Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
File:                     kC4Bh228XGk7_mL7v2fubbanGDE.mft (raw, json)
Hash identifier:          91RZqWv9RfG4E8aqIPQFeRyScsLyt+6b0XP+czgq/xQ=
Subject key identifier:   22:B3:E2:70:CF:2E:75:4D:6E:4D:0F:02:FE:87:F9:61:62:11:B1:77
Authority key identifier: 90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31
Certificate issuer:       /CN=F3680E82AF/serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
Certificate serial:       07DF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
Manifest number:          07DC
Signing time:             Fri 25 Sep 2026 02:09:14 +0000
Manifest this update:     Fri 25 Sep 2026 02:09:13 +0000
Manifest next update:     Sun 27 Sep 2026 02:09:13 +0000
Files and hashes:         1: kC4Bh228XGk7_mL7v2fubbanGDE.crl (hash: fE/ByLFBt1vTTtvTqsbd8kSeVnQKIWjpuue2kxP8pFA=)
                          2: 6378438CADEF11F1B06064A3CE1D38B0.roa (hash: PAJkk9GbRkENurvt2pMeFb7ahmp2Wf33f+N9WvcQmlI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:09:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2015 (0x7df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3680E82AF, serialNumber=902E01876DBC5C693BFE62FBBF67EE6DB6A71831
        Validity
            Not Before: Sep 25 02:09:13 2026 GMT
            Not After : Sep 27 02:09:13 2026 GMT
        Subject: CN=6ab5d7ca-58d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d6:79:02:18:c9:5f:96:1f:cd:8e:41:45:bf:
                    ef:56:f9:e9:c2:af:85:9c:63:be:a9:bb:9a:09:3a:
                    5d:6b:8f:2b:71:be:6b:23:e5:19:28:9d:49:96:d2:
                    db:0a:33:9b:16:b2:f9:1f:bf:a1:c0:64:b6:e1:aa:
                    b5:89:bc:cb:cc:11:d7:f1:87:29:6b:36:33:ae:23:
                    b4:b9:c1:2b:b3:1f:65:b8:fc:67:30:34:ca:d0:00:
                    2e:25:eb:36:83:71:7a:bb:bb:8d:18:bb:a2:a5:06:
                    a0:ef:69:aa:2e:97:d4:fb:86:5c:83:0b:43:12:be:
                    dc:2e:71:0d:3d:df:43:d1:4e:11:94:a7:2d:7f:67:
                    75:8c:58:59:db:f9:8e:51:1e:fb:7e:c3:17:1f:d9:
                    25:b2:3c:95:20:10:70:52:ec:b4:6b:5d:69:49:61:
                    55:c6:5f:e0:51:84:3a:11:92:a3:9d:78:4d:26:63:
                    cb:d0:dd:c1:c0:93:00:98:50:50:f2:33:2d:37:bb:
                    cd:c1:5a:b4:36:52:24:15:ca:8c:41:20:81:04:6d:
                    a5:80:d4:e6:60:1b:14:13:93:9d:ba:d2:87:d3:47:
                    62:6f:70:6b:41:70:e0:59:d3:af:5b:9e:90:eb:c3:
                    7f:1f:ae:f1:5a:86:ef:7a:1b:b4:00:6c:48:fe:12:
                    75:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B3:E2:70:CF:2E:75:4D:6E:4D:0F:02:FE:87:F9:61:62:11:B1:77
            X509v3 Authority Key Identifier:
                keyid:90:2E:01:87:6D:BC:5C:69:3B:FE:62:FB:BF:67:EE:6D:B6:A7:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kC4Bh228XGk7_mL7v2fubbanGDE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3680E82/40AC46C4B72211EB9FEA891EF8AEA228/kC4Bh228XGk7_mL7v2fubbanGDE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:f1:91:26:48:1f:d1:c0:7b:a1:18:8b:af:f6:fb:0d:4c:53:
         a7:9c:79:dd:47:8f:51:8d:89:8f:98:aa:4e:2a:76:5a:f1:37:
         ed:2c:06:b3:2d:a6:c1:9d:d7:e6:83:bf:c9:45:4c:15:a4:f5:
         dd:e7:21:61:68:bc:cd:01:ac:0c:34:c7:d1:08:d4:c2:ba:c2:
         a6:e6:dd:66:1c:6c:01:1b:2b:de:ff:f1:c6:c6:8e:11:77:63:
         a9:8d:2f:1d:9c:da:d6:70:d3:da:76:fe:a6:c2:60:fd:fb:ce:
         28:98:3c:e3:d8:7e:70:d0:2c:ef:70:89:ec:65:f9:0c:a1:a5:
         75:be:61:c1:d8:9b:c8:e9:b2:92:f1:6f:97:61:f5:c7:93:19:
         0d:7d:a9:1d:5d:c5:20:64:aa:9e:e3:d1:13:56:14:dd:6b:ce:
         b9:1f:3e:94:80:3a:f0:72:ee:3b:6b:2c:a1:0b:50:8b:84:04:
         b9:a8:18:c4:3d:65:a6:19:0a:23:cf:ae:10:88:a7:21:10:1b:
         d0:00:35:20:73:fc:1e:e6:d9:3d:05:bc:44:bd:97:5f:66:95:
         a5:94:c2:d6:f5:96:d0:3d:09:0e:d1:69:3e:16:13:e3:d7:77:
         4f:ad:9a:a2:98:05:48:48:73:84:35:5b:3f:7f:fb:f8:37:08:
         1d:f6:c5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----