Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
File:                     SGm5dfSdmA_lFc7dSaDEDruBrKI.mft (raw, json)
Hash identifier:          sX+mOAmRkPHfdkP/EyfX1UJDo3gBIIVk27z2bHjkmu8=
Subject key identifier:   DB:96:83:8B:28:7A:60:79:6A:FF:3D:90:0B:AF:9E:81:A9:2E:51:69
Authority key identifier: 48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2
Certificate issuer:       /CN=F367972FRI/serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
Certificate serial:       057A
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
Manifest number:          0577
Signing time:             Thu 24 Sep 2026 03:08:51 +0000
Manifest this update:     Thu 24 Sep 2026 03:08:50 +0000
Manifest next update:     Sat 26 Sep 2026 03:08:50 +0000
Files and hashes:         1: SGm5dfSdmA_lFc7dSaDEDruBrKI.crl (hash: gTy+SshhBybcFqffJcVnmHFyCnK1YhDMS+/7eG9tXhQ=)
                          2: 76A8B37A8AA811F191D9CBF2CE1D38B0.roa (hash: 6JHF5LVrkMN963on9ATo1+Xaz16ezncd71FNghrXAOQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                          rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:08:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1402 (0x57a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367972FRI, serialNumber=4869B975F49D980FE515CEDD49A0C40EBB81ACA2
        Validity
            Not Before: Sep 24 03:08:50 2026 GMT
            Not After : Sep 26 03:08:50 2026 GMT
        Subject: CN=6ab49443-d86d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:83:83:d8:62:a0:fe:7d:86:5c:c8:55:14:83:
                    8e:7d:8b:f7:ef:fd:a0:ed:ac:51:cb:44:b8:1e:a1:
                    9f:dd:58:9d:10:ba:99:0b:ea:61:97:83:f1:40:ff:
                    5a:ba:96:c6:4c:01:10:2a:24:58:58:83:6e:f8:5f:
                    d6:1c:3a:6f:18:7e:5c:3f:32:5a:1d:99:19:27:2e:
                    d2:e4:2e:9d:c2:19:c4:9c:ac:ac:37:b6:e3:3c:32:
                    7b:01:3e:c2:52:dc:0a:eb:08:66:ff:dd:6c:c7:6d:
                    51:af:ca:9c:e5:7c:65:68:88:dd:24:c0:a8:7d:d7:
                    6a:2f:8c:91:20:13:12:c1:51:e2:33:5a:11:08:46:
                    84:44:d7:88:88:f2:a4:1b:2f:92:bf:bc:40:91:10:
                    a4:db:c1:53:83:3b:bc:05:44:69:96:3c:ea:66:3d:
                    54:6f:6c:16:1d:5d:e7:a5:6b:f1:c5:a6:46:a6:df:
                    3f:ff:e8:48:1a:e0:22:53:ec:9e:ab:a8:20:1f:19:
                    0c:3d:fa:4d:3b:03:21:8a:b1:65:f6:7f:26:c7:01:
                    10:9d:c2:7d:17:23:a5:e8:83:1e:59:15:44:7d:2a:
                    3b:18:c7:44:e1:80:3a:56:9c:61:6c:5f:7f:63:63:
                    a5:db:27:17:21:91:bf:99:2a:17:29:b6:4f:3c:c0:
                    6b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:96:83:8B:28:7A:60:79:6A:FF:3D:90:0B:AF:9E:81:A9:2E:51:69
            X509v3 Authority Key Identifier:
                keyid:48:69:B9:75:F4:9D:98:0F:E5:15:CE:DD:49:A0:C4:0E:BB:81:AC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/SGm5dfSdmA_lFc7dSaDEDruBrKI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367972F/4C758F6A901011EDBC3E0F9BF1222468/SGm5dfSdmA_lFc7dSaDEDruBrKI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:e8:16:78:1f:8a:b8:de:29:ee:96:13:77:ea:0d:ab:69:f0:
         25:00:9d:94:ff:cf:66:14:53:4e:de:6c:32:d2:c0:4a:8b:f3:
         96:fe:a2:37:69:90:8a:a0:2e:45:29:76:2c:7a:12:d4:31:42:
         aa:ce:a6:01:7a:cc:ed:64:ae:99:16:52:d5:52:dd:c5:a4:19:
         d8:63:59:62:0d:f8:a6:b2:dc:96:b8:c7:e7:fa:e9:bc:93:79:
         6f:9e:27:eb:40:9f:8a:b2:51:03:de:b9:8d:25:dc:02:8e:de:
         4a:44:cf:4a:09:1c:94:bc:ef:ca:0a:84:88:27:86:c6:36:f8:
         d3:88:71:ce:6c:a8:a6:0d:d5:86:60:40:10:ee:41:4d:25:34:
         59:d9:46:ef:01:da:8f:60:52:59:32:c9:f8:a1:63:46:ab:43:
         c4:52:5e:a3:3e:56:6e:05:a2:08:fc:fd:9e:f8:1b:c0:9e:2b:
         1d:24:dc:f8:16:a9:af:38:da:81:92:32:72:d5:46:24:23:9a:
         7e:6c:3f:8e:25:42:51:ad:18:cd:f6:2c:f8:85:47:af:a7:3b:
         ba:b9:5b:48:7e:58:e6:aa:6f:94:03:a5:05:e1:c0:66:0b:a6:
         bc:a9:26:3d:28:e8:44:c1:7a:94:be:db:0f:18:a7:cd:31:11:
         a9:cf:08:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----