Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
File:                     9zORrduc3mc6pJF07KjUMLSfGcM.mft (raw, json)
Hash identifier:          dBFq6vPCp2VpGCgMZfkioYxwBdtWcyanpiAt9Bg4hRI=
Subject key identifier:   8E:45:50:E6:A1:3F:E7:36:3A:C6:74:03:90:90:07:CB:A6:0A:4E:F0
Authority key identifier: F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3
Certificate issuer:       /CN=F36914A7AR/serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
Certificate serial:       0A17
Authority info access:    rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
Manifest number:          0A16
Signing time:             Sun 27 Sep 2026 01:37:37 +0000
Manifest this update:     Sun 27 Sep 2026 01:37:36 +0000
Manifest next update:     Tue 29 Sep 2026 01:37:36 +0000
Files and hashes:         1: 9zORrduc3mc6pJF07KjUMLSfGcM.crl (hash: iONJyrLNojBZxFhQjZjx0wnaQyT2gzi33thmYRuTZTs=)
                          2: FBB32E86FC8111E9BB7F292CF8AEA228.roa (hash: HuM3BwkpOIpwBJ+xYmwrtHtu6kY28m4Q/SLVfLjrjjs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                          rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2583 (0xa17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36914A7AR, serialNumber=F73391ADDB9CDE673AA49174ECA8D430B49F19C3
        Validity
            Not Before: Sep 27 01:37:36 2026 GMT
            Not After : Sep 29 01:37:36 2026 GMT
        Subject: CN=6ab87361-479b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:88:20:e7:5d:e3:6e:c9:26:3d:5c:0d:79:14:
                    5d:61:4d:53:5d:a7:8e:48:3f:9f:10:fc:30:c0:2a:
                    c1:30:81:cf:ff:23:b2:1b:5a:cb:6a:81:13:7b:5c:
                    d5:b1:3d:1d:9f:9e:85:68:86:9e:41:db:c2:e2:6c:
                    1e:43:e4:a6:8f:4a:b4:86:e0:ae:1f:2c:51:be:94:
                    fb:76:8f:fd:82:a4:f7:45:c9:ce:11:f5:b0:c9:53:
                    47:26:22:16:62:f4:e6:6a:7a:9a:c1:8f:7e:e6:dd:
                    56:de:5b:4f:d8:64:e6:b1:ef:3e:6f:00:d2:50:b6:
                    1c:33:62:f6:49:9e:5a:fc:c2:dd:a8:45:59:14:02:
                    85:f4:6d:27:a8:4a:17:61:8d:f7:e3:f0:28:c5:1d:
                    30:ee:9b:cc:df:a3:21:ce:66:26:fe:e6:61:c5:3a:
                    ca:7f:a5:33:92:b8:26:99:9e:b8:62:4b:e3:ae:7c:
                    3e:fb:9f:67:4f:9d:58:22:df:d4:7a:81:a7:3a:cd:
                    b5:67:3d:33:b5:4f:ec:aa:50:39:6c:2c:30:0f:c1:
                    35:b4:a3:c0:0e:28:68:ae:ce:a5:ee:b9:e3:c6:5e:
                    97:8d:38:c5:46:cb:8e:7b:41:ac:02:9c:de:cf:a7:
                    30:0b:24:cb:7d:43:19:ee:fe:9a:18:c4:83:7a:e7:
                    ce:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:45:50:E6:A1:3F:E7:36:3A:C6:74:03:90:90:07:CB:A6:0A:4E:F0
            X509v3 Authority Key Identifier:
                keyid:F7:33:91:AD:DB:9C:DE:67:3A:A4:91:74:EC:A8:D4:30:B4:9F:19:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/9zORrduc3mc6pJF07KjUMLSfGcM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36914A7/D82C43FAFBFD11E99E04E847F8AEA228/9zORrduc3mc6pJF07KjUMLSfGcM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:d6:65:ed:22:71:50:ec:82:a8:2d:83:5a:3b:e0:85:26:21:
         5e:80:f5:52:3e:ef:b9:cd:d6:b8:2e:ec:fc:86:2e:5c:8c:f5:
         a4:9b:64:36:b8:92:98:2e:1d:69:03:f5:fb:fb:82:ec:0f:2f:
         ac:e6:e2:b9:c0:a3:0c:af:df:d4:32:e5:9e:e0:f3:8f:ca:40:
         25:ac:9d:3d:28:6c:d9:0d:a5:2f:6c:32:d4:08:4a:36:b1:4c:
         11:04:0b:69:a8:e9:4b:0e:ac:9f:e5:22:20:86:ff:e4:41:65:
         30:b1:0b:3a:bc:c4:5b:40:11:d0:dd:a5:4f:05:30:99:82:c7:
         a0:68:ae:60:d4:2d:60:87:f2:b5:78:ca:4e:06:d4:58:b2:62:
         87:e9:92:18:c1:62:ad:58:b2:4a:2d:0a:11:9d:b9:95:cf:0d:
         32:9d:7c:80:40:4f:53:8b:ec:8b:25:84:ed:ca:a4:31:b1:95:
         52:35:8f:74:a9:c7:ee:e9:71:d6:d9:08:72:81:7e:83:8d:e4:
         30:89:ea:98:5c:22:fe:cf:9e:05:82:f0:0f:d1:16:b3:d8:43:
         f7:85:87:e7:50:31:89:a4:8e:d3:b9:c5:ac:63:a0:c5:b5:ec:
         84:1e:e0:7e:2b:c7:e8:8d:53:de:4d:4b:9f:44:69:0c:72:cf:
         b0:99:f6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----