Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
File:                     xKeWHgAqqJ1QvqIlLU-Use72aiM.mft (raw, json)
Hash identifier:          6SknkMfb2yVc10gUv0RItjnUxcgedeX7haaaP1AE4sw=
Subject key identifier:   02:48:7C:10:84:C5:05:7D:D4:90:5B:36:66:44:55:A2:A7:20:BC:3A
Authority key identifier: C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23
Certificate issuer:       /CN=F3667885AF/serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
Certificate serial:       0772
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
Manifest number:          0770
Signing time:             Fri 25 Sep 2026 02:22:14 +0000
Manifest this update:     Fri 25 Sep 2026 02:22:13 +0000
Manifest next update:     Sun 27 Sep 2026 02:22:13 +0000
Files and hashes:         1: xKeWHgAqqJ1QvqIlLU-Use72aiM.crl (hash: sNuYL1bOv/obg21MpV7OBQi5A0qq14x8TcohuAgAbQ8=)
                          2: 0974EE44692C11EFB84E09BE762E951A.roa (hash: umDKOoC9/WNBFwfe+01c/iCxCRQnfD2hLqhhCsHnBu0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:22:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1906 (0x772)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3667885AF, serialNumber=C4A7961E002AA89D50BEA2252D4F94B1EEF66A23
        Validity
            Not Before: Sep 25 02:22:13 2026 GMT
            Not After : Sep 27 02:22:13 2026 GMT
        Subject: CN=6ab5dad6-a5ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:68:5f:70:d0:ff:a4:25:5b:ce:3c:7a:f5:a2:
                    45:a7:d8:76:2d:e6:e1:dc:41:66:ee:5d:c4:09:49:
                    ef:67:43:48:8c:81:e5:e1:5e:f5:b9:03:74:da:81:
                    6a:6e:ca:af:4b:43:26:ab:23:95:ea:32:a5:7b:c0:
                    b7:c9:b6:a6:3d:8d:c4:d4:d6:65:87:4a:9c:5f:ba:
                    52:b0:91:5b:56:8f:5e:8c:b4:ca:ef:81:e1:7a:86:
                    c8:a9:68:a1:50:94:75:cd:42:90:af:33:29:71:59:
                    cd:64:9c:87:52:2b:05:e0:dd:33:be:2c:30:49:4b:
                    45:73:da:1d:78:d9:b4:a1:7c:d6:04:82:a6:bd:fc:
                    20:8c:57:6a:c7:25:de:c8:7c:7c:aa:cd:2b:40:09:
                    02:6d:4d:3e:1e:59:ea:fe:d8:f6:35:8e:8c:f7:fd:
                    d5:c7:a9:30:4b:be:25:49:fb:07:5e:88:ff:55:93:
                    26:bf:b5:59:55:64:04:8a:ce:4f:36:87:13:4d:6c:
                    f2:38:65:62:59:37:19:17:65:8f:83:42:be:ce:c5:
                    49:a8:a9:c2:e5:25:06:47:93:a6:ff:04:69:b4:1b:
                    ae:97:fc:ff:ec:f9:e5:85:25:00:e2:f4:ff:b7:fd:
                    9c:76:37:31:34:93:88:4d:93:fa:84:a4:6f:f9:b7:
                    75:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:48:7C:10:84:C5:05:7D:D4:90:5B:36:66:44:55:A2:A7:20:BC:3A
            X509v3 Authority Key Identifier:
                keyid:C4:A7:96:1E:00:2A:A8:9D:50:BE:A2:25:2D:4F:94:B1:EE:F6:6A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xKeWHgAqqJ1QvqIlLU-Use72aiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3667885/2F732490067811ECB5D5945AD8A014CE/xKeWHgAqqJ1QvqIlLU-Use72aiM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d1:d1:4c:2b:e2:ca:ad:17:e7:29:c1:10:a2:fe:92:1f:08:8b:
         ae:7d:ad:91:79:55:01:3d:e8:27:c2:ab:f9:cd:bb:17:02:2e:
         46:58:fb:54:a9:06:d5:12:f8:5f:f2:12:46:af:f3:3b:4b:62:
         67:e9:8e:b0:3b:60:fd:84:2d:0b:e2:03:32:66:20:eb:95:0f:
         84:cc:d5:f9:48:a5:63:f6:d7:20:c9:50:f7:cb:5d:c3:b8:bd:
         77:55:e2:de:6b:cc:be:99:9a:b5:32:dc:eb:bc:68:7b:e5:ae:
         dc:fc:df:ee:be:46:70:e6:00:aa:ea:dc:ed:24:ff:3e:e8:5e:
         2c:de:87:c3:b6:04:05:51:c4:d7:8f:f0:24:3c:e6:a8:71:5c:
         b7:66:02:d9:dd:05:c3:15:26:a3:41:d0:fa:5a:a8:9e:df:49:
         4d:ba:05:26:b0:8e:98:54:08:08:32:b7:64:e5:8f:6d:fb:a8:
         97:06:4c:67:6e:20:43:77:b1:eb:d8:9b:63:cb:74:53:98:60:
         f4:d3:56:31:29:3d:d5:40:56:54:40:ef:24:f2:9e:2d:6e:e6:
         65:47:fe:ec:42:d0:d9:7b:99:ab:ff:c2:53:e1:db:b8:6f:55:
         8f:df:4f:85:04:0d:6b:4e:36:20:48:10:b6:3a:f5:a6:8a:ac:
         60:7d:c5:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----