Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
File:                     mlfRoEhHbJDZjDymmHBdYtTdRNM.mft (raw, json)
Hash identifier:          kDwhFyUJ68MCUthNsF5wlITh8Y2w7likNVuR10yGOi0=
Subject key identifier:   97:FC:E8:08:DE:BA:61:DF:74:28:02:84:31:52:82:27:B8:4F:F7:FC
Authority key identifier: 9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
Certificate issuer:       /CN=F36A44EAAF/serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Certificate serial:       0AEC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
Manifest number:          0AE5
Signing time:             Sat 14 Nov 2026 01:26:54 +0000
Manifest this update:     Sat 14 Nov 2026 01:26:53 +0000
Manifest next update:     Mon 16 Nov 2026 01:26:53 +0000
Files and hashes:         1: mlfRoEhHbJDZjDymmHBdYtTdRNM.crl (hash: A2erl8yDUZcLVVY8TFDEthz63NGLTnaICxy02ZWziwo=)
                          2: A59E099282C411F0B018AEC1DAE4EC9C.roa (hash: okBnUm/NcC2euNDAK0BM3ThQh/20GIpH4iqpfDhnEF8=)
                          3: E600EA8C82C311F0AA9237BDDAE4EC9C.roa (hash: fG/5xWCUdEM58O5TjC0L4Y26zDzPnoakqNic7vSKxmM=)
                          4: 6A3D42E489B911F1BE2734BFCE1D38B0.roa (hash: xFggCMOp+wX+72NPjHT5Q9DwGoQjc5rzY3XRbug6TNk=)
                          5: 193C239E82C411F090E870BDDAE4EC9C.roa (hash: aipTiaVnDtgCS5hSfDq+yj7qAJemAqvJkMKoIB8dgLA=)
                          6: A800754A82C311F09AF518BBDAE4EC9C.roa (hash: SAIigmdTDHDxOusEjUmretqLmVMcAl3gAWgtzTQZPeI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2796 (0xaec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAF, serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
        Validity
            Not Before: Nov 14 01:26:53 2026 GMT
            Not After : Nov 16 01:26:53 2026 GMT
        Subject: CN=6af7b8de-c6a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:88:2d:a2:77:d1:2a:32:4e:83:c2:dd:80:
                    96:a8:48:e3:b5:68:d9:53:75:a5:d8:ff:93:b1:3f:
                    3e:1a:e4:9e:2a:a5:42:f9:a0:49:07:a5:69:bc:e0:
                    cd:44:ff:8d:ae:10:5a:39:0c:7d:24:88:fb:f9:7e:
                    23:16:fd:35:41:ad:3d:82:6b:5f:dd:40:cc:3b:d5:
                    bf:ad:c2:ff:d2:cd:7e:c6:7b:79:a6:3a:9b:92:ab:
                    67:cc:6f:26:0c:1b:69:c6:ac:8e:76:47:26:8f:a7:
                    41:03:35:e9:8d:4d:37:4c:f1:87:d6:db:be:e6:33:
                    77:8d:3d:15:f8:87:58:33:06:75:d0:ed:1f:2e:66:
                    32:67:a1:16:b8:06:67:1f:0b:8d:5a:13:9f:22:22:
                    d0:58:cb:35:23:13:5b:73:89:65:58:0a:8f:ad:5a:
                    62:11:04:fd:89:53:a4:92:35:ac:11:a1:93:1a:16:
                    de:3f:41:c8:6c:57:fd:14:4e:92:33:9a:7e:5a:32:
                    e8:2a:50:45:a9:7c:2a:b9:c6:ad:d6:02:69:a5:e0:
                    f8:82:ec:c7:aa:d0:e8:d0:af:6d:ea:aa:e4:ed:21:
                    31:a0:18:14:78:d2:ea:43:93:11:ca:e3:72:cc:66:
                    ac:06:2b:20:d2:d1:52:8e:c2:ba:e1:e8:ea:ab:1b:
                    5f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:FC:E8:08:DE:BA:61:DF:74:28:02:84:31:52:82:27:B8:4F:F7:FC
            X509v3 Authority Key Identifier:
                keyid:9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:89:0f:4c:2f:ef:99:56:d0:23:54:9c:2e:de:aa:be:f3:
         0b:d8:7c:8c:a6:c9:e7:60:d4:55:97:c1:15:cf:7c:e6:29:d7:
         52:0f:e8:ef:a6:80:70:d0:45:3d:eb:a7:5b:d3:d5:de:7e:82:
         f2:1d:41:e2:fb:12:5f:87:91:79:19:75:99:2c:ff:e9:2e:98:
         11:08:4b:49:37:96:18:09:76:a1:56:5b:57:5a:1b:b5:55:fe:
         37:00:62:40:dc:1d:84:6c:e6:14:1b:fe:97:01:36:c8:e5:2a:
         b6:82:b8:bc:ff:1a:96:a5:b1:65:55:87:2e:85:c3:6d:a7:80:
         27:9d:2d:4d:3f:6a:b3:9f:e2:f1:08:9f:a8:e3:61:2f:6d:10:
         be:5f:0a:d6:d5:eb:32:7a:80:14:ec:3e:74:be:0b:b7:4b:7f:
         02:fa:c9:57:e0:62:95:3b:7c:52:fd:86:58:18:86:72:ec:b9:
         81:2e:26:9b:2b:ea:dd:cc:6c:72:a6:37:75:b7:52:e1:79:6e:
         eb:1e:af:8d:d6:26:3e:94:8a:e6:99:25:c5:4e:a2:57:4b:02:
         b8:47:71:fb:3b:3f:98:cf:eb:09:dc:18:76:79:be:73:73:07:
         09:a4:79:fc:9b:7e:f3:4a:18:ea:4f:1a:9d:1d:06:7a:18:d8:
         79:82:07:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----