Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
File:                     IMgTB9QVShV5wAQJACMAaCWVvTU.mft (raw, json)
Hash identifier:          hJiyRM6onkHCcn1Q0U6OMnw3LJqT99xO7y8FNKsWk/Y=
Subject key identifier:   B5:7A:0E:B6:48:8F:3E:B7:EB:1B:FB:D4:AE:B7:8B:58:02:DE:5D:FD
Authority key identifier: 20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35
Certificate issuer:       /CN=F36DD00FAF/serialNumber=20C81307D4154A1579C00409002300682595BD35
Certificate serial:       0518
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
Manifest number:          0516
Signing time:             Thu 24 Sep 2026 03:22:45 +0000
Manifest this update:     Thu 24 Sep 2026 03:22:44 +0000
Manifest next update:     Sat 26 Sep 2026 03:22:44 +0000
Files and hashes:         1: IMgTB9QVShV5wAQJACMAaCWVvTU.crl (hash: tJLAvWEjJPCJ6/k2IiZ7hLQFIpY7xkn/tSyGnqW/wIk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1304 (0x518)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD00FAF, serialNumber=20C81307D4154A1579C00409002300682595BD35
        Validity
            Not Before: Sep 24 03:22:44 2026 GMT
            Not After : Sep 26 03:22:44 2026 GMT
        Subject: CN=6ab49784-e293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c1:c5:3b:60:5c:6e:90:00:f1:fb:4d:8e:2f:
                    60:50:79:72:e4:70:bf:c7:da:17:af:2e:2f:00:6a:
                    a2:77:56:04:b9:2e:29:6f:21:4a:eb:ff:7a:a2:8d:
                    47:f7:da:7b:70:f9:59:b5:49:cd:ce:5f:1a:ca:81:
                    c9:54:f2:98:4e:a5:aa:58:18:f8:e4:c0:46:08:cf:
                    a7:5d:c6:e6:bf:33:17:6a:78:d6:67:4c:08:ae:dd:
                    ea:34:74:38:8e:b9:67:e9:18:47:2e:a9:f8:8c:5c:
                    63:08:66:46:02:a5:74:3e:2f:0f:66:be:a1:c3:a5:
                    90:a5:a6:6f:5d:05:90:9a:c1:8e:cb:fb:3c:36:e6:
                    65:23:cc:c4:06:e8:39:e4:d3:a2:f7:a1:03:2c:cd:
                    0c:85:bb:b2:1d:d6:54:57:4c:c3:c9:74:3a:d8:e2:
                    b4:2e:31:50:6b:3b:41:f0:47:39:4f:f0:b3:30:fa:
                    15:0e:4f:f0:88:6b:1f:40:eb:0a:c9:94:09:f2:b6:
                    02:c6:33:00:a9:12:28:9f:ec:60:a5:03:70:9f:0b:
                    bd:73:52:3d:ee:f2:3e:5d:1f:80:d2:ff:6c:28:58:
                    7f:24:59:e5:39:3a:b6:fc:2b:f9:bb:95:1c:e9:2a:
                    0b:d9:3a:5e:d9:a9:cb:fc:fc:35:4b:0e:2a:ae:c6:
                    9e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7A:0E:B6:48:8F:3E:B7:EB:1B:FB:D4:AE:B7:8B:58:02:DE:5D:FD
            X509v3 Authority Key Identifier:
                keyid:20:C8:13:07:D4:15:4A:15:79:C0:04:09