Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
File:                     RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft (raw, json)
Hash identifier:          uIe7ojdf6vmpmg16rkJamFtBboMBR40agYylkWBwyag=
Subject key identifier:   AA:8A:ED:71:96:FC:81:0C:F6:1E:5D:1E:EB:B6:C4:18:B6:3B:57:37
Authority key identifier: 46:56:97:35:11:59:D1:41:E5:49:2F:8D:DC:00:11:71:F6:D1:E5:F2
Certificate issuer:       /CN=F36AA372AF/serialNumber=465697351159D141E5492F8DDC001171F6D1E5F2
Certificate serial:       0179
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
Manifest number:          0177
Signing time:             Sat 14 Nov 2026 05:12:58 +0000
Manifest this update:     Sat 14 Nov 2026 05:12:57 +0000
Manifest next update:     Mon 16 Nov 2026 05:12:57 +0000
Files and hashes:         1: RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl (hash: U6wa/OUg4FQoujFTIn3wJ/FZz4pReSd2T9SzZMt7eT0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 377 (0x179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AA372AF, serialNumber=465697351159D141E5492F8DDC001171F6D1E5F2
        Validity
            Not Before: Nov 14 05:12:57 2026 GMT
            Not After : Nov 16 05:12:57 2026 GMT
        Subject: CN=6af7edda-2cae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c3:c1:1b:a5:03:3d:11:fd:60:87:e1:57:8b:
                    72:06:a2:dc:78:51:fc:4b:c4:b1:75:f0:69:34:76:
                    e4:1e:46:75:d9:59:69:9f:db:fd:56:2c:c9:0b:21:
                    e0:55:a2:96:d3:0c:97:d2:d3:11:b3:33:78:41:df:
                    09:4c:0b:69:2e:c1:00:77:14:e8:52:62:97:01:00:
                    44:a7:b3:69:92:cf:24:fd:73:60:ac:34:4b:03:ef:
                    45:6f:a3:b7:4c:25:a5:7b:7e:c7:fb:72:5e:11:74:
                    8a:3a:d3:e4:e3:df:b0:6e:fc:29:b9:5f:e9:88:e7:
                    2f:c9:be:c7:dc:8b:97:db:fd:94:71:30:80:3d:ee:
                    ee:93:b9:c3:e0:df:51:0d:5e:8a:83:a9:59:a8:23:
                    be:d2:38:55:79:1c:cb:02:0d:fa:d5:46:0d:b5:2f:
                    ed:c9:3b:1f:94:21:26:a5:d4:8c:c5:e3:b4:ce:c3:
                    6a:9b:83:fe:ef:75:34:39:14:44:4e:f4:24:08:9b:
                    0e:71:3f:44:fe:ee:8c:18:23:4d:43:92:d9:70:25:
                    74:ad:12:44:a0:89:00:aa:07:0a:c7:9b:85:46:ce:
                    b7:7c:f3:5e:d6:8f:60:49:a9:48:ba:66:48:74:45:
                    2c:44:10:57:45:df:d1:d7:e6:53:c4:6a:74:50:30:
                    99:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8A:ED:71:96:FC:81:0C:F6:1E:5D:1E:EB:B6:C4:18:B6:3B:57:37
            X509v3 Authority Key Identifier:
                keyid:46:56:97:35:11:59:D1:41:E5:49:2F:8D:DC:00:11:71:F6:D1:E5:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/RlaXNRFZ0UHlSS-N3AARcfbR5fI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AA372/2DD27FE8BFC211F09C621AC9DAE4EC9C/RlaXNRFZ0UHlSS-N3AARcfbR5fI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:18:3a:54:11:08:aa:ce:33:09:c4:00:0a:a2:ff:3d:9e:5f:
         ca:42:69:98:6f:5b:cb:92:e2:64:4e:18:12:9e:3d:65:7f:1d:
         ac:2b:37:88:3f:73:85:2b:04:fb:5c:2e:3d:cb:38:9d:17:be:
         a8:94:bd:1b:dd:f5:b0:b1:b1:1c:ea:c9:22:05:24:47:23:be:
         3c:ea:1c:57:15:fd:cb:76:25:de:b1:e0:22:94:5c:3c:a2:3b:
         05:a2:c7:2e:b8:9a:16:c6:e1:01:0f:35:89:bd:95:b3:e1:ee:
         12:f4:0c:8e:a7:0c:8f:82:e7:83:ab:03:7e:45:c6:b7:0d:a0:
         63:19:10:e3:02:41:63:b7:c9:e1:ae:fc:e1:d1:73:76:a8:83:
         b6:c8:d6:93:b7:1b:eb:be:73:ad:dc:0d:fc:5f:00:e4:1e:2d:
         18:84:08:31:b7:b2:6d:f8:e8:e0:6e:66:d6:cf:4e:ab:4c:df:
         8a:ab:45:cd:96:8a:d2:e2:fc:85:f8:8f:35:ed:08:9a:4d:28:
         01:12:b3:e6:59:28:7c:e8:3f:1c:71:bc:b1:c9:e1:15:fd:99:
         1b:f3:91:10:be:02:43:9b:86:5f:ac:ee:1a:5c:83:42:b0:75:
         45:bb:bf:d0:a7:39:c3:6b:b6:47:99:3b:5b:89:a4:42:07:08:
         28:ac:67:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----