Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
File:                     BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft (raw, json)
Hash identifier:          yHF+oLULUlsm9OVEvZGR5oiGkHMvZKspHOkwPflE1gE=
Subject key identifier:   7C:65:7C:62:D6:3C:A7:81:47:16:BC:08:D9:60:71:66:C1:53:BF:E9
Authority key identifier: 04:5B:52:50:43:CB:43:EE:AB:DA:7F:24:63:7F:40:40:89:19:B6:F5
Certificate issuer:       /CN=F36C72A2AF/serialNumber=045B525043CB43EEABDA7F24637F40408919B6F5
Certificate serial:       0117
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
Manifest number:          0116
Signing time:             Thu 24 Sep 2026 05:19:53 +0000
Manifest this update:     Thu 24 Sep 2026 05:19:53 +0000
Manifest next update:     Sat 26 Sep 2026 05:19:53 +0000
Files and hashes:         1: BFtSUEPLQ-6r2n8kY39AQIkZtvU.crl (hash: TK2ymcTz1ijaDWSn+U7pDoh/XE/YU5ZzJapBCeW1uBI=)
                          2: 8EAA7E36DFD611F0BA2968D3DAE4EC9C.roa (hash: mhjtBp/gVSpcPcvCT9mQUfotVZ3SIRjPfe6SWCs+5dE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C72A2AF, serialNumber=045B525043CB43EEABDA7F24637F40408919B6F5
        Validity
            Not Before: Sep 24 05:19:53 2026 GMT
            Not After : Sep 26 05:19:53 2026 GMT
        Subject: CN=6ab4b2f9-9061
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:af:e4:16:d2:1d:ec:3d:dc:b9:1c:95:fa:
                    57:e6:61:46:1a:ed:11:b3:0a:6d:43:3a:82:15:87:
                    b7:b0:9a:0f:ab:49:af:80:9e:30:03:5f:5c:ed:92:
                    6a:89:8f:56:41:78:5f:80:73:5c:ba:58:53:4b:72:
                    bc:15:e7:80:b2:e5:31:b5:de:ae:c2:2d:b1:42:9b:
                    c6:eb:58:67:fb:8b:b3:4e:4f:cd:36:0a:62:c9:d2:
                    91:9d:59:45:ef:78:70:3f:7d:d8:83:96:65:b5:cd:
                    ee:4b:1f:a7:85:0c:17:a2:b6:45:bf:a3:c7:18:5d:
                    46:e0:ac:63:0d:49:04:d1:d4:ff:6b:94:4e:12:dd:
                    ac:34:0a:08:f0:68:3d:96:ac:75:6b:1e:dc:65:11:
                    d4:ed:78:3f:59:2d:f6:c0:b8:56:24:e9:67:a1:81:
                    e0:4f:48:59:42:cd:bb:3e:4f:bf:97:09:ff:66:05:
                    08:3b:a2:67:79:64:6a:3e:13:bc:3b:ec:d4:21:94:
                    10:83:73:76:f1:ed:52:8f:a8:23:0c:f5:36:ca:1e:
                    5d:ae:38:c1:43:90:de:c2:f7:6a:84:24:eb:bd:0a:
                    b9:8d:97:05:d0:ea:64:17:36:ba:c3:b0:24:39:2f:
                    f6:97:9e:98:c6:3d:16:b4:7a:66:b2:5c:ca:96:56:
                    4a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:65:7C:62:D6:3C:A7:81:47:16:BC:08:D9:60:71:66:C1:53:BF:E9
            X509v3 Authority Key Identifier:
                keyid:04:5B:52:50:43:CB:43:EE:AB:DA:7F:24:63:7F:40:40:89:19:B6:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BFtSUEPLQ-6r2n8kY39AQIkZtvU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C72A2/BA0C023ADFD511F0A7B90CCEDAE4EC9C/BFtSUEPLQ-6r2n8kY39AQIkZtvU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1e:cf:a9:d7:94:e7:7a:60:8a:a5:4a:60:c3:04:30:8c:e1:
         1c:78:3f:39:78:d1:03:91:80:3b:86:48:7b:a0:f4:16:5a:c5:
         75:0f:cb:06:22:d7:b3:67:ae:89:64:d8:af:4e:15:e3:b2:7f:
         d6:83:1c:39:aa:ea:fe:4b:f7:71:d0:cd:09:02:87:82:62:bb:
         79:cd:e8:24:aa:a8:50:12:74:c9:b5:dc:b9:c3:c9:6a:ef:c8:
         b8:cf:0f:6d:88:f2:4c:51:88:a4:db:4c:0c:4e:1b:89:a1:85:
         b9:11:86:99:56:0f:50:25:98:d3:d7:a9:45:3b:d4:e3:94:67:
         ba:a0:99:cc:38:89:0d:ae:01:e4:0a:8f:6e:67:29:7b:a4:3b:
         16:2d:6c:29:fb:e4:14:8a:dc:03:a7:59:a9:ce:5f:8e:da:c2:
         f1:ae:1a:1c:06:46:f0:57:54:44:92:00:59:99:d9:8d:a1:65:
         60:d3:53:81:a4:94:8f:74:d6:e7:85:6b:06:4a:31:1d:bf:d9:
         44:79:90:27:a1:d7:0f:08:7e:30:44:60:95:66:c6:c8:7c:6d:
         cd:31:85:3f:cb:1c:bd:67:77:20:8c:ea:4e:0b:17:1d:f5:1c:
         84:e0:5d:64:ba:21:f7:7c:2c:de:c3:e2:f5:7b:ea:e5:6b:0a:
         6d:cc:10:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----