Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
File:                     3YlMw4XaLW71JrsLssqqX8pm8MM.mft (raw, json)
Hash identifier:          Rtm6MAAxw+lVEWEveMVx1+OtzSI7dhOCXM1Aycez8vs=
Subject key identifier:   B8:C5:76:BD:A7:F2:49:F9:30:C4:8A:E3:B7:F7:45:85:DF:1C:33:24
Authority key identifier: DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3
Certificate issuer:       /CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
Certificate serial:       04CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
Manifest number:          04C9
Signing time:             Thu 24 Sep 2026 03:30:57 +0000
Manifest this update:     Thu 24 Sep 2026 03:30:56 +0000
Manifest next update:     Sat 26 Sep 2026 03:30:56 +0000
Files and hashes:         1: 3YlMw4XaLW71JrsLssqqX8pm8MM.crl (hash: 4nXrha+I/Axb6v6PsU2lysB68RM4cj00yjNfVTI9sMo=)
                          2: A0B834A6403611EF97C8EE46762E951A.roa (hash: kJ/+tKAV2nU5Yw7yHfU4bK7cxohBTA9n07WDnp1GBUA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:30:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAF, serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
        Validity
            Not Before: Sep 24 03:30:56 2026 GMT
            Not After : Sep 26 03:30:56 2026 GMT
        Subject: CN=6ab49971-85bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:25:a3:fc:25:7d:be:e2:34:87:94:0a:0a:c8:
                    57:de:64:0b:d8:59:26:99:95:3e:e2:9f:4e:90:f7:
                    fc:40:c7:ab:df:6f:ad:83:bb:13:c6:15:ab:87:50:
                    b3:4d:71:73:ed:d1:5c:4b:f5:85:32:f5:cc:d7:6f:
                    d5:1e:1d:e7:14:7d:2b:d9:b6:05:a8:81:53:bf:a8:
                    ff:28:10:3d:a7:dc:1f:06:d9:1c:0d:90:c4:e3:82:
                    10:01:5e:c2:4c:2e:4b:6a:05:40:71:65:18:56:9e:
                    99:c7:78:0d:33:eb:55:53:51:eb:e3:f8:d9:30:e9:
                    83:6b:81:e8:a1:23:72:97:d0:b2:75:2a:fe:5e:38:
                    69:b2:69:43:8d:ef:de:9a:45:8d:33:72:f5:74:b5:
                    5d:b4:47:e7:61:79:21:65:d2:4f:1f:3f:fe:dd:b3:
                    5d:74:63:df:f0:9f:5f:8a:e6:fa:50:7a:a7:52:36:
                    d6:f7:f4:4f:a2:33:f3:b0:9c:81:7f:c3:5e:0f:95:
                    f8:ad:25:5f:7e:62:e1:62:65:5c:3b:a1:00:f0:4b:
                    85:ec:c3:e8:ea:ef:b8:de:9f:19:3b:53:62:88:37:
                    f0:39:da:17:6c:37:b0:fc:c4:49:17:6c:7f:b6:eb:
                    de:56:62:35:8a:b1:cc:53:d4:6d:1d:22:9b:f4:2e:
                    f4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:C5:76:BD:A7:F2:49:F9:30:C4:8A:E3:B7:F7:45:85:DF:1C:33:24
            X509v3 Authority Key Identifier:
                keyid:DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:15:ad:fb:86:b7:c4:da:25:a8:e3:64:34:4d:7b:4d:95:8c:
         b1:6e:3e:94:7d:ed:cd:c8:b2:43:19:00:d5:61:f6:94:66:f3:
         03:69:72:f3:58:6b:24:ff:e5:ac:a2:4b:8e:92:b5:cf:a4:c9:
         1e:20:14:77:6b:ca:91:5e:91:0d:90:11:f8:4a:2d:68:48:cf:
         84:48:1b:ee:40:d2:9d:c7:56:cb:dd:11:8b:3c:13:60:50:2b:
         29:bd:5e:3c:2d:da:83:93:d7:ea:45:7e:be:b7:99:7e:f7:82:
         84:34:a0:6d:9e:1e:0f:73:98:8c:4f:aa:55:67:57:72:50:f2:
         41:ef:75:8b:70:c3:50:dd:2d:f8:93:48:a4:ed:ee:1d:66:d6:
         6d:17:86:6a:a8:bd:16:8a:f9:35:55:22:74:60:99:a6:19:60:
         ec:5a:20:d3:a2:07:9c:57:96:1c:00:7f:a2:e3:fc:83:02:aa:
         cd:9a:d3:e2:75:7d:b9:e6:20:1b:68:4c:d1:13:ab:19:77:8b:
         66:e4:4b:0d:17:b2:3d:90:87:b1:51:54:5a:8a:21:d5:2a:71:
         55:25:6d:a5:69:00:17:39:c1:9d:b1:1c:f9:6e:05:1d:90:a5:
         4c:08:5e:23:d7:6b:06:a9:f4:2e:44:5b:13:a8:9a:7f:c0:31:
         00:60:07:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----