Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
File:                     g9HRV2Bl4FAfLXR0TVFF001qcqo.mft (raw, json)
Hash identifier:          uJHfE6uyo+p8xQUiEGi7HkhcCAGTpwCmnFT91UD30F8=
Subject key identifier:   B4:AB:0F:A1:2A:67:22:63:35:F3:B6:0E:11:46:72:41:47:03:E9:CC
Authority key identifier: 83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA
Certificate issuer:       /CN=F3690D01AF/serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
Certificate serial:       0469
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
Manifest number:          0468
Signing time:             Sat 10 Oct 2026 03:44:42 +0000
Manifest this update:     Sat 10 Oct 2026 03:44:41 +0000
Manifest next update:     Mon 12 Oct 2026 03:44:41 +0000
Files and hashes:         1: g9HRV2Bl4FAfLXR0TVFF001qcqo.crl (hash: LiO/emOSrQNpiq/5Gy28RSo6nidAVhYbUbQnelwjigo=)
                          2: B5BAB51C637E11EEBB2D437E4AD9E6FC.roa (hash: lTgo88jgYIBRxqWVkQ/cnQHAMBRJfU2wE+z/YeI8Onc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3690D01AF, serialNumber=83D1D1576065E0501F2D74744D5145D34D6A72AA
        Validity
            Not Before: Oct 10 03:44:41 2026 GMT
            Not After : Oct 12 03:44:41 2026 GMT
        Subject: CN=6ac9b4aa-da29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:19:40:5b:53:3a:7a:3e:c8:2e:d6:61:95:84:
                    3b:06:64:56:98:b6:e9:aa:d1:65:32:7f:8b:e0:9d:
                    c9:0c:1a:3f:0d:fd:48:c3:dd:3e:aa:ad:a1:2d:22:
                    ee:8a:a0:16:cc:d0:9d:6d:ae:05:e9:ca:c3:c1:49:
                    fa:bf:73:70:ea:03:97:93:52:b1:3e:d5:c1:c4:19:
                    7c:ff:cf:a9:f9:5f:e9:ad:62:62:1b:d1:c2:1f:ee:
                    15:80:5d:af:76:ea:3e:5f:1e:8e:1e:c6:d2:8b:90:
                    e9:e5:7e:20:f7:97:03:fd:85:38:c4:0d:2c:1a:ae:
                    19:95:55:6d:b4:54:0e:1c:bf:7c:96:56:84:40:9e:
                    27:d5:cc:1d:eb:3d:02:92:bb:38:15:28:4f:26:15:
                    92:5a:ab:44:07:79:48:62:64:2e:73:ff:5e:99:87:
                    88:0f:35:f3:ee:9f:62:59:7d:eb:42:20:33:4a:ee:
                    05:81:87:81:0b:fd:5b:65:76:20:c4:3c:ca:e3:15:
                    a8:b4:cf:8c:66:86:12:55:9e:b1:d1:36:e4:1e:51:
                    95:59:86:e0:3e:df:03:b8:62:5d:38:be:02:20:b1:
                    79:9a:e1:02:6e:82:fc:c0:97:f6:58:2d:13:de:38:
                    e7:8a:31:c9:09:96:d7:6e:33:17:21:64:42:3f:86:
                    e8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AB:0F:A1:2A:67:22:63:35:F3:B6:0E:11:46:72:41:47:03:E9:CC
            X509v3 Authority Key Identifier:
                keyid:83:D1:D1:57:60:65:E0:50:1F:2D:74:74:4D:51:45:D3:4D:6A:72:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/g9HRV2Bl4FAfLXR0TVFF001qcqo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3690D01/1C287B8C637E11EEB7B0817C4AD9E6FC/g9HRV2Bl4FAfLXR0TVFF001qcqo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:e7:32:0b:9f:6f:3d:58:19:92:8e:5c:91:62:4f:81:44:24:
         4a:87:7d:af:65:13:68:f7:39:4c:d7:c6:75:87:8b:06:f1:2c:
         74:0a:f7:a6:28:1e:68:08:ce:39:e1:ae:b9:81:27:13:27:c2:
         bc:63:ed:87:55:b0:c3:a0:10:73:9f:37:f7:a6:e0:2d:63:16:
         74:73:4b:60:27:98:83:bb:11:f2:bc:b2:aa:5a:73:5f:ef:19:
         22:b3:0e:e7:ec:c9:b1:59:63:30:ab:bf:a9:e8:7b:2a:fa:a7:
         9e:0d:c0:4d:35:4e:58:9a:0c:1f:25:46:9f:0a:78:52:75:b5:
         7a:10:78:57:a1:dc:9d:25:60:db:09:e7:9a:00:c6:fa:36:8c:
         2f:47:81:ce:dc:e9:88:41:73:ef:99:ed:aa:24:54:f4:8e:40:
         17:f2:8e:94:22:03:77:be:c3:19:f5:89:74:fe:73:a9:d9:f1:
         22:38:30:83:be:54:c3:54:e6:57:b4:46:09:9e:56:d3:e3:77:
         38:83:1d:5c:1c:d4:26:6b:98:8b:c2:92:f8:38:70:06:05:01:
         ee:e9:50:df:71:06:94:2a:b4:8b:5d:9e:f8:42:94:1e:59:a5:
         d2:f3:66:c3:7e:b3:a6:a4:f0:65:a5:8b:2d:c5:28:ee:57:f6:
         2c:f5:cf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----