Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
File:                     sNdja0QI8KwoxZz1uRZkvYIxQFA.mft (raw, json)
Hash identifier:          x3Dw6s0AlW1zHPdf6bkelTBG8lvgyjqgYDr4qNbkq3I=
Subject key identifier:   FF:75:7B:17:F1:E9:12:24:29:E2:33:14:AA:E5:78:48:C4:D1:8C:83
Authority key identifier: B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50
Certificate issuer:       /CN=F36CEA2AAF/serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
Certificate serial:       01DA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
Manifest number:          01DA
Signing time:             Wed 23 Sep 2026 04:55:48 +0000
Manifest this update:     Wed 23 Sep 2026 04:55:47 +0000
Manifest next update:     Fri 25 Sep 2026 04:55:47 +0000
Files and hashes:         1: sNdja0QI8KwoxZz1uRZkvYIxQFA.crl (hash: 3lv9z3mEmvBNQn+pdwxsv+fMSgLJ/UzPZA3ShdWWbN8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 474 (0x1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CEA2AAF, serialNumber=B0D7636B4408F0AC28C59CF5B91664BD82314050
        Validity
            Not Before: Sep 23 04:55:47 2026 GMT
            Not After : Sep 25 04:55:47 2026 GMT
        Subject: CN=6ab35bd3-5af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6b:62:a7:00:20:97:e1:5a:7d:7c:39:7c:45:
                    11:9e:dd:37:b1:3a:a0:ff:58:ae:6e:08:fc:c8:be:
                    24:6e:3a:64:c0:1f:76:6c:0c:20:7a:29:be:da:9a:
                    47:93:19:1e:0c:3b:5c:d7:ba:e7:4b:9d:e5:3a:04:
                    8b:81:64:d4:ed:de:b9:a5:eb:e2:d1:24:34:38:80:
                    c6:fa:02:fc:fb:2d:e8:14:76:19:78:88:8e:5e:a2:
                    bb:0a:2a:0d:98:7e:02:e6:62:cb:2e:14:1e:da:db:
                    04:4e:46:98:d6:3f:e8:7f:66:20:8d:42:5a:71:18:
                    71:a7:02:7e:ef:0f:2d:b6:84:42:83:62:c2:cf:4e:
                    55:38:7c:59:56:6d:60:22:88:e0:87:11:60:42:21:
                    c7:89:53:6b:f7:e2:69:da:8a:65:45:d0:f5:96:29:
                    89:65:b6:02:83:3c:24:88:dd:29:8c:75:f4:99:5c:
                    45:96:be:02:1f:33:bc:eb:a6:67:8c:5b:88:42:0a:
                    fb:f1:6d:1a:4a:a5:b5:04:01:67:1d:bc:7c:e4:37:
                    db:78:b6:c6:9a:fb:e8:0b:9c:29:2d:f5:68:4a:8d:
                    4c:15:b7:13:5a:8e:b3:2d:7c:f5:61:f1:08:b6:86:
                    9a:f5:d1:f7:ce:98:60:87:4d:36:8f:c3:de:98:08:
                    24:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:75:7B:17:F1:E9:12:24:29:E2:33:14:AA:E5:78:48:C4:D1:8C:83
            X509v3 Authority Key Identifier:
                keyid:B0:D7:63:6B:44:08:F0:AC:28:C5:9C:F5:B9:16:64:BD:82:31:40:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/sNdja0QI8KwoxZz1uRZkvYIxQFA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CEA2A/4C669B2C484611F097D84AD9DAE4EC9C/sNdja0QI8KwoxZz1uRZkvYIxQFA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d9:92:93:ed:87:55:5d:2f:8a:cd:62:a4:93:70:13:da:3b:
         b6:86:ad:91:76:e8:bb:15:96:d9:80:1b:86:34:40:f4:f4:10:
         6f:4d:94:a2:49:98:64:29:c6:82:86:b7:4f:7e:28:b9:24:c3:
         7c:a2:7e:71:a4:d7:30:67:57:37:a4:27:32:6d:4c:db:92:30:
         b5:39:86:96:3b:01:d9:9a:c5:97:cc:f5:c0:49:1a:74:43:04:
         77:e3:93:72:97:2d:d3:6e:ea:12:fb:93:c7:b2:75:31:70:20:
         65:80:da:1c:43:a2:3a:06:c9:f9:5d:95:65:cd:53:7d:6e:58:
         ad:38:10:92:dd:d6:5e:01:49:b8:d7:6f:c6:b7:e3:77:02:e7:
         f0:5f:37:74:83:64:6f:e8:7e:2c:9d:9c:ed:0a:e1:fe:e6:86:
         1a:b7:79:ac:3e:e4:1e:84:4e:20:a8:3c:13:1a:d7:0c:ab:55:
         66:ed:15:aa:e5:01:36:4b:71:13:f8:1f:f9:aa:15:20:b1:3f:
         f8:b0:20:a9:fb:91:ed:09:64:00:7b:60:77:2f:b3:b3:5f:78:
         3c:25:9f:d9:93:5b:37:a6:b7:2f:f7:e5:27:06:8e:a1:0e:62:
         89:06:59:bf:3b:e9:ca:2a:53:a0:ad:77:92:37:a2:76:39:73:
         c7:b8:03:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----