Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
File:                     eRR9PW5TftaH0IV7r4SSgRj9pOU.mft (raw, json)
Hash identifier:          5z92HDO08g/34NWAHXVhg8Gm6XAN7acx4XGHbH9utY8=
Subject key identifier:   2A:10:95:8B:B2:92:07:26:80:E9:E6:E9:3B:FF:CA:B6:1C:60:48:D7
Authority key identifier: 79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5
Certificate issuer:       /CN=F3688163AF/serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
Certificate serial:       03FF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
Manifest number:          03FE
Signing time:             Sun 15 Nov 2026 04:01:26 +0000
Manifest this update:     Sun 15 Nov 2026 04:01:25 +0000
Manifest next update:     Tue 17 Nov 2026 04:01:25 +0000
Files and hashes:         1: eRR9PW5TftaH0IV7r4SSgRj9pOU.crl (hash: BFr9mJgM0JpVC++Yavm4XFmrConCWvxeF2ozLHUEtkA=)
                          2: E8A5A2BCCBC911EE8E9BEF77775412E6.roa (hash: uW1ZZtqf2li8jzBd7IN42gC/xPbqnD5CcVOfHA/YQtE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1023 (0x3ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688163AF, serialNumber=79147D3D6E537ED687D0857BAF84928118FDA4E5
        Validity
            Not Before: Nov 15 04:01:25 2026 GMT
            Not After : Nov 17 04:01:25 2026 GMT
        Subject: CN=6af92e96-d95a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:2c:a2:fc:8d:ee:6c:8f:f1:fb:6e:fa:e2:51:
                    2c:0e:3b:da:1d:a5:42:f9:a0:6d:81:b0:1f:65:28:
                    71:24:31:1f:49:2d:df:d9:a9:d5:86:c6:26:a9:8d:
                    a2:6a:47:8c:96:c5:5d:83:8e:95:37:6e:71:36:3d:
                    bf:73:b7:99:1f:d7:e3:c5:5a:9d:ac:41:65:ad:a4:
                    dd:f1:fe:91:f8:a8:5a:75:2f:f2:74:37:8d:77:ea:
                    bd:04:b7:f0:f3:f7:c0:db:9f:dc:53:ed:99:df:6f:
                    a8:4c:27:0c:49:82:15:b5:e2:fc:7c:77:17:b3:3b:
                    8c:b5:dc:3a:90:ed:83:3c:fe:b3:50:20:2c:e4:16:
                    3c:77:5e:88:ec:c0:95:da:28:f3:1d:ee:8f:da:db:
                    f0:6c:ca:0b:d6:94:da:3b:cc:be:a9:8d:c4:b8:d7:
                    fd:2d:b9:44:de:8a:1d:65:3f:42:b7:4c:f3:24:5e:
                    3b:ec:39:ee:14:ab:23:49:c6:9a:31:97:b4:ee:7b:
                    0a:fe:ca:15:9d:81:72:bc:16:c1:32:4a:00:78:ee:
                    75:1f:d8:b9:7d:5b:ca:1c:a3:f5:f3:a3:3b:4d:0a:
                    4c:b9:47:66:b0:73:88:01:9c:02:39:a3:16:fd:f3:
                    d1:c9:6e:be:f0:be:68:94:f5:5d:97:58:c4:89:79:
                    7e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:10:95:8B:B2:92:07:26:80:E9:E6:E9:3B:FF:CA:B6:1C:60:48:D7
            X509v3 Authority Key Identifier:
                keyid:79:14:7D:3D:6E:53:7E:D6:87:D0:85:7B:AF:84:92:81:18:FD:A4:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/eRR9PW5TftaH0IV7r4SSgRj9pOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688163/3982A74ECBC911EEA7F5F576775412E6/eRR9PW5TftaH0IV7r4SSgRj9pOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:38:24:f4:b6:88:8f:b7:cb:a0:67:95:03:e1:38:b3:f0:10:
         a2:fb:a7:74:dc:4f:7d:80:1f:93:5c:f5:9f:9f:42:7d:2a:64:
         78:e0:cf:73:4c:34:59:2b:6c:c1:25:b1:94:64:8d:fd:c7:6e:
         f7:ad:26:10:8e:4e:f7:43:cd:94:44:0f:fc:5d:24:c3:fe:15:
         df:96:87:23:84:07:b0:4f:b3:cd:22:ad:05:8b:a1:7c:57:df:
         07:23:ab:53:63:b5:fd:23:40:00:2f:41:30:e3:79:99:5e:00:
         2a:3d:1f:eb:ab:34:e4:92:29:7b:ce:62:df:cd:3f:11:a9:ab:
         66:2d:ef:03:91:36:7a:fa:fa:71:b0:78:76:78:ef:a6:95:32:
         e5:ef:15:f9:d2:86:af:3d:25:d8:d4:19:d5:8e:c6:4a:55:9a:
         3b:d7:f9:bb:d0:5b:ce:cc:bf:10:5d:7d:54:b8:76:47:52:db:
         1d:cb:cd:fd:25:d9:03:d9:08:06:38:de:1a:20:70:9f:f3:40:
         e1:95:16:e9:c1:55:43:9f:9a:ba:47:aa:c6:af:3e:51:7a:43:
         e8:a8:5f:35:1e:c3:be:b1:2a:07:31:b3:30:ae:d9:1f:e1:61:
         91:e5:2b:a5:cf:aa:dd:33:5a:0f:d1:f4:d3:25:31:2f:1c:ae:
         49:92:40:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----