Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
File:                     KF9hqPUjMGRTeGWSdEagBQLhHr8.mft (raw, json)
Hash identifier:          kzcHxw+U4uwnoskQUO9FGOls4RjPrP8VFB3BtyWUUqM=
Subject key identifier:   A3:6C:FB:6B:24:95:4A:64:20:7F:F8:B8:A8:5E:C0:F1:6E:CD:47:AD
Authority key identifier: 28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF
Certificate issuer:       /CN=F3689F69AF/serialNumber=285F61A8F5233064537865927446A00502E11EBF
Certificate serial:       0349
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
Manifest number:          0348
Signing time:             Wed 23 Sep 2026 04:15:40 +0000
Manifest this update:     Wed 23 Sep 2026 04:15:39 +0000
Manifest next update:     Fri 25 Sep 2026 04:15:39 +0000
Files and hashes:         1: KF9hqPUjMGRTeGWSdEagBQLhHr8.crl (hash: 3U5A5CMNNHHLFBBYkcY17iwI9IK5tfwOTamDJCc79CY=)
                          2: A2FF32042FC511EFBE676196762E951A.roa (hash: MuoQsTFj3ssT2hnoWxBqVt3bP80rh30BWABu61vrcCw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 04:15:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 841 (0x349)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3689F69AF, serialNumber=285F61A8F5233064537865927446A00502E11EBF
        Validity
            Not Before: Sep 23 04:15:39 2026 GMT
            Not After : Sep 25 04:15:39 2026 GMT
        Subject: CN=6ab3526b-68af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:1c:4b:62:f2:cc:b7:65:dd:09:77:17:e1:
                    db:d6:1b:4c:0e:07:be:5f:2b:83:a8:d8:07:dd:46:
                    58:e2:68:d4:0b:24:e9:9d:df:8a:f9:d6:b1:35:4f:
                    d7:fe:72:4f:a0:52:26:93:1c:2d:e3:22:16:fe:01:
                    47:4d:e6:45:30:2b:62:12:21:20:8c:8d:16:87:7c:
                    49:e4:69:c9:5a:37:c9:af:96:81:a2:aa:c8:84:50:
                    6d:f8:55:37:c0:f7:ce:62:d6:57:3e:96:8e:70:e6:
                    a8:06:76:00:84:8d:46:e0:38:68:dc:66:72:88:60:
                    ee:68:8b:8d:4e:28:25:92:6c:d2:8e:48:5d:a4:aa:
                    cd:cd:6a:bd:fd:7e:b6:44:34:d4:f9:a8:dd:29:42:
                    2b:79:44:50:63:d1:2a:3d:34:5c:08:ad:ea:15:f1:
                    1c:e0:c6:a4:d4:53:79:65:2c:2e:fa:0b:39:a1:29:
                    a7:4d:78:1e:b1:fe:9c:04:3b:7d:eb:22:49:a9:b1:
                    c9:07:44:b6:97:fc:3e:41:0d:7d:e1:43:ad:f2:18:
                    db:89:7a:c9:61:74:8c:1d:a3:3c:e5:5b:87:f9:31:
                    20:3a:cb:85:ad:5a:33:58:c1:b4:1c:f5:55:4d:0b:
                    49:63:bd:9d:cc:57:6f:12:7c:cb:93:48:5b:0b:ad:
                    56:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:6C:FB:6B:24:95:4A:64:20:7F:F8:B8:A8:5E:C0:F1:6E:CD:47:AD
            X509v3 Authority Key Identifier:
                keyid:28:5F:61:A8:F5:23:30:64:53:78:65:92:74:46:A0:05:02:E1:1E:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KF9hqPUjMGRTeGWSdEagBQLhHr8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3689F69/B6B5A48C2FC411EFA04CDA8D762E951A/KF9hqPUjMGRTeGWSdEagBQLhHr8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4d:87:e5:aa:42:61:24:2e:a0:7a:a4:c1:fe:85:94:d7:7d:
         25:ac:c7:14:f5:a1:26:37:56:9e:4b:5f:f6:98:6d:9e:ec:3c:
         99:24:3d:63:a6:a2:04:70:ec:7c:ac:9e:5a:f5:e8:06:7c:de:
         45:4c:09:ea:e0:34:42:da:ab:38:6f:61:5a:09:91:5b:b5:e8:
         24:a9:16:ff:c5:1c:c9:ab:11:50:34:48:4b:46:f5:34:57:7e:
         98:69:66:5c:bd:05:bf:f6:34:28:7a:df:d4:45:d0:1b:fb:b8:
         d1:bf:c3:ef:eb:73:c2:d5:88:ad:18:47:d2:39:c1:ee:0f:55:
         54:23:53:ad:0f:2f:a7:fe:2c:e3:2e:16:af:4d:f3:5f:43:68:
         8d:39:bc:77:a7:fb:e7:db:be:0e:5d:05:02:74:c3:0b:20:73:
         75:67:be:23:f8:94:6d:98:9d:08:7a:cf:aa:0d:20:97:5c:7d:
         e8:c1:da:6c:8d:c2:03:02:a4:0a:c0:28:cd:9a:c8:2d:e7:0d:
         4d:e5:84:f0:8b:bb:bb:ad:f1:04:a0:04:ab:6d:97:cf:4c:a7:
         ae:d0:4c:29:2c:cd:2f:88:25:3f:c1:5f:5c:ab:20:6d:be:94:
         ed:f2:2b:48:a4:1e:d9:16:35:1d:ee:d1:a7:26:44:51:b1:2f:
         80:a7:d1:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----