Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
File:                     bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft (raw, json)
Hash identifier:          4Am6ZR9ONs+5JSklMOUe+/g7UVd15J7YLniyR9yrRV0=
Subject key identifier:   71:4F:48:C2:E8:F7:57:57:CB:BE:70:F3:2D:C4:45:51:53:6F:98:6A
Authority key identifier: 6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A
Certificate issuer:       /CN=F369B918AF/serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
Certificate serial:       085E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
Manifest number:          085D
Signing time:             Thu 24 Sep 2026 01:59:04 +0000
Manifest this update:     Thu 24 Sep 2026 01:59:03 +0000
Manifest next update:     Sat 26 Sep 2026 01:59:03 +0000
Files and hashes:         1: bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl (hash: Sz6et7Tq/Lh17Z/Wp98g8i3+MGlNVxYxqTW9qyUs07A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 01:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2142 (0x85e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369B918AF, serialNumber=6CF6DE5159C7D18F33E081B66F52968BB186380A
        Validity
            Not Before: Sep 24 01:59:03 2026 GMT
            Not After : Sep 26 01:59:03 2026 GMT
        Subject: CN=6ab483e8-4904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:91:9f:5f:c6:17:fe:87:0f:e6:5a:d5:20:64:
                    e9:74:02:00:99:89:9a:45:f6:fb:1e:d0:27:6b:89:
                    61:df:c6:89:c1:93:4b:d1:96:a5:8b:2a:7b:cb:46:
                    1c:f4:3e:a5:68:30:1e:ec:5a:b5:7d:30:7b:e8:4b:
                    50:7d:51:32:a6:2e:e6:d3:7c:91:9f:c9:58:c7:c5:
                    ee:0e:b1:ea:37:a2:29:4c:c7:5b:0b:8a:a5:e8:9c:
                    28:64:11:5b:16:75:fc:11:5f:ae:2e:5e:d9:8a:37:
                    1c:55:a4:dc:53:2a:0d:63:d5:a6:3f:cf:01:7c:06:
                    1e:ff:7d:42:7e:a1:fa:f2:c3:23:07:f3:3a:a6:a4:
                    75:8d:1f:11:75:f2:33:5f:dc:0f:78:1f:b1:c0:32:
                    a4:9e:6d:51:e1:92:f1:b7:5f:52:c8:1e:a6:60:57:
                    35:0f:f0:08:d2:1b:dc:66:7f:9c:cc:91:df:5c:c0:
                    9a:52:83:69:e5:a2:0f:88:85:87:36:19:ec:7b:a1:
                    ad:94:98:ec:20:db:1a:9b:16:0a:83:86:1c:fb:69:
                    2b:ff:9d:ae:00:22:66:64:5e:e3:6f:26:fd:7e:46:
                    57:ce:89:25:c2:b9:f0:b5:4a:85:69:bd:77:dc:54:
                    48:3c:d0:85:e7:ca:31:ac:17:87:79:b5:d4:dd:78:
                    02:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4F:48:C2:E8:F7:57:57:CB:BE:70:F3:2D:C4:45:51:53:6F:98:6A
            X509v3 Authority Key Identifier:
                keyid:6C:F6:DE:51:59:C7:D1:8F:33:E0:81:B6:6F:52:96:8B:B1:86:38:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369B918/AE6F6A464B4911EB8D665384F8AEA228/bPbeUVnH0Y8z4IG2b1KWi7GGOAo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:f5:70:4b:b1:2c:c2:cc:51:85:95:c0:96:ea:7a:11:eb:9a:
         2a:9e:a9:9b:96:2f:c8:a1:c9:68:56:72:b2:dd:48:12:8f:ba:
         1e:84:67:1c:39:2c:55:51:e5:e3:4b:16:ab:3e:3d:26:98:e2:
         cb:5c:91:a3:a1:f8:e7:14:0b:2a:73:5b:df:ab:86:42:ed:6d:
         a3:a8:cc:6d:10:2b:14:a3:73:8c:9e:8a:04:da:d8:0b:c4:91:
         fc:91:41:30:d3:28:49:80:de:5a:5d:f6:bd:28:2f:c3:1b:18:
         e8:14:a0:a9:5a:59:80:6e:e2:26:da:ff:a0:37:61:7f:93:4b:
         02:0f:13:37:bb:b7:e7:b8:78:f3:ba:95:a8:8a:14:b6:db:d5:
         2a:c1:04:f0:fd:22:9f:b7:89:3e:da:42:6d:79:8b:67:fc:6f:
         e8:9d:95:32:61:d6:eb:07:68:7a:41:cd:6d:96:65:35:a3:03:
         b8:c8:f4:d8:9e:a0:f2:30:95:b6:31:25:b0:3e:5d:21:21:39:
         3e:00:af:b2:af:3b:ec:8c:98:83:86:4a:c7:c4:78:1c:06:b8:
         0d:53:d7:5b:0a:6b:ac:a2:45:ae:e5:24:45:f2:6f:75:aa:da:
         82:a7:0c:46:81:a3:b4:2e:6a:a3:ea:80:cf:bb:fc:a8:35:2e:
         d5:47:b6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----