Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
File:                     i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft (raw, json)
Hash identifier:          GX9kcYeDs4bLqrgHBgZPDQgy+kagneR9CXMg+tMkPOY=
Subject key identifier:   57:ED:65:F4:CB:C4:90:9B:65:6C:A2:B9:39:FF:E4:8A:D4:68:21:74
Authority key identifier: 8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4
Certificate issuer:       /CN=F36C06DFAF/serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
Certificate serial:       02E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
Manifest number:          02DF
Signing time:             Wed 23 Sep 2026 04:34:06 +0000
Manifest this update:     Wed 23 Sep 2026 04:34:06 +0000
Manifest next update:     Fri 25 Sep 2026 04:34:06 +0000
Files and hashes:         1: i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl (hash: 4y0k6Mo5Hoc/gqYyVn8Y0z8zPWoXAxGF7P2GK/hM3Mw=)
                          2: A50DEF3A8A1B11EF86B3879F762E951A.roa (hash: 6S2eWQOAsB1C05yblXJP2r9a9WQgQ6FEOxOlJb4U21M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 04:34:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 739 (0x2e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06DFAF, serialNumber=8BF44A3919B01DD545A5137DC96D8887C14494C4
        Validity
            Not Before: Sep 23 04:34:06 2026 GMT
            Not After : Sep 25 04:34:06 2026 GMT
        Subject: CN=6ab356be-6cb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:30:68:60:25:09:ec:f2:cd:59:21:89:4b:cf:
                    d1:de:88:05:a1:a1:41:61:80:25:14:3f:11:20:39:
                    75:f0:4f:8a:73:63:5c:67:b3:85:a0:7a:35:c3:fa:
                    61:7f:05:21:77:ec:f8:35:f4:fe:da:3b:50:59:cc:
                    6d:3e:81:c5:e1:6d:04:d3:36:4c:3d:3b:e0:ab:d1:
                    b3:78:ec:b5:78:c8:7c:44:f5:75:ca:4b:f9:5c:16:
                    9d:60:77:60:fa:88:9d:b6:39:ef:6a:fa:c5:17:92:
                    06:ee:92:6b:ee:f6:1d:dd:6a:ef:cd:df:68:ab:fa:
                    2c:dc:a0:c0:77:7d:88:b2:19:6c:ab:5b:42:77:47:
                    82:5d:e2:e5:45:ed:98:39:c9:63:4b:4d:6d:2c:3f:
                    d5:c6:b2:1f:f2:e2:f8:04:a2:12:de:e9:c8:bf:5c:
                    a5:31:00:53:8d:e9:21:17:60:c5:37:8a:51:5e:c9:
                    fc:43:61:a0:9c:c5:e1:cf:b1:78:b3:75:35:0f:a5:
                    03:17:69:8c:02:7c:a6:2f:f3:58:d9:00:87:24:21:
                    bd:c9:4e:08:11:7b:e1:bf:95:39:83:80:72:43:77:
                    60:af:d2:18:74:41:0c:67:2c:63:7c:26:25:c9:0d:
                    85:51:3b:08:13:49:a0:f3:5d:78:ba:4c:a9:eb:be:
                    de:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:ED:65:F4:CB:C4:90:9B:65:6C:A2:B9:39:FF:E4:8A:D4:68:21:74
            X509v3 Authority Key Identifier:
                keyid:8B:F4:4A:39:19:B0:1D:D5:45:A5:13:7D:C9:6D:88:87:C1:44:94:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/i_RKORmwHdVFpRN9yW2Ih8FElMQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06DF/3600B3AA856811EF8C875646762E951A/i_RKORmwHdVFpRN9yW2Ih8FElMQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:b0:bf:38:24:48:67:25:78:70:2d:00:47:19:a8:7e:f0:57:
         71:70:98:b3:f2:5e:b2:5b:16:f6:53:0f:c5:06:a8:c7:0d:4d:
         20:95:bc:f9:41:b3:1c:8e:a4:e7:4d:b8:e9:78:9e:a8:50:b0:
         f5:2a:93:cc:bb:ae:49:af:c9:40:f8:d0:d6:0b:1a:73:dc:27:
         ce:64:a6:02:0b:3f:11:1f:8b:eb:a7:8c:ec:41:a5:6d:a9:bc:
         bc:7f:b9:e5:6f:5f:e6:6d:71:9f:03:66:63:0e:33:7c:f1:70:
         c3:4f:63:8a:f8:55:b2:8b:f5:f4:69:11:d4:44:72:b6:4b:e7:
         fb:bf:37:50:04:22:ae:7b:52:46:71:a2:c8:89:06:98:ab:2a:
         a8:25:aa:7a:8f:05:0d:68:7a:d4:87:9f:a1:b3:8a:55:0a:b4:
         81:db:10:37:74:e9:47:e4:89:3f:5b:84:1c:62:17:24:f9:61:
         41:0a:19:07:9d:8f:c0:68:a6:d8:33:05:ee:d3:a9:5e:2b:01:
         16:57:76:2c:52:84:c8:af:9d:a7:37:b8:0c:72:87:a8:db:cf:
         45:26:3c:e9:1a:b8:f8:0c:67:a1:aa:db:a2:8c:c8:c8:23:ea:
         c6:17:ae:d1:76:4d:b9:5d:67:40:f6:b7:c2:c1:ef:2f:b4:92:
         bb:f6:47:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----