Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
File:                     x9L8K1pBgYUDSEdgnQScHin7chQ.mft (raw, json)
Hash identifier:          HVjmJkOcFQyDCVlgV+2fAolljPqUijrpz8LEdNMHqWc=
Subject key identifier:   26:24:44:F1:70:67:0D:E3:53:23:4B:85:90:E3:C9:E0:4B:D8:E2:6D
Authority key identifier: C7:D2:FC:2B:5A:41:81:85:03:48:47:60:9D:04:9C:1E:29:FB:72:14
Certificate issuer:       /CN=F3699206AF/serialNumber=C7D2FC2B5A418185034847609D049C1E29FB7214
Certificate serial:       1E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9L8K1pBgYUDSEdgnQScHin7chQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
Manifest number:          1D
Signing time:             Wed 23 Sep 2026 05:52:06 +0000
Manifest this update:     Wed 23 Sep 2026 05:52:05 +0000
Manifest next update:     Fri 25 Sep 2026 05:52:05 +0000
Files and hashes:         1: x9L8K1pBgYUDSEdgnQScHin7chQ.crl (hash: sNBU9VZVfsFO5vcXEcjAqK5BzkBtl2svTnnHO+diANo=)
                          2: E47E81D4A1D411F1B89ACFE1CE1D38B0.roa (hash: spGCEq03/xL3BDX1c6E8r0y4NhuuAf+laXwTQmjxv40=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9L8K1pBgYUDSEdgnQScHin7chQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 05:52:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699206AF, serialNumber=C7D2FC2B5A418185034847609D049C1E29FB7214
        Validity
            Not Before: Sep 23 05:52:05 2026 GMT
            Not After : Sep 25 05:52:05 2026 GMT
        Subject: CN=6ab36906-7d4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e4:8b:82:fc:01:3f:2b:97:1f:7d:58:b2:93:
                    2e:56:dc:69:13:77:90:28:8c:1f:ef:89:81:65:03:
                    82:ee:fd:b3:25:03:16:9f:1c:d0:dd:05:df:76:79:
                    6e:39:3b:f9:55:97:3f:6f:63:a3:8f:9c:41:f3:cc:
                    33:2c:51:dc:38:1f:68:33:b1:53:d1:ca:22:02:a8:
                    38:6c:0f:4d:0c:d1:30:6d:0c:f7:42:74:16:14:48:
                    53:48:1c:43:16:54:f4:84:ef:8e:56:25:5d:fd:69:
                    58:84:ac:7b:e8:7c:5f:60:80:ed:94:a1:de:95:d1:
                    b2:b7:63:20:ed:6e:3f:b1:dc:9a:82:14:48:b5:49:
                    11:08:d1:b3:be:f0:10:e7:0a:58:6e:74:da:b0:9c:
                    d9:65:19:78:7a:e8:76:0c:af:40:9f:85:ca:98:db:
                    19:f0:6b:90:c6:d5:57:28:5b:d7:fe:15:53:2d:23:
                    40:f8:03:5c:84:71:fc:89:17:89:b3:1b:2f:4f:38:
                    1a:d5:1f:38:81:f9:f4:2f:e2:5d:47:3a:5e:fb:00:
                    c0:7f:1e:b8:d8:5e:15:7c:fe:22:3e:67:30:b3:e7:
                    e6:eb:13:e7:01:77:ae:f1:12:78:b9:b9:73:8a:45:
                    a2:b2:f0:ec:81:ed:b2:8a:1a:07:bf:77:0a:c5:84:
                    92:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:24:44:F1:70:67:0D:E3:53:23:4B:85:90:E3:C9:E0:4B:D8:E2:6D
            X509v3 Authority Key Identifier:
                keyid:C7:D2:FC:2B:5A:41:81:85:03:48:47:60:9D:04:9C:1E:29:FB:72:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9L8K1pBgYUDSEdgnQScHin7chQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699206/9FFD2DF8A1D411F1B8EB37E1CE1D38B0/x9L8K1pBgYUDSEdgnQScHin7chQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:b1:01:59:4f:3d:8b:bd:ce:01:58:93:9d:da:a7:0b:8a:29:
         90:e0:f6:7f:57:ab:66:9c:ef:bb:95:c5:9b:b3:b2:26:37:36:
         dd:ea:52:0c:3e:b7:ca:30:14:1f:0f:64:75:24:59:42:40:47:
         9e:fa:1e:74:7c:9b:e8:da:fc:ea:46:5a:24:eb:4b:84:36:bb:
         1f:6d:94:b2:1c:5d:cd:46:ce:a4:26:07:3a:b8:10:d7:d9:0c:
         f2:9e:7b:66:6f:7c:0f:98:85:f2:65:a0:8a:9d:e8:1b:3d:b3:
         52:c2:b0:bf:1d:0c:58:d1:65:00:c6:c6:ec:96:20:37:f9:e0:
         16:bf:20:ce:72:eb:09:ee:ef:13:f9:20:89:06:83:01:da:35:
         3a:19:49:7b:33:2f:df:f7:01:a7:66:38:01:4a:34:a0:97:4e:
         ba:21:1b:b2:a3:26:15:ac:04:fb:11:d1:37:4e:fa:04:63:27:
         31:b7:28:e3:1f:a4:23:09:bb:be:04:2c:3d:19:d9:1e:05:3c:
         b7:a1:7d:f9:97:42:3d:dd:4c:5a:8f:1b:09:9c:a9:c6:86:b8:
         a6:ac:c0:03:cb:a4:a5:cf:fe:cf:1b:d7:f9:d1:21:39:8b:6c:
         82:73:7a:41:26:2c:52:d2:c5:d6:88:98:91:e0:be:22:f6:d1:
         28:39:ed:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----