Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
File:                     Sh_na037AXO28xt_NqWpguCNnBk.mft (raw, json)
Hash identifier:          8wzzPDQsOf0JhUSpXXDMO1JLw8NFR3nIr8vesSfCJ5k=
Subject key identifier:   26:95:B3:9E:8D:58:D1:2F:39:79:07:78:59:7E:77:DB:E5:B4:B8:00
Authority key identifier: 4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19
Certificate issuer:       /CN=F366FE6CAF/serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
Certificate serial:       0901
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
Manifest number:          08DE
Signing time:             Mon 28 Sep 2026 01:55:29 +0000
Manifest this update:     Mon 28 Sep 2026 01:55:28 +0000
Manifest next update:     Wed 30 Sep 2026 01:55:28 +0000
Files and hashes:         1: Sh_na037AXO28xt_NqWpguCNnBk.crl (hash: O/Xt8BuR5NwpM4/Nc2NXxQvamVA5sHSlIaDpOaNETOY=)
                          2: 17DD0894877211F08B8BA7D2DAE4EC9C.roa (hash: whOLduQqVVvaNHj/zrflF8U3oey5iDbkzbCNZuEmZJ4=)
                          3: F9C82400D97B11EF9B0C96BA762E951A.roa (hash: M9e20X5bFGzfJk5f5uvwTRlfX+u30RyUqYb0LXotErI=)
                          4: B0B04848877111F082E051D0DAE4EC9C.roa (hash: 74qQsA+Ms/dUW8F7lYzjX4TOcPR5wk7mYH0t6ff8jWs=)
                          5: 69691B06B32911F19D1DC1D0CE1D38B0.roa (hash: vK7XUK3u9Wq4n4aCldwnq1lQVYjE9TxqKIXqdg64R9U=)
                          6: FA871C00CF9011F081C8E7BEDAE4EC9C.roa (hash: Qw22VWx53kROqvg7YWX2kY0qe6pgMedjuoyj+qgxaOk=)
                          7: D281CD16877111F0896D7AD2DAE4EC9C.roa (hash: cWLTUW9RzJIuddIOIavrO3/ylPwsJ44raIrYkxapM14=)
                          8: FA451D540E5311F0AD34E842762E951A.roa (hash: v4Hnu/zBr9ZJXzMlo/mymcexhZgGmTK0xB97wv2VfiQ=)
                          9: 27DA075C0E5411F094C60A43762E951A.roa (hash: uSWwhbpaM7heLFZrX193ZEyM5nKa4FeuK+VjWT68aec=)
                          10: F9141722877111F0858E99D2DAE4EC9C.roa (hash: Y+12zI5R5Z7kAuY1RuQtOSmt2tT8o0fgCSk0gO8Ktlw=)
                          11: 3C2CF984877211F0A9B2A8D4DAE4EC9C.roa (hash: PGGmmBj6elL5Cx7UgU1F5kqdSEnECnDaQb7vXaqB20E=)
                          12: 7D6077E4868E11F0AF530F88DAE4EC9C.roa (hash: pUZkioyU/9imSW0EM5QU9OmW3QOk9L2q8xE1jtVTtPg=)
                          13: 48022F76970D11F19B84D7C7CE1D38B0.roa (hash: GPb+oEUk29+9AvfORiOrSL4nV5hr5La8BYm8p5oMGu0=)
                          14: DE56B006B40E11F08B0A0092DAE4EC9C.roa (hash: BeZrjqtTx/d/Uc+fKo5UXnfAqQ+DGhZvKjC4lkw0Bpo=)
                          15: CC57F9FE802911F18C6173B5CE1D38B0.roa (hash: Hckwq9V90vbLABfQHm6j3qtGP+ab2XK8+TXEgPcon/Q=)
                          16: A2715940868E11F08FA82F88DAE4EC9C.roa (hash: E4UOsaNzKSmSmQti7WTsZ5F69ADkj1yaGvZKWgLvBSA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2305 (0x901)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FE6CAF, serialNumber=4A1FE76B4DFB0173B6F31B7F36A5A982E08D9C19
