Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          KCgVUKhCx+bk6D5ZeGDZdvPvMzObpZmrKy7IkhY1w+8=
Subject key identifier:   B6:BC:C8:0D:52:89:EC:75:33:F5:92:D5:D7:7D:50:74:8A:24:0F:23
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       0418
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          0413
Signing time:             Sun 15 Nov 2026 04:02:14 +0000
Manifest this update:     Sun 15 Nov 2026 04:02:13 +0000
Manifest next update:     Tue 17 Nov 2026 04:02:13 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: +QMPASLDLXie1waSEt2GhPGnz6EdAD/ucYt75fAZVWo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1048 (0x418)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Nov 15 04:02:13 2026 GMT
            Not After : Nov 17 04:02:13 2026 GMT
        Subject: CN=6af92ec6-a1ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5d:4a:41:a3:f3:92:c7:7c:ca:eb:7a:9b:2b:
                    dd:52:04:b3:3f:40:d5:48:21:a6:82:21:f9:70:07:
                    b6:d2:c8:30:b7:63:7b:a1:37:ab:b5:9c:c5:5b:74:
                    57:14:2b:5f:f0:c1:31:d5:c8:8e:0a:f1:1a:14:f6:
                    2a:04:30:a1:04:8b:4f:e9:5b:5b:07:1d:e5:c9:ef:
                    e3:95:cd:2e:2f:46:ac:64:58:3c:2a:94:92:48:97:
                    6d:4b:9c:f3:f9:d5:e2:7f:e9:b0:f3:94:69:69:12:
                    06:5d:d5:17:22:95:8c:e5:32:d2:c7:88:95:b2:2e:
                    a0:94:a5:51:5c:33:f8:78:78:77:27:94:40:75:da:
                    ef:43:38:07:dc:2b:5c:3a:47:25:85:c1:2b:8e:10:
                    b2:46:50:bc:43:a1:02:9f:2b:6b:53:95:12:90:8f:
                    d7:ba:9a:61:25:bf:20:33:1f:7b:ab:57:14:5f:15:
                    34:09:49:7e:51:38:57:f4:fc:6e:44:76:8d:21:86:
                    36:7f:f1:e4:89:0b:f9:27:52:82:cf:86:57:0a:9f:
                    bf:77:22:02:ce:30:d9:bd:60:f4:cb:bc:c9:b3:d5:
                    9d:7c:f5:ea:98:a4:c0:bd:af:1f:ff:db:e7:fc:1b:
                    e3:32:19:a8:f7:a8:d3:35:39:26:93:14:61:d2:f5:
                    ab:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:BC:C8:0D:52:89:EC:75:33:F5:92:D5:D7:7D:50:74:8A:24:0F:23
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:db:87:46:aa:50:c3:aa:77:36:7d:ae:3f:34:ba:2e:9d:1a:
         71:55:d5:7f:0e:de:06:fc:3f:86:2c:a4:09:a6:51:47:01:53:
         42:64:b6:11:c0:11:bb:b7:1b:d4:b0:34:ee:1d:2c:ef:33:e3:
         37:54:e2:42:af:db:c0:6e:c8:b8:89:46:aa:4d:2e:cb:4f:5c:
         4d:c9:88:18:a1:95:0c:ad:bd:d4:00:9c:ca:e2:9d:5d:1f:27:
         df:91:39:88:c4:47:e3:ee:22:e6:10:62:2b:6f:29:8f:27:0b:
         49:60:9e:9d:d7:54:a3:e3:9a:95:4d:bf:a9:43:28:a3:bb:c0:
         b2:03:d1:1a:fd:db:d0:93:e1:e9:c1:51:49:3a:35:00:d3:96:
         d2:b4:df:a8:7f:3a:77:65:6b:68:5c:39:54:60:eb:de:38:11:
         00:7a:e7:82:ed:20:da:df:32:81:31:61:c0:f5:f9:e8:bc:47:
         7c:47:b6:27:0f:35:a9:72:95:f2:93:33:ec:b3:49:d7:90:f2:
         4e:35:0d:c6:ab:23:42:be:c1:af:6a:90:d4:b7:75:a4:a8:c1:
         23:dd:58:df:5c:1c:9f:a0:0c:da:cf:aa:bd:b0:dc:2b:54:5b:
         ad:14:f9:50:55:ab:bb:be:a5:28:0c:6a:f0:2d:f1:20:a7:3b:
         77:fc:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----