Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
File:                     l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft (raw, json)
Hash identifier:          xAVybt9+X7vdaV+HVhT+Hwyn/DvNk/SuLDo8TAexa1k=
Subject key identifier:   44:60:55:CF:92:33:FC:60:FB:16:88:7C:3B:43:03:F8:0F:4B:AA:E4
Authority key identifier: 97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63
Certificate issuer:       /CN=F36B1EE5AF/serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
Certificate serial:       0327
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
Manifest number:          0324
Signing time:             Wed 23 Sep 2026 04:21:56 +0000
Manifest this update:     Wed 23 Sep 2026 04:21:55 +0000
Manifest next update:     Fri 25 Sep 2026 04:21:55 +0000
Files and hashes:         1: l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl (hash: JpHqY5Nr44c0o5YRFSxm5I+g5XUFSFaE3wXNPgnad10=)
                          2: 15FF8A604F2E11EFBF7DAA5D762E951A.roa (hash: Ji+PkrLYVd8mg+kmjzLysu+cTidIjguKCtckW26wTJg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 807 (0x327)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B1EE5AF, serialNumber=97CC893F4FD520F6736806F97962599B778E1B63
        Validity
            Not Before: Sep 23 04:21:55 2026 GMT
            Not After : Sep 25 04:21:55 2026 GMT
        Subject: CN=6ab353e4-d0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:bb:df:a4:2e:3f:50:0f:3d:c9:6c:9c:e3:66:
                    03:a9:d0:c6:6b:50:18:d2:6e:61:d3:d3:b9:98:39:
                    a4:3b:49:37:14:6a:2e:73:05:30:ee:c0:51:28:a6:
                    8e:ef:26:60:19:ef:ac:f5:6c:78:bc:51:aa:9d:c1:
                    34:93:a7:8f:c2:1a:fc:c2:b9:81:5f:0d:4c:21:df:
                    37:50:75:77:ea:dc:5a:19:42:d8:47:48:4f:b9:31:
                    9f:d8:57:d5:6e:2d:57:33:6b:53:73:e7:7c:e8:98:
                    a5:d6:82:45:94:f9:93:45:25:14:dd:7e:5c:ef:f6:
                    43:65:3f:4c:fe:98:4e:e9:81:a3:5c:d4:21:55:be:
                    f7:89:cb:db:bf:18:b5:b8:10:3d:31:d8:3e:e9:81:
                    25:35:53:e9:ea:09:2c:a1:16:2f:86:f0:f4:f0:e2:
                    d4:f5:14:1d:34:22:1f:2e:cd:a5:04:cb:e1:e4:71:
                    c4:b4:64:8f:69:f5:b0:2b:55:e1:07:37:ba:b8:db:
                    73:5f:56:4e:5c:d1:6c:5d:f9:5f:be:bf:38:dd:32:
                    60:ac:4b:4c:4a:65:79:e3:99:24:f3:1c:07:9e:c1:
                    9d:6a:f1:55:69:cd:d1:99:a0:c1:3c:0b:9a:eb:c4:
                    d7:95:28:35:95:11:3c:23:f2:77:c8:e0:6a:92:91:
                    b6:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:60:55:CF:92:33:FC:60:FB:16:88:7C:3B:43:03:F8:0F:4B:AA:E4
            X509v3 Authority Key Identifier:
                keyid:97:CC:89:3F:4F:D5:20:F6:73:68:06:F9:79:62:59:9B:77:8E:1B:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l8yJP0_VIPZzaAb5eWJZm3eOG2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B1EE5/21831C1C4F1511EFB7A68685762E951A/l8yJP0_VIPZzaAb5eWJZm3eOG2M.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:92:d7:c3:0c:12:04:82:55:ba:62:41:33:ad:d0:07:14:20:
         b2:24:22:8f:86:b8:ca:91:6d:83:24:0c:81:11:3c:31:03:13:
         89:1a:91:1b:61:e6:cc:bd:cd:eb:7c:f9:49:4b:d0:c0:f8:71:
         0e:d4:38:e0:14:b0:82:86:c2:c7:4e:ef:0c:69:d8:0b:44:cd:
         c8:69:8e:00:20:bf:c7:1b:16:41:61:28:c0:31:24:7b:1d:5b:
         4e:35:a5:37:9d:c8:f9:1e:f3:cd:15:3b:15:46:a0:09:a2:86:
         03:ed:dc:61:6a:f9:b7:73:2e:30:11:0a:2c:70:be:f1:62:a3:
         d1:e7:81:57:ca:7e:ad:16:21:f9:62:8a:ed:bd:81:a4:b3:bd:
         98:0d:f5:cd:1c:77:a6:00:10:8d:2a:a1:c1:a4:a6:f1:54:8f:
         47:63:63:37:c0:e0:2a:30:90:90:84:b9:f4:03:5a:c7:38:c6:
         7a:81:99:f6:4f:80:f2:db:b4:e9:11:34:7d:46:ce:eb:a9:9b:
         7d:c3:49:fa:25:8f:09:45:bc:ab:b1:a6:39:e2:fa:f5:fd:d6:
         4b:31:ce:da:88:4c:10:5a:26:aa:02:e8:e3:1c:5a:ef:41:70:
         a1:ce:f3:b1:a9:9d:37:4c:60:65:fa:e9:07:ee:dc:7e:6c:76:
         5f:1f:85:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----