Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
File:                     Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft (raw, json)
Hash identifier:          ZAQLvcjuHxOlz4JTXTmSjC4FCXpJhX0jbH/qipUPnGQ=
Subject key identifier:   6C:9E:18:DE:AE:A6:4E:B3:B3:11:56:3E:45:F9:2D:43:D8:48:FC:83
Authority key identifier: 67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39
Certificate issuer:       /CN=F36B5EE7AR/serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
Certificate serial:       01AF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
Manifest number:          01AE
Signing time:             Wed 23 Sep 2026 05:02:36 +0000
Manifest this update:     Wed 23 Sep 2026 05:02:35 +0000
Manifest next update:     Fri 25 Sep 2026 05:02:35 +0000
Files and hashes:         1: Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl (hash: gXgkW3B4ow02ROuLnnGx/A+D7rpgauNQbeFzbAUPvm4=)
                          2: 38D8D2366B9211F095FD868ADAE4EC9C.roa (hash: QAj9ZVXFClZ+xgA1S3DzLLKJ/tdZw+gURdKUv7+f/hc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                          rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 05:02:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 431 (0x1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AR, serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
        Validity
            Not Before: Sep 23 05:02:35 2026 GMT
            Not After : Sep 25 05:02:35 2026 GMT
        Subject: CN=6ab35d6c-334d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0a:58:eb:14:09:1e:4a:b9:b7:b3:74:1c:73:
                    ec:d8:dd:5e:5d:2f:2f:30:13:62:3e:cc:ee:f6:ef:
                    61:eb:31:3a:c5:ad:15:76:d3:e6:cc:c4:e2:7e:af:
                    5e:d7:5c:77:07:50:fc:8e:f1:ba:e8:cf:b8:02:29:
                    1a:f1:90:f5:b5:a0:30:3b:d4:99:f8:10:ce:39:86:
                    38:f4:7b:e4:a2:8c:3a:ad:ab:1f:d7:df:57:9f:17:
                    1b:82:15:c3:cc:9a:ac:31:76:a0:a1:8f:90:98:7d:
                    63:32:6b:06:e8:ef:9e:66:17:2f:19:b6:83:48:24:
                    c0:fb:90:77:50:25:3b:04:a7:d7:fe:42:69:eb:6d:
                    56:8f:f1:3b:37:b8:b8:6c:4d:74:ba:07:f5:a5:18:
                    ae:8f:62:e6:aa:7a:34:b5:18:1a:ad:b3:fc:15:dd:
                    c6:d3:8f:03:da:87:e2:d6:1b:e2:b7:00:1c:27:6d:
                    07:c8:b0:8c:6e:6b:15:c5:8e:0d:1b:56:08:c9:7e:
                    50:76:fb:f1:7f:30:48:2e:dc:43:0c:98:2a:e2:94:
                    84:3c:24:db:76:92:85:3f:81:32:5c:42:6d:30:72:
                    da:2e:31:3a:b3:f8:aa:09:9b:e8:3b:c5:32:d6:81:
                    29:c0:cb:8c:f6:5e:66:97:77:e7:68:51:15:93:bf:
                    4f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9E:18:DE:AE:A6:4E:B3:B3:11:56:3E:45:F9:2D:43:D8:48:FC:83
            X509v3 Authority Key Identifier:
                keyid:67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:2a:f3:6b:ec:82:3a:46:94:9b:90:6c:a2:ec:83:b6:84:dc:
         19:98:ed:d5:7d:f9:ff:a1:36:2f:cc:f3:61:7c:9b:2c:e2:d5:
         ea:0b:91:18:9f:99:a6:41:1f:ec:ab:01:e5:cf:05:e4:5c:09:
         1d:a5:7a:11:ca:c5:20:0d:d0:7f:c0:00:51:3b:65:0b:32:78:
         a9:5d:e1:08:44:8f:ec:41:ad:a0:ca:91:bc:21:f8:75:22:26:
         d7:7a:e7:04:66:a8:f3:d1:d8:bc:6a:63:df:e0:3a:88:32:8b:
         df:53:bf:5f:fb:dd:68:1c:ac:d6:3c:70:86:ae:0d:d0:05:85:
         ad:b8:3b:c2:a2:e5:5b:95:b8:27:8a:b6:f5:ed:06:28:33:ee:
         fa:94:88:3b:06:43:e7:14:b4:23:ea:35:1a:c4:fa:5e:05:54:
         f3:f0:e4:7e:8b:6b:a1:e6:ee:86:f4:4f:e6:e7:d8:e9:9d:26:
         fb:18:ba:45:53:7b:a8:ed:22:1e:17:c3:32:0c:14:8b:85:63:
         60:a8:d2:65:27:4d:5c:ac:6b:72:a9:0f:e8:f4:e3:9b:2f:92:
         bb:9b:8c:5b:dc:c9:8d:af:dd:16:86:ab:1a:7a:3b:4e:80:af:
         f5:93:c9:67:7f:01:a4:d6:f4:3e:f6:d2:d0:df:1d:2a:55:0f:
         d1:34:e5:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----