Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
File:                     BiCXPEqhlLafR32b7VWXyU0N0Pg.mft (raw, json)
Hash identifier:          yzaBW/7G32ZFApLLBlWm6MvKEXhwA8caN6cBLZ73RzY=
Subject key identifier:   BC:A4:D9:9C:0B:C0:2F:1E:3E:EA:DA:C3:4B:FE:08:1C:7A:0A:13:3E
Authority key identifier: 06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8
Certificate issuer:       /CN=F366DA43AF/serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
Certificate serial:       05FD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
Manifest number:          05F2
Signing time:             Thu 24 Sep 2026 02:59:58 +0000
Manifest this update:     Thu 24 Sep 2026 02:59:57 +0000
Manifest next update:     Sat 26 Sep 2026 02:59:57 +0000
Files and hashes:         1: BiCXPEqhlLafR32b7VWXyU0N0Pg.crl (hash: PRoWpyXpJjsdkm6d3YFIjwqTSjW07M8tv93U/vCqwq4=)
                          2: 3DF983F290BA11F18AAA01EFCE1D38B0.roa (hash: Qh6y/eRMD6dSAiahenNmTxPPjoSpFyv4fHKPBYfl+Lw=)
                          3: 4509867C89A011F18FB096A9CE1D38B0.roa (hash: aPImwy1cVOEqmtUCa7IvTsb8BnZ1qt4uplLTZBIsKrA=)
                          4: 7EF51C66B09411EF816A837D762E951A.roa (hash: dK+s/XqGvJ2z+H1yiumGDgbO/rdLvkiEGWr5WQScXNE=)
                          5: 5B430E4AB09411EF9DCD797D762E951A.roa (hash: 4jVWIqFk1exxKlsXmJSXOLUstbW11Mv50NKI1fpU+9w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1533 (0x5fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DA43AF, serialNumber=0620973C4AA194B69F477D9BED5597C94D0DD0F8
        Validity
            Not Before: Sep 24 02:59:57 2026 GMT
            Not After : Sep 26 02:59:57 2026 GMT
        Subject: CN=6ab4922d-8048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a2:d2:0a:ea:19:a5:5b:2f:1c:52:41:b1:1c:
                    7c:aa:e8:14:91:fe:3e:47:10:9f:bf:28:98:c0:77:
                    9e:dd:a3:55:67:8d:eb:19:b8:ea:d8:ad:17:e8:2a:
                    05:a0:8f:4f:7c:70:a3:0b:e2:c0:d8:d6:33:03:89:
                    fb:2c:aa:76:da:e5:46:a3:a6:24:cb:36:2a:33:66:
                    50:f4:5a:cd:d9:73:b3:a0:48:e0:51:3d:4d:29:bd:
                    b6:66:1a:b4:c1:e6:ed:22:d6:6a:9b:67:6e:77:c0:
                    fe:89:91:6d:a3:42:95:ad:c1:aa:76:34:80:17:77:
                    e8:ec:2f:52:48:c6:39:27:af:51:f5:c0:b5:da:92:
                    45:e6:e9:be:e0:74:df:fc:db:33:cd:fa:e9:9d:f8:
                    bb:89:3d:73:73:26:f6:50:5d:b8:dd:e9:48:7c:5e:
                    fb:73:ec:5d:56:5c:af:94:4d:91:fd:1a:5f:f1:00:
                    e2:7b:f4:cc:58:f0:d9:25:4d:34:7e:85:75:9e:e4:
                    f0:75:e8:fa:86:2b:42:25:2f:ef:86:b3:ca:22:b1:
                    27:ed:4e:ff:a9:a8:2a:15:32:87:a8:03:56:8a:b7:
                    9f:95:ed:af:bc:d1:39:7b:c5:a4:71:9d:82:c4:53:
                    ed:a5:16:70:4b:7c:26:9f:60:74:ce:17:ed:84:f6:
                    42:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A4:D9:9C:0B:C0:2F:1E:3E:EA:DA:C3:4B:FE:08:1C:7A:0A:13:3E
            X509v3 Authority Key Identifier:
                keyid:06:20:97:3C:4A:A1:94:B6:9F:47:7D:9B:ED:55:97:C9:4D:0D:D0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BiCXPEqhlLafR32b7VWXyU0N0Pg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DA43/24A4D94634EE11ED88ECD0ECF1222468/BiCXPEqhlLafR32b7VWXyU0N0Pg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:c9:9c:89:57:e4:86:67:4d:33:de:69:0c:41:24:aa:57:a0:
         85:16:eb:36:98:26:45:03:3f:b6:c8:02:88:69:4f:f8:2f:54:
         80:09:05:cd:32:42:e1:50:32:b2:62:b3:d0:17:34:a8:dc:c2:
         49:d7:6b:98:e9:7c:12:fc:b3:29:9f:c5:05:7b:26:76:70:1b:
         7c:01:15:33:c1:ee:62:f8:c9:aa:fb:0f:d3:69:51:18:f8:d1:
         5d:39:1e:32:98:5b:d0:6f:27:5a:91:45:7b:f1:1d:3f:76:92:
         78:ac:04:4b:2e:f0:c5:cb:1b:60:58:46:be:74:27:45:ae:ef:
         b3:63:96:84:d8:65:9c:7d:e6:a2:63:ac:3b:8a:30:45:e0:01:
         30:79:c9:1c:8a:48:a6:ff:d2:22:c4:ce:fb:c6:e6:cc:82:1e:
         ba:29:7d:fa:70:f1:7c:bd:8d:70:53:75:ac:ca:65:ba:6d:07:
         ed:33:9f:5e:b8:d5:4c:30:ae:c1:c8:96:5b:8e:5b:f3:d5:1f:
         ae:95:2a:e0:a2:22:79:d7:6a:d0:aa:7e:e5:a7:1d:bf:3c:55:
         1f:2f:b0:55:83:18:1a:73:ba:51:fb:50:08:0c:c5:ac:9e:ae:
         a7:40:51:64:96:6a:91:51:96:76:f1:77:22:c9:b4:7c:63:7c:
         ee:d5:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----