Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File:                     cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier:          JnKyqEx9qsKl5tPpzs5XcwzyL32NIGS0y6IJxfWDeRg=
Subject key identifier:   1A:ED:03:9E:06:D7:A8:CC:56:F4:D8:43:2F:7A:FD:28:F6:BA:35:B6
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer:       /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial:       07CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number:          07CF
Signing time:             Thu 08 Oct 2026 02:11:33 +0000
Manifest this update:     Thu 08 Oct 2026 02:11:33 +0000
Manifest next update:     Sat 10 Oct 2026 02:11:33 +0000
Files and hashes:         1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: qUEaqyywaUDieZk4YeGiQ2uElRfzBjWhFAKmpodqqiA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 10 Oct 2026 02:11:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1999 (0x7cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
        Validity
            Not Before: Oct  8 02:11:33 2026 GMT
            Not After : Oct 10 02:11:33 2026 GMT
        Subject: CN=6ac6fbd5-1ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:75:20:55:36:c4:5a:60:b0:32:ba:ad:1e:74:
                    cf:a9:19:2d:47:58:37:f6:4e:8f:31:a1:08:ab:0a:
                    68:a5:38:69:0f:62:5d:80:d9:a4:29:94:55:dc:a4:
                    84:ce:69:5f:03:25:d9:b5:0a:4b:00:73:ab:58:cd:
                    fe:66:7e:16:82:cf:95:8a:5e:48:a4:0a:90:7f:9c:
                    c8:1d:f7:ad:2b:c1:84:fe:6b:dd:40:da:ba:ea:70:
                    13:10:50:06:5d:4b:23:db:c1:e8:1c:dc:6d:29:1e:
                    e1:7f:06:5d:03:63:f0:18:52:c1:21:56:9a:61:21:
                    96:7d:2a:e4:5e:b1:19:c4:c2:af:48:8a:99:55:fe:
                    9b:8e:b4:9a:f1:55:4b:94:86:bb:63:f0:bb:aa:c0:
                    c2:86:a9:41:64:6e:60:42:92:36:2f:14:0c:a2:c2:
                    30:71:e4:c2:4b:e6:e8:26:ac:b2:78:9d:de:94:09:
                    f1:35:dd:24:54:30:21:a1:f0:59:03:6f:b4:33:7d:
                    4b:9d:aa:bd:9d:54:da:f7:28:2d:c8:ac:8e:6e:c2:
                    0f:6c:b5:9e:bd:ef:9d:91:b2:25:0a:df:be:65:50:
                    a0:8d:49:6a:61:87:f4:e0:41:55:aa:1c:f9:72:f7:
                    28:36:53:b7:16:a4:9e:2c:23:aa:6e:df:99:9a:0c:
                    2b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:ED:03:9E:06:D7:A8:CC:56:F4:D8:43:2F:7A:FD:28:F6:BA:35:B6
            X509v3 Authority Key Identifier:
                keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:23:d1:a2:36:4e:7c:a6:cf:3c:b3:d7:14:c5:59:8e:d0:bb:
         61:66:73:8f:0a:e4:24:e4:fd:e6:0a:a5:7f:08:e5:cb:b4:64:
         07:ce:1a:8e:8c:50:f2:1e:f4:4f:45:77:71:c2:96:34:3c:44:
         1a:ca:30:86:11:af:84:3f:4b:22:cb:f6:9e:7d:11:41:e7:99:
         b2:9c:2b:66:ea:a5:cd:f2:fd:b6:32:c7:95:96:e2:47:7b:e2:
         48:06:85:10:75:dc:03:73:65:8d:11:59:85:4e:a2:f1:98:73:
         60:04:24:ad:c3:d2:33:c1:73:64:76:d8:89:99:04:23:85:fd:
         73:25:4a:3d:50:97:ab:63:a4:7a:74:73:d1:97:3f:76:aa:62:
         1b:da:d1:47:67:7b:4b:ba:f9:e9:28:bf:dc:ed:5b:4d:d7:7c:
         95:9b:a2:b6:90:bc:a9:1c:22:ac:4f:23:3f:5d:6d:8c:32:95:
         53:02:ac:32:0a:a3:50:92:f9:d3:4e:23:ea:b3:de:3f:47:6d:
         9f:4b:ec:eb:66:da:80:a3:9d:08:49:c9:04:e3:f7:64:a1:71:
         65:9c:d4:2c:85:bb:67:a8:b9:63:8d:cb:14:93:0a:e6:49:b7:
         9b:91:26:a6:c7:3f:e1:b9:58:84:33:a0:31:9d:bc:36:fc:a6:
         39:cb:7c:0f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB88wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgyQTFBRjExMC8GA1UEBRMoNzFGNkUzNUUwMTBCQzc4N0Q4OUEwQjRCQTkzM0Q5
OTZGQUQ0REFEMjAeFw0yNjEwMDgwMjExMzNaFw0yNjEwMTAwMjExMzNaMBgxFjAU
BgNVBAMTDTZhYzZmYmQ1LTFhYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNdSBVNsRaYLAyuq0edM+pGS1HWDf2To8xoQirCmilOGkPYl2A2aQplFXc
pITOaV8DJdm1CksAc6tYzf5mfhaCz5WKXkikCpB/nMgd960rwYT+a91A2rrqcBMQ
UAZdSyPbwegc3G0pHuF/Bl0DY/AYUsEhVpphIZZ9KuResRnEwq9IiplV/puOtJrx
VUuUhrtj8LuqwMKGqUFkbmBCkjYvFAyiwjBx5MJL5ugmrLJ4nd6UCfE13SRUMCGh
8FkDb7QzfUudqr2dVNr3KC3IrI5uwg9stZ69752RsiUK375lUKCNSWphh/TgQVWq
HPly9yg2U7cWpJ4sI6pu35maDCvxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGu0D
ngbXqMxW9NhDL3r9KPa6NbYwHwYDVR0jBBgwFoAUcfbjXgELx4fYmgtLqTPZlvrU
2tIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MkExL0FBNzU1ODJDQzdDNDExRUJCNTIwQTY2OEY4QUVBMjI4L2NmYmpY
Z0VMeDRmWW1ndExxVFBabHZyVTJ0SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NmYmpYZ0VMeDRmWW1ndExxVFBabHZyVTJ0SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODgyQTEvQUE3NTU4MkNDN0M0MTFFQkI1MjBBNjY4RjhB
RUEyMjgvY2ZialhnRUx4NGZZbWd0THFUUFpsdnJVMnRJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDHI9GiNk58ps88s9cUxVmO0LthZnOP
CuQk5P3mCqV/COXLtGQHzhqOjFDyHvRPRXdxwpY0PEQayjCGEa+EP0siy/aefRFB
55mynCtm6qXN8v22MseVluJHe+JIBoUQddwDc2WNEVmFTqLxmHNgBCStw9IzwXNk
dtiJmQQjhf1zJUo9UJerY6R6dHPRlz92qmIb2tFHZ3tLuvnpKL/c7VtN13yVm6K2
kLypHCKsTyM/XW2MMpVTAqwyCqNQkvnTTiPqs94/R22fS+zrZtqAo50ISckE4/dk
oXFlnNQshbtnqLljjcsUkwrmSbebkSamxz/huViEM6Axnbw2/KY5y3wP
-----END CERTIFICATE-----