Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
File:                     PTg51e4dl7STFVYoMdygQJMxSB8.mft (raw, json)
Hash identifier:          NDXd2SglV/xixLzt65v6wDgdjlwd6/oZNA7CuFyp6Fk=
Subject key identifier:   6B:7C:25:F1:1A:35:C8:A1:49:67:8F:0E:CD:29:DD:75:B0:F3:B6:EB
Authority key identifier: 3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F
Certificate issuer:       /CN=F36763E5AF/serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
Certificate serial:       0A3F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
Manifest number:          0A2F
Signing time:             Thu 24 Sep 2026 01:37:06 +0000
Manifest this update:     Thu 24 Sep 2026 01:37:06 +0000
Manifest next update:     Sat 26 Sep 2026 01:37:06 +0000
Files and hashes:         1: PTg51e4dl7STFVYoMdygQJMxSB8.crl (hash: wckNR+pvxlW6wn4nX4ulOsssQJhEZtC4yUcTwCYX4uw=)
                          2: EBE9D8E4002911F1B948E098DAE4EC9C.roa (hash: A27M1xspmH5ryATJrqn4YiVO/fe+mYlUQpMbMsLJvnw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 01:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2623 (0xa3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36763E5AF, serialNumber=3D3839D5EE1D97B49315562831DCA0409331481F
        Validity
            Not Before: Sep 24 01:37:06 2026 GMT
            Not After : Sep 26 01:37:06 2026 GMT
        Subject: CN=6ab47ec2-c773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:66:8b:8b:cc:98:41:78:67:7f:5a:b3:10:
                    ae:0e:3d:d6:50:c9:fb:7e:53:ef:75:fe:fa:6e:f3:
                    92:7f:54:a8:ee:8f:95:31:34:b8:04:b1:ea:c4:e0:
                    ad:ad:47:fa:12:66:1e:89:68:54:0d:23:59:14:ea:
                    8a:34:f5:91:b0:aa:4f:18:ac:87:0b:b3:a1:99:3c:
                    87:65:c2:88:de:b8:aa:12:b6:f4:4e:e2:a4:64:04:
                    c2:56:dd:0e:f4:ed:01:e3:e2:97:fb:4e:88:24:3f:
                    6b:8b:f5:17:c2:a5:be:06:30:0e:bc:f5:1c:14:73:
                    1d:b1:d1:8d:1a:b2:58:f7:71:69:3f:32:53:e3:26:
                    fa:31:31:27:b7:2f:c8:21:88:ad:81:d8:de:60:54:
                    63:40:fb:9b:b6:98:a9:c9:71:83:db:6d:49:fa:fb:
                    95:e6:75:cb:2a:56:cc:98:ad:f7:84:8a:da:b4:a3:
                    68:a2:1a:7a:63:f8:07:66:03:6d:5b:8d:11:e6:b7:
                    32:9e:02:88:7b:db:d5:3a:1b:e3:32:01:c4:f4:00:
                    6f:c3:9a:e0:ea:f4:71:0a:a2:ae:8e:ad:b2:06:99:
                    87:6e:5c:62:6d:f5:c7:c0:30:0d:57:b5:49:98:a9:
                    eb:b5:1d:7f:8e:b2:4f:f8:e0:75:24:48:73:58:b8:
                    cd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:7C:25:F1:1A:35:C8:A1:49:67:8F:0E:CD:29:DD:75:B0:F3:B6:EB
            X509v3 Authority Key Identifier:
                keyid:3D:38:39:D5:EE:1D:97:B4:93:15:56:28:31:DC:A0:40:93:31:48:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PTg51e4dl7STFVYoMdygQJMxSB8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36763E5/1D91ED9AF59C11E98BF85D43F8AEA228/PTg51e4dl7STFVYoMdygQJMxSB8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:23:0e:94:b5:b2:66:3b:f2:e6:90:bf:da:f4:d8:e5:a3:e3:
         8c:26:79:bc:c4:93:cb:bd:77:16:82:f5:cf:cf:07:76:7e:2a:
         69:96:78:7c:2f:36:d3:44:bc:04:c5:01:e5:2a:f4:c0:4a:18:
         28:47:6a:f0:73:f3:75:99:15:9f:ec:a6:32:5a:d5:96:45:84:
         a4:14:19:2f:f6:73:ca:a0:28:d0:b2:08:ea:c0:5d:e4:ab:ab:
         b6:8f:8d:d2:ca:7a:1b:4f:ee:3f:f3:ee:e9:27:c6:4d:ca:84:
         74:d1:86:2f:ab:46:84:03:2c:6e:a8:be:a6:1e:0e:cb:ef:8b:
         c6:12:2d:87:d1:5a:1d:8a:38:50:ae:69:49:b4:f4:0a:22:6b:
         cf:e6:97:59:7a:1c:6d:f0:f3:e8:8e:d2:ef:e0:7a:ff:f3:94:
         7d:88:fb:41:18:0b:55:18:a4:40:23:4f:d7:29:01:20:d4:ea:
         00:a4:8c:58:31:44:ce:31:98:c2:23:69:93:51:74:b1:2f:d2:
         7b:bf:4b:d1:e7:28:5b:ef:c9:ac:be:d1:cb:02:64:70:65:92:
         fe:80:f7:5c:13:83:bc:98:5d:bd:41:e0:e4:fc:a3:08:e9:8f:
         09:06:4f:40:01:a8:d9:d5:ad:55:09:bb:50:10:18:bd:e5:62:
         fe:89:26:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----