Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
File:                     5OfkzwUGmYE4HGusKKJrtmmU0rc.mft (raw, json)
Hash identifier:          Kcvu7LlCTvik9yZR9i1h641NQRqBTO3Ab0hoaAc4lYU=
Subject key identifier:   32:4A:42:B3:6A:2A:6C:D4:8A:87:8D:37:2A:A6:35:8A:ED:25:CC:E9
Authority key identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7
Certificate issuer:       /CN=F36A6EA0AF/serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
Certificate serial:       0138
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
Manifest number:          0132
Signing time:             Fri 25 Sep 2026 05:17:47 +0000
Manifest this update:     Fri 25 Sep 2026 05:17:46 +0000
Manifest next update:     Sun 27 Sep 2026 05:17:46 +0000
Files and hashes:         1: 5OfkzwUGmYE4HGusKKJrtmmU0rc.crl (hash: CUUCxCthz5AkmGNjmokfn6ZqUZ+PHMVHol882yhMXns=)
                          2: F36F0F1AD0F611F0AB30B88FDAE4EC9C.roa (hash: dNGgCtw24nbAR58DF8sv0Wym3VwzJDfok0oC2N1xwvc=)
                          3: 2FFDE81CD34E11F0B7F1C9BADAE4EC9C.roa (hash: lmKBgc8wIXpN7ohFi3bEsVy0HhEMQZg8umYWi7PtY/0=)
                          4: 1811E4B2D34C11F0A34F27AEDAE4EC9C.roa (hash: 5J5kKxxmT3AitlgzrzKNAptdmk4cbkC8tOUOxsnY+GM=)
                          5: AFCDD206D34D11F0ADCD4EB7DAE4EC9C.roa (hash: Wushw/sA+miTMHcjq5BUALTuvax/UDlZ5uswbKq6gbc=)
                          6: B82C1EEAD34C11F0A0F487B0DAE4EC9C.roa (hash: EGArG9brFI7oxboTdJn16N3Dn9tsiL6qA8X8WNsrRI0=)
                          7: 216C2206D34D11F081CE2AB4DAE4EC9C.roa (hash: wmcnwC3N1n68tZ025Jzu1Yi8vDKdizTOQUqWDI3JT4g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AF, serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
        Validity
            Not Before: Sep 25 05:17:46 2026 GMT
            Not After : Sep 27 05:17:46 2026 GMT
        Subject: CN=6ab603fa-e949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:73:f1:63:81:63:06:bb:bc:cc:3e:fa:cf:db:
                    5e:11:38:45:8b:26:d4:4b:8f:da:ca:73:e6:90:b2:
                    73:71:32:62:96:36:98:74:23:c3:df:9d:69:1a:66:
                    1c:2d:a2:9f:11:b9:ff:c5:2d:9c:25:cc:c2:fe:05:
                    58:28:d8:c3:90:9b:fd:c8:60:b1:9c:01:43:50:54:
                    7b:e4:69:50:82:0a:b6:0f:b8:7c:c9:10:98:40:69:
                    d1:f8:70:5d:e5:12:86:e4:76:72:09:e9:88:ff:08:
                    8e:b7:08:0b:3d:e4:0a:2c:99:28:d8:be:b4:d5:5f:
                    2d:53:12:a8:4c:03:69:52:cf:66:a8:75:5e:7b:76:
                    3a:f8:4c:40:bc:1f:15:83:79:5d:d7:81:f1:70:58:
                    1b:33:95:07:d4:90:55:6a:e9:af:da:35:b9:36:2f:
                    ae:32:d1:e8:9e:60:a2:5a:43:dd:80:f0:79:d7:7b:
                    56:a2:71:80:16:fd:ff:ac:13:3c:0b:2b:7f:96:b9:
                    18:bf:9d:f6:dd:c2:87:b9:3f:3b:c2:a3:9c:a1:1c:
                    0e:37:15:0e:43:d2:e8:f7:c3:dd:95:3c:41:ac:7b:
                    28:ef:1e:fc:af:a8:ec:9f:b9:b3:ac:93:e1:44:e6:
                    40:bb:2b:15:2e:74:db:ec:2a:05:e8:a6:e7:be:5d:
                    2e:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:4A:42:B3:6A:2A:6C:D4:8A:87:8D:37:2A:A6:35:8A:ED:25:CC:E9
            X509v3 Authority Key Identifier:
                keyid:E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:3e:be:98:84:40:d6:33:0f:cb:a7:14:85:8e:8d:19:55:69:
         6d:ee:eb:21:01:3b:bf:d0:8d:7d:c4:af:0f:ff:55:68:fd:21:
         2f:c3:16:79:26:2b:ad:68:a4:53:d7:5d:2e:de:55:be:b8:1e:
         44:b3:26:13:68:22:ca:0f:88:da:6c:00:74:49:f7:78:dc:d8:
         35:91:1e:36:5e:35:ed:3e:0f:70:b7:09:0f:d3:be:92:4f:ad:
         7c:df:ca:8b:81:fc:77:c2:ed:03:a1:4a:80:11:c4:ff:fd:c7:
         9a:63:1d:d4:d2:40:23:c7:ee:53:ce:6c:9c:3e:d8:73:89:0b:
         10:2c:66:21:fb:68:b0:0e:a3:fc:e7:bc:60:f1:5c:de:a6:9a:
         e6:85:91:4b:01:cb:66:3a:c9:ed:d8:2b:b2:be:59:a5:b9:7e:
         e9:d3:97:50:dd:06:54:ec:b7:07:10:6d:04:5f:ea:f1:31:c9:
         00:76:94:ae:99:a8:5a:35:34:6c:11:56:bd:6b:be:a7:85:ad:
         73:e9:9c:35:e0:58:a7:3d:7d:4f:95:c0:fc:ad:d8:31:8e:ea:
         2a:1d:c1:f2:14:55:d2:93:26:ac:16:6f:a3:d3:72:9d:68:12:
         bd:95:d8:6f:bd:b0:e0:d9:77:8e:4d:60:ff:13:79:be:80:21:
         87:64:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----