:             Sat 14 Nov 2026 03:18:23 +0000
Manifest this update:     Sat 14 Nov 2026 03:18:22 +0000
Manifest next update:     Mon 16 Nov 2026 03:18:22 +0000
Files and hashes:         1: UsjVbfSu4mPoplESmKYZzpjIrA4.crl (hash: DOhBVezBCzZ5VVfOpMjoAa/RFeOqSJAO5w8TY+yScFE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1364 (0x554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BF9EAF, serialNumber=52C8D56DF4AEE263E8A6511298A619CE98C8AC0E
        Validity
            Not Before: Nov 14 03:18:22 2026 GMT
            Not After : Nov 16 03:18:22 2026 GMT
        Subject: CN=6af7d2ff-f488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6e:92:cb:2c:66:fb:19:8c:d1:86:23:bf:f9:
                    42:e8:76:bd:b1:e4:aa:10:7b:73:78:c4:cf:12:df:
                    82:6d:81:4e:d8:10:d5:f7:04:34:fe:a5:f5:d0:e7:
                    f5:9c:0b:cf:26:49:3f:6c:51:8b:b9:b9:19:f0:d2:
                    87:66:be:63:a6:bb:13:e9:2f:3b:4d:77:49:e2:7d:
                    c6:b2:78:6f:67:b0:7b:ec:55:18:a7:c0:95:8f:3f:
                    5c:0c:d7:23:85:fc:2c:84:bc:ef:85:cd:5e:f5:cf:
                    59:fa:5a:c9:3e:e0:8b:15:8c:b9:3b:58:40:94:07:
                    41:ef:e9:38:06:bc:d1:26:98:57:bd:60:d6:57:96:
                    ca:ee:ff:0f:ee:6f:92:b5:1d:15:03:95:a4:78:71:
                    81:a9:e9:a8:aa:42:10:e2:bb:0e:33:11:0e:5c:25:
                    f4:bb:ec:82:e7:0d:54:f4:76:2b:49:2b:81:6d:52:
                    d0:48:f9:7c:2c:9f:4c:50:2a:94:8f:f0:d2:3c:df:
                    ee:46:41:1c:74:1b:bb:a5:a4:ac:2b:5c:77:d7:8d:
                    be:7a:4e:1f:19:0b:f9:7e:5b:ba:5d:7c:2b:8c:70:
                    c6:f4:1e:37:0c:09:8c:45:a8:70:00:63:28:92:d5:
                    64:95:d0:fa:9a:99:94:e8:0c:c0:18:3b:8c:04:52:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:52:9A:83:3A:81:30:CD:A9:9D:BF:F0:22:38:AE:D6:48:1B:7C:EC
            X509v3 Authority Key Identifier:
                keyid:52:C8:D5:6D:F4:AE:E2:63:E8:A6:51:12:98:A6:19:CE:98:C8:AC:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UsjVbfSu4mPoplESmKYZzpjIrA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BF9E/E18FB3DECA2411EDA24C598BF1222468/UsjVbfSu4mPoplESmKYZzpjIrA4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:58:7c:48:6c:ba:03:ba:3a:7d:27:3f:9e:1d:80:fa:fd:6f:
         86:ce:29:97:fd:94:3d:d9:2c:89:7e:31:8f:21:7c:bf:a9:d5:
         35:a5:3a:8c:44:ec:33:67:03:42:a8:0a:79:b0:d1:1b:89:94:
         b3:27:26:50:df:53:30:32:a6:71:e8:99:c8:78:b9:3e:3b:e6:
         0b:4d:95:4e:ff:b0:71:52:b4:fd:35:4b:b8:a2:46:32:5e:d7:
         45:be:44:91:c7:09:73:4f:b5:fa:86:65:97:a3:d0:e5:1c:08:
         11:88:bc:11:cc:ba:49:8d:5c:06:dc:7e:04:e3:1d:f3:b6:97:
         89:86:ef:5a:3e:fc:3a:58:80:2b:3b:ff:5e:e8:2f:7d:14:4c:
         d1:d1:dd:6c:4f:77:74:77:54:24:0f:88:78:10:6e:ec:6e:fb:
         4d:9b:65:ff:89:84:95:47:cb:02:bc:a5:9a:f5:30:5b:e3:79:
         20:a1:13:de:1d:a7:28:7b:43:1f:4e:70:e4:fe:d3:cc:84:4c:
         90:3d:8f:52:3d:5d:d8:9a:3d:07:db:c2:31:0a:54:d0:aa:f0:
         96:51:82:00:d1:cf:e0:6a:4a:5e:56:fb:24:82:51:23:00:f1:
         ac:2e:89:8a:6a:0d:72:f8:0b:f3:03:f1:9e:52:5e:ab:46:64:
         e4:7c:f6:48
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBVQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUJGOUVBRjExMC8GA1UEBRMoNTJDOEQ1NkRGNEFFRTI2M0U4QTY1MTEyOThBNjE5
Q0U5OEM4QUMwRTAeFw0yNjExMTQwMzE4MjJaFw0yNjExMTYwMzE4MjJaMBgxFjAU
BgNVBAMTDTZhZjdkMmZmLWY0ODgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDhbpLLLGb7GYzRhiO/+ULodr2x5KoQe3N4xM8S34JtgU7YENX3BDT+pfXQ
5/WcC88mST9sUYu5uRnw0odmvmOmuxPpLztNd0nifcayeG9nsHvsVRinwJWPP1wM
1yOF/CyEvO+FzV71z1n6Wsk+4IsVjLk7WECUB0Hv6TgGvNEmmFe9YNZXlsru/w/u
b5K1HRUDlaR4cYGp6aiqQhDiuw4zEQ5cJfS77ILnDVT0ditJK4FtUtBI+Xwsn0xQ
KpSP8NI83+5GQRx0G7ulpKwrXHfXjb56Th8ZC/l+W7pdfCuMcMb0HjcMCYxFqHAA
YyiS1WSV0PqamZToDMAYO4wEUpFhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUaFKa
gzqBMM2pnb/wIjiu1kgbfOwwHwYDVR0jBBgwFoAUUsjVbfSu4mPoplESmKYZzpjI
rA4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVCRjlFL0UxOEZCM0RFQ0EyNDExRURBMjRDNTk4QkYxMjIyNDY4L1VzalZi
ZlN1NG1Qb3BsRVNtS1laenBqSXJBNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1VzalZiZlN1NG1Qb3BsRVNtS1laenBqSXJBNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUJGOUUvRTE4RkIzREVDQTI0MTFFREEyNEM1OThCRjEy
MjI0NjgvVXNqVmJmU3U0bVBvcGxFU21LWVp6cGpJckE0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtWHxIbLoDujp9Jz+eHYD6/W+GzimX
/ZQ92SyJfjGPIXy/qdU1pTqMROwzZwNCqAp5sNEbiZSzJyZQ31MwMqZx6JnIeLk+
O+YLTZVO/7BxUrT9NUu4okYyXtdFvkSRxwlzT7X6hmWXo9DlHAgRiLwRzLpJjVwG
3H4E4x3ztpeJhu9aPvw6WIArO/9e6C99FEzR0d1sT3d0d1QkD4h4EG7sbvtNm2X/
iYSVR8sCvKWa9TBb43kgoRPeHacoe0MfTnDk/tPMhEyQPY9SPV3Ymj0H28IxClTQ
qvCWUYIA0c/gakpeVvskglEjAPGsLomKag1y+AvzA/GeUl6rRmTkfPZI
-----END CERTIFICATE-----