Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
File:                     QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft (raw, json)
Hash identifier:          8ZBJidRyYNNKQssW1ZJifTDDTSYB/4fovusMkFReE8E=
Subject key identifier:   DB:58:BC:55:C1:6C:CF:33:00:14:87:77:C9:BB:BC:D7:8A:F4:37:8A
Authority key identifier: 41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64
Certificate issuer:       /CN=F36D2FA4AR/serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
Certificate serial:       020F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
Manifest number:          020D
Signing time:             Sun 15 Nov 2026 04:54:30 +0000
Manifest this update:     Sun 15 Nov 2026 04:54:30 +0000
Manifest next update:     Tue 17 Nov 2026 04:54:30 +0000
Files and hashes:         1: QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl (hash: PpIPDea14om09/kOx7jjP/wZ7xaP1UJX84bWsoWc8Vs=)
                          2: DD733EA6501911F081EC1BD5DAE4EC9C.roa (hash: pTSTw7CMzw5Tzo3x06Bd0K5rfFXqGfOJjDBXR7lNILg=)
                          3: 702497F0502311F0A0A1EC91DAE4EC9C.roa (hash: TKThQssce2usSG8fqrLv7uZqNWwbS2fbqTY3b7wi6xo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                          rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D2FA4AR, serialNumber=4121D28E0BB9EAFEE02003F923AC740C26F58364
        Validity
            Not Before: Nov 15 04:54:30 2026 GMT
            Not After : Nov 17 04:54:30 2026 GMT
        Subject: CN=6af93b06-2cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:25:74:bb:47:ce:9f:b9:f1:20:b3:67:2f:84:
                    5d:11:ef:5e:a6:5f:7c:4b:39:14:5e:c2:c5:65:1c:
                    32:0d:73:f1:e7:b3:ea:6a:08:17:7b:09:f9:0c:21:
                    12:1e:b2:80:0b:c0:27:58:c0:b4:7b:9b:37:17:21:
                    a7:1e:e1:57:86:e2:84:7e:02:40:17:19:e6:c1:c3:
                    bf:9a:f6:29:c5:82:75:9f:9d:93:88:78:01:8d:58:
                    e6:f4:4d:4a:5e:b9:27:37:6e:17:4b:40:c5:68:b1:
                    86:8c:27:55:1d:e9:4b:5a:61:6c:b0:51:29:63:94:
                    2f:a5:3e:7d:7f:4a:55:df:a7:f9:6a:c3:50:d2:f0:
                    6e:92:ff:b0:b3:bd:95:85:5b:ad:fe:2e:d5:ac:15:
                    c2:bf:28:8d:23:f3:1c:4a:03:32:64:63:f9:2f:03:
                    66:ce:88:ee:8e:f5:49:7f:fc:1d:1e:d0:f4:45:cf:
                    1f:24:c0:e6:6e:7d:37:23:9d:79:fb:5d:fd:ba:38:
                    17:f8:d9:19:00:9c:cb:69:76:c2:cc:fb:bf:13:14:
                    17:ba:47:1b:b7:15:0b:68:a0:b7:40:64:e8:29:00:
                    a1:47:23:f7:82:43:9b:c0:ad:b9:a8:1b:64:cb:9a:
                    8f:ab:65:f8:f6:c4:55:f3:7c:27:22:dd:11:ac:ed:
                    02:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:58:BC:55:C1:6C:CF:33:00:14:87:77:C9:BB:BC:D7:8A:F4:37:8A
            X509v3 Authority Key Identifier:
                keyid:41:21:D2:8E:0B:B9:EA:FE:E0:20:03:F9:23:AC:74:0C:26:F5:83:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/QSHSjgu56v7gIAP5I6x0DCb1g2Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D2FA4/3425FC804CEA11F0948EF79BDAE4EC9C/QSHSjgu56v7gIAP5I6x0DCb1g2Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:be:ba:7b:8e:d0:a4:ff:d1:2d:1d:b2:01:28:38:d0:33:8c:
         a9:9e:cb:19:55:9d:43:c2:88:24:ca:57:7b:e2:1c:9e:97:29:
         2f:ed:c9:bd:59:ed:9e:8f:53:97:83:df:5b:76:b6:8c:b0:76:
         0d:6a:a3:47:6e:ee:76:15:4b:e6:c4:5c:dd:63:2e:67:fc:56:
         a3:06:15:d7:ab:de:07:19:f3:2b:8a:7d:22:76:03:46:91:40:
         32:2c:bd:c0:cb:38:5a:2f:fd:a4:57:e3:87:c6:49:c5:8e:41:
         a3:6a:66:37:7f:85:9f:b8:2b:5d:e6:cf:ce:0a:b3:db:7d:be:
         c9:cc:b4:18:ce:ff:4f:d4:ee:20:60:3b:e5:bc:d5:a8:1d:d0:
         87:cb:1b:40:aa:cd:d3:7d:47:a6:d8:ba:84:cc:be:4d:b3:35:
         9c:69:2b:33:86:a2:72:49:69:58:e6:99:4c:16:fd:d7:df:46:
         ad:8e:32:95:6a:d3:62:e4:df:c2:e1:fe:53:d2:48:e4:9a:bb:
         17:d8:b2:46:86:a1:06:af:e3:12:c5:3c:85:4e:19:9b:81:90:
         2d:5e:69:a1:21:9e:d8:a3:56:b5:af:02:73:a1:9e:03:9a:e9:
         68:c0:47:b8:f5:d4:d1:ec:dc:04:c0:7b:6f:4a:62:22:c7:33:
         93:48:a0:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----