Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
File:                     kXMyk_xjUK7funWpFv_0G1Fez0w.mft (raw, json)
Hash identifier:          GAq+I1/PFtoTxh/laYzwdAvhd7cPpdoK31xXt2MvllQ=
Subject key identifier:   EA:C5:4E:01:A9:AA:F3:D4:23:7B:81:76:D6:36:DE:5D:E5:BF:BF:DE
Authority key identifier: 91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C
Certificate issuer:       /CN=F3683A54AF/serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
Certificate serial:       075F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
Manifest number:          0758
Signing time:             Sat 26 Sep 2026 02:24:48 +0000
Manifest this update:     Sat 26 Sep 2026 02:24:47 +0000
Manifest next update:     Mon 28 Sep 2026 02:24:47 +0000
Files and hashes:         1: kXMyk_xjUK7funWpFv_0G1Fez0w.crl (hash: 0jP3MTf/0KLlfo0bu7L8Mh7+oi9vAK6N3lHt4B+Qaf4=)
                          2: C1A5E32A873311F1818BD6E3CE1D38B0.roa (hash: MlaWz+iw8BJ1MUQeTJwhJ9d/vpySNP8qvYNISa9IMmY=)
                          3: 58977490B0DF11F1A1FBC1F1CE1D38B0.roa (hash: N11/bWdhvJMGtJ4/BrZKOXxSUZeKS0aLH8pXMLFi838=)
                          4: 8B40C2F2243A11F1A0BEB48ADAE4EC9C.roa (hash: 3620Wsxd/t0/oMKvGDVNw2kGd63Qxyzn+iydXrHbac4=)
                          5: 7EE185A6B21611EFA9BDF294762E951A.roa (hash: G6244Azl/uqe8/mj3zsQM21nztQl1zF4+5qvnRVhw/Q=)
                          6: 04D8EA84873411F192C0F7E3CE1D38B0.roa (hash: 0W5gaxdOwk+b6dfWlmRPJjKXBz2u49fbrmDgcDEqrHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1887 (0x75f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3683A54AF, serialNumber=91733293FC6350AEDFBA75A916FFF41B515ECF4C
        Validity
            Not Before: Sep 26 02:24:47 2026 GMT
            Not After : Sep 28 02:24:47 2026 GMT
        Subject: CN=6ab72cf0-ae09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:68:cb:6b:6e:e4:e5:4a:7f:3e:6e:59:b8:5d:
                    ea:c0:42:74:ed:f7:94:a4:57:d9:0b:6f:d7:23:a5:
                    84:7b:58:37:d3:84:c1:b2:a5:c7:2f:30:97:7a:92:
                    f0:2b:0f:e5:c8:19:3f:2d:ea:69:69:f6:c0:82:34:
                    66:1a:de:57:0f:03:be:8c:29:e1:7a:1a:67:64:e2:
                    ca:bc:80:1e:d9:e2:7d:3f:9e:c9:4a:ee:05:95:73:
                    3b:cd:eb:e2:be:56:e7:9e:a9:09:bf:6a:24:f4:99:
                    32:8c:ac:f1:be:da:b6:1f:32:36:b7:a4:07:4d:51:
                    9c:f6:15:58:9f:49:5c:3d:6b:78:2a:91:b0:f4:4c:
                    a7:d0:be:6c:2d:61:51:41:69:81:f5:d3:9c:d5:2e:
                    a3:44:56:a2:89:9a:e8:7e:f6:1a:e4:20:72:91:5a:
                    c2:c6:38:a8:88:62:9e:cc:97:36:79:6c:0d:2c:95:
                    ad:4e:e6:74:a1:b8:b8:55:08:3b:4b:14:43:90:f5:
                    fb:f2:33:32:be:b2:52:3e:aa:ae:58:a6:54:bf:fb:
                    0d:fb:be:59:50:ff:50:58:fc:78:96:91:b5:b2:85:
                    28:fb:81:63:0b:d8:42:9d:30:8f:d7:70:12:61:e4:
                    01:44:44:4d:e9:a8:f2:3a:4c:b3:cd:aa:a0:81:d2:
                    0b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C5:4E:01:A9:AA:F3:D4:23:7B:81:76:D6:36:DE:5D:E5:BF:BF:DE
            X509v3 Authority Key Identifier:
                keyid:91:73:32:93:FC:63:50:AE:DF:BA:75:A9:16:FF:F4:1B:51:5E:CF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kXMyk_xjUK7funWpFv_0G1Fez0w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3683A54/5C3677F21F7811EC9A12311AD8A014CE/kXMyk_xjUK7funWpFv_0G1Fez0w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:aa:50:80:b0:2b:12:a6:a7:82:32:6f:92:93:71:ad:0a:a5:
         ae:02:04:71:fa:fb:02:71:14:0b:04:e3:24:af:eb:4e:26:81:
         ec:b6:1d:57:8f:97:a8:a3:5f:97:02:93:74:19:a1:16:3c:37:
         26:17:89:9c:85:60:c5:42:dc:de:36:eb:02:02:c6:a0:08:0d:
         4f:35:b5:9c:a0:13:e2:52:92:74:04:85:86:b2:ad:fc:19:7a:
         d7:f7:e3:43:78:64:60:6d:e1:5d:d7:d4:0d:bb:c1:b0:fb:a5:
         3c:77:88:55:aa:8c:d4:62:9e:39:63:62:ab:27:62:d3:d5:38:
         c9:e8:6b:c1:14:dd:de:6f:e3:b7:f7:b1:ac:d1:cf:d2:7b:db:
         49:e7:f3:93:0c:69:21:84:ae:82:a9:64:ab:26:e5:fb:f7:3c:
         f0:b2:c3:57:83:14:f4:87:1e:85:96:36:fd:4a:fc:df:f5:53:
         ae:09:28:e4:2e:5c:94:ce:00:98:74:4a:5a:fa:b6:ab:a5:db:
         d7:f4:c6:11:70:20:a4:60:6b:e3:f1:06:87:63:d6:73:d5:b2:
         15:f3:6f:9c:8f:53:a9:99:f3:dc:51:80:33:b7:1a:ff:bd:73:
         4f:a2:f2:80:1c:fd:55:af:3c:59:8f:4b:32:75:29:04:36:9d:
         cd:b5:26:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----