Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft
File:                     M3RPEtwtkNArK4aFUwjsHAeEk8w.mft (raw, json)
Hash identifier:          0/LskA5ok8w/riTCHq5d+Ku0tEA4hzt2ZKDMXxZtWNw=
Subject key identifier:   45:F4:69:78:2F:75:80:95:37:B5:54:AC:CD:73:EA:FC:53:FE:E7:FE
Authority key identifier: 33:74:4F:12:DC:2D:90:D0:2B:2B:86:85:53:08:EC:1C:07:84:93:CC
Certificate issuer:       /CN=F36693F7AF/serialNumber=33744F12DC2D90D02B2B86855308EC1C078493CC
Certificate serial:       0CEC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M3RPEtwtkNArK4aFUwjsHAeEk8w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft
Manifest number:          0CE6
Signing time:             Sun 15 Nov 2026 01:10:20 +0000
Manifest this update:     Sun 15 Nov 2026 01:10:20 +0000
Manifest next update:     Tue 17 Nov 2026 01:10:20 +0000
Files and hashes:         1: M3RPEtwtkNArK4aFUwjsHAeEk8w.crl (hash: DA93tWKWwBKkTv9mKPWW280JO5oClHt64cdarX/9WYM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M3RPEtwtkNArK4aFUwjsHAeEk8w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3308 (0xcec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36693F7AF, serialNumber=33744F12DC2D90D02B2B86855308EC1C078493CC
        Validity
            Not Before: Nov 15 01:10:20 2026 GMT
            Not After : Nov 17 01:10:20 2026 GMT
        Subject: CN=6af9067c-f72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ba:44:7d:5a:30:bd:ea:90:e7:ac:ef:1c:53:
                    9d:ee:e0:ec:9e:13:2f:f2:77:b4:00:c5:42:19:2d:
                    be:a5:bd:ce:f3:6d:76:08:26:7c:b2:ff:ea:2f:c5:
                    1d:f7:3c:db:f9:7a:82:ec:ac:b7:d4:32:e4:bc:b6:
                    52:11:96:05:04:17:38:26:54:02:3b:f2:f4:4c:9a:
                    c7:1b:09:ab:b4:a5:28:ec:11:9d:63:11:e9:a0:2b:
                    e9:63:42:eb:23:05:b8:8a:ba:76:02:43:7a:46:53:
                    b7:f6:d6:7c:9b:42:70:67:be:27:1a:b1:13:87:18:
                    0b:0e:f2:e1:73:48:a6:fd:8a:a2:d4:5b:ff:31:22:
                    48:d5:32:4a:4e:19:6b:5d:7a:6b:62:3f:ae:5c:f9:
                    4e:57:1a:e2:fc:36:10:0f:54:e3:8b:bb:d9:37:7c:
                    2d:2c:84:61:b2:ad:a7:dc:85:da:d5:33:07:5b:9d:
                    75:9f:77:f0:9c:2d:db:87:ef:06:a0:f8:8f:0f:9f:
                    f2:de:4c:a7:18:1b:6c:e9:e4:74:6f:48:19:9a:cb:
                    f3:ba:67:6d:ea:cc:2d:ca:e9:cb:8b:25:98:ef:47:
                    98:99:ff:4f:7b:50:e6:dc:c9:ad:65:4e:17:45:35:
                    c9:60:64:30:eb:5a:39:81:26:52:7d:a0:a6:c6:e4:
                    4a:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:F4:69:78:2F:75:80:95:37:B5:54:AC:CD:73:EA:FC:53:FE:E7:FE
            X509v3 Authority Key Identifier:
                keyid:33:74:4F:12:DC:2D:90:D0:2B:2B:86:85:53:08:EC:1C:07:84:93:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M3RPEtwtkNArK4aFUwjsHAeEk8w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36693F7/8CBF554CF9E811E783E1D143F8AEA228/M3RPEtwtkNArK4aFUwjsHAeEk8w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:bb:ab:16:fd:fa:3b:5f:c1:65:dd:4a:ee:78:53:65:79:67:
         77:b3:c5:68:f8:83:f7:d0:80:aa:1a:20:95:da:e6:03:cb:29:
         ed:6e:1c:3e:fc:0a:a7:ed:77:56:ba:ce:0d:d9:a7:c5:3e:ef:
         72:39:ff:90:78:4f:a8:4f:2d:3f:96:c6:02:2e:d0:b0:8e:c5:
         4a:b0:fd:b4:df:d8:b7:38:8d:1d:40:3e:77:7f:70:96:e3:33:
         93:50:be:8b:31:0f:69:78:07:e4:54:f2:7a:90:da:9b:00:dd:
         d8:3f:e5:3c:3e:eb:38:94:e5:85:a4:bc:12:32:7d:9d:6e:b7:
         01:f4:6f:56:09:15:82:fb:7d:04:9c:67:b2:dd:f7:07:99:3c:
         4f:92:2c:da:80:c2:ef:6c:6b:f0:88:22:3e:cf:4a:fb:80:5a:
         56:f0:55:ad:16:d0:b2:e3:29:06:ea:37:18:d7:7e:f8:c3:a2:
         60:c3:7a:33:e8:f1:d1:d9:94:d4:9b:f6:e9:ac:8f:e3:2b:36:
         ed:b2:42:1c:c5:a0:90:d3:e7:be:3e:ca:77:d1:77:03:0e:7a:
         28:b4:f7:5f:51:7c:94:32:b3:b8:da:51:7e:4a:af:85:60:58:
         d7:03:ff:db:07:07:22:47:92:9c:b2:65:fa:5b:8c:cf:06:c4:
         13:a5:72:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----