        Validity
            Not Before: Sep 28 01:55:28 2026 GMT
            Not After : Sep 30 01:55:28 2026 GMT
        Subject: CN=6ab9c911-863c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cc:32:21:8d:87:24:e2:ac:70:8b:6a:a7:56:
                    2d:c8:96:a5:ac:2a:3b:d2:c4:75:7d:79:24:a0:f7:
                    81:2f:ae:1a:73:50:71:02:e0:a8:1c:63:68:c3:72:
                    7c:1f:04:67:eb:c1:cc:97:fd:0c:d9:62:53:66:c9:
                    63:e4:89:70:7e:9c:1a:f3:8f:41:77:90:cc:34:22:
                    de:e0:93:63:38:b3:17:a2:56:64:2b:b6:5e:b9:0b:
                    27:a4:3b:4e:4b:72:17:40:0d:2b:4b:15:45:f4:bc:
                    95:35:34:a2:ac:84:f1:42:58:07:b2:6e:2c:92:33:
                    0e:7f:74:e3:e6:19:30:2b:44:f7:5d:9f:cd:a7:7e:
                    ba:a7:4c:86:b3:27:41:b5:b9:b1:65:61:9c:45:e7:
                    12:49:26:ea:bd:16:f7:d3:47:ef:2f:62:34:a8:68:
                    ab:b5:ee:5c:fb:d4:8b:e3:a2:a3:bf:a7:0f:48:3c:
                    d0:79:73:d0:95:2b:cb:8a:d8:7d:b0:a4:f4:44:bd:
                    52:90:3a:8f:11:5d:ae:8a:cf:7a:4c:f7:46:4f:6a:
                    6a:6e:43:5e:1d:88:4d:aa:5c:06:55:18:39:15:bb:
                    0a:5f:3f:c3:73:ae:ff:fa:90:20:38:03:27:25:96:
                    15:28:6b:cd:c8:d2:f5:d8:50:16:1c:6d:74:f1:83:
                    b7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:95:B3:9E:8D:58:D1:2F:39:79:07:78:59:7E:77:DB:E5:B4:B8:00
            X509v3 Authority Key Identifier:
                keyid:4A:1F:E7:6B:4D:FB:01:73:B6:F3:1B:7F:36:A5:A9:82:E0:8D:9C:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Sh_na037AXO28xt_NqWpguCNnBk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FE6C/B3374424131B11EBA4121A39F8AEA228/Sh_na037AXO28xt_NqWpguCNnBk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:14:fc:62:74:b6:c2:6d:1c:36:39:aa:a6:a8:56:41:26:06:
         be:28:e5:aa:80:3a:fb:30:30:f2:2a:88:e9:f7:c9:f1:cc:ed:
         b8:df:cf:3b:61:f4:3f:2a:03:78:da:12:a4:06:91:fa:33:e1:
         0e:39:d1:9f:e3:11:2e:16:7b:27:94:0f:8e:ec:00:d7:40:d7:
         86:23:06:e7:f2:03:f3:c4:51:00:21:4a:ff:18:91:db:f3:23:
         92:47:90:0d:57:6f:44:31:96:d7:4a:b8:bf:dd:ee:a3:e5:88:
         05:0c:38:08:57:20:1f:3f:1c:c5:35:7d:da:4a:46:ab:ad:f1:
         6a:7c:2b:e1:fc:30:ce:14:b6:21:68:0f:be:d3:29:f2:9d:28:
         88:ef:8f:a0:ff:41:2d:60:3d:f9:89:60:6b:0e:16:57:fe:1e:
         28:78:03:28:36:40:35:f0:12:69:ad:04:6f:9f:80:a4:43:c3:
         65:e7:2e:ff:c3:3c:2b:f2:10:91:de:ff:1b:b5:18:ee:5a:1e:
         18:94:6e:21:4f:0b:18:a3:2f:03:ad:89:1f:c4:e1:5a:93:a6:
         db:80:04:86:12:32:5f:6a:81:61:a1:01:f7:ee:b1:12:48:2a:
         3d:ca:cd:0f:94:ce:69:34:a9:f1:46:bd:f3:58:b0:dd:33:51:
         6f:39:7d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----