Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
File:                     RSGre8up5c6Zxxr-vyNySLagDAQ.mft (raw, json)
Hash identifier:          lpDWb2sqRrKHU8/UPW4kXHnMvGyWPSah1UjqteB5P3Q=
Subject key identifier:   C6:D8:CD:B9:26:95:C2:1B:F8:80:84:42:B4:EA:41:61:AD:9B:DE:58
Authority key identifier: 45:21:AB:7B:CB:A9:E5:CE:99:C7:1A:FE:BF:23:72:48:B6:A0:0C:04
Certificate issuer:       /CN=F368CB9CAF/serialNumber=4521AB7BCBA9E5CE99C71AFEBF237248B6A00C04
Certificate serial:       89
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
Manifest number:          88
Signing time:             Mon 28 Sep 2026 05:41:56 +0000
Manifest this update:     Mon 28 Sep 2026 05:41:56 +0000
Manifest next update:     Wed 30 Sep 2026 05:41:56 +0000
Files and hashes:         1: RSGre8up5c6Zxxr-vyNySLagDAQ.crl (hash: iOC+GdfiwOPZaw71AndnV8rt/eCR+z8qLuFyjD45J8Q=)
                          2: ECF7E816529011F19C538BF1CE1D38B0.roa (hash: KeoVSn8KB99E9DkmWp38WX9SJJQPBicrHWJ8t32m24w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 137 (0x89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368CB9CAF, serialNumber=4521AB7BCBA9E5CE99C71AFEBF237248B6A00C04
        Validity
            Not Before: Sep 28 05:41:56 2026 GMT
            Not After : Sep 30 05:41:56 2026 GMT
        Subject: CN=6ab9fe24-36da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:53:d2:21:d1:02:8c:be:bf:e5:d3:1d:a9:c7:
                    ae:4e:0b:ac:7a:32:d5:08:52:f0:09:e6:7e:0c:0e:
                    24:e6:cb:1d:28:3f:72:5d:20:97:ec:24:f1:3d:03:
                    e4:bf:02:d6:cb:9f:cc:da:e5:cc:ef:06:79:35:fc:
                    96:53:23:d8:6a:6a:b7:cd:2e:dd:29:13:8c:92:63:
                    6d:08:46:07:d0:dc:4a:4c:a8:a6:28:4d:f6:9c:a1:
                    4e:c6:5c:65:01:10:72:f7:5a:b5:67:d2:a5:83:e0:
                    d6:1b:2c:7a:93:c7:41:3f:7e:00:c6:97:32:d7:5a:
                    36:a4:40:e9:fc:49:a0:b0:d8:68:84:80:90:e7:81:
                    d0:d7:76:03:d8:d5:ce:17:e5:91:76:7a:71:3c:61:
                    10:05:68:ce:ea:27:8a:d3:13:b4:dd:f3:9c:90:33:
                    d1:d1:dd:3a:11:7b:dd:e9:ea:93:24:ca:58:b8:fd:
                    95:c6:58:12:d4:3e:e4:f7:f5:05:42:42:9b:f8:c3:
                    18:0f:bf:0a:e5:5c:28:6d:37:dd:d0:6b:65:d6:93:
                    a8:c5:83:4d:ec:2c:56:e3:02:83:d7:53:b5:dc:31:
                    62:07:5f:15:7c:52:c9:fc:df:3f:01:c9:1b:74:35:
                    b7:79:f8:6a:45:ec:8e:dd:f0:2d:49:e0:20:82:5b:
                    e5:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D8:CD:B9:26:95:C2:1B:F8:80:84:42:B4:EA:41:61:AD:9B:DE:58
            X509v3 Authority Key Identifier:
                keyid:45:21:AB:7B:CB:A9:E5:CE:99:C7:1A:FE:BF:23:72:48:B6:A0:0C:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RSGre8up5c6Zxxr-vyNySLagDAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368CB9C/FE452F46528D11F1931543E1CE1D38B0/RSGre8up5c6Zxxr-vyNySLagDAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:ca:91:11:3b:5b:37:45:68:26:49:61:66:9e:f9:94:2f:40:
         90:56:63:f1:c6:7b:67:07:9b:c4:05:a2:20:e9:b7:10:49:0a:
         0d:0f:8b:3f:1b:c5:58:62:56:c7:c4:05:25:29:1c:e7:0f:31:
         df:53:38:b8:2f:4e:57:ef:48:83:46:99:45:74:61:60:ff:08:
         d5:12:5b:1e:3a:10:2d:6f:88:b1:72:f5:fa:e2:ad:e0:d1:d9:
         21:8d:0c:e9:10:99:9f:b7:a4:82:75:79:2a:74:9f:de:01:ea:
         10:34:6f:9c:b5:39:ca:10:ae:4d:03:34:d2:19:e5:4c:de:f1:
         fc:3f:d6:1c:82:2b:14:e5:e9:b3:d2:8c:30:60:ab:93:19:b0:
         88:b8:b0:ff:d1:01:a1:98:a3:cd:6c:f7:a0:da:c3:a9:3c:11:
         be:22:72:a6:e6:a9:7d:0e:0d:e1:06:56:0c:41:cc:16:97:1f:
         fb:78:8c:75:53:c1:9d:9e:0e:71:6d:7b:79:ea:10:f2:47:53:
         09:45:f8:f5:26:c5:43:86:98:30:b0:e0:04:0d:89:fb:8d:e5:
         a7:34:99:d8:8b:c9:77:55:e6:5a:90:8d:8b:9f:7e:95:17:a2:
         9e:b5:8f:1c:c8:54:66:60:8c:a0:42:e5:4e:2e:47:18:1b:64:
         5e:72:3a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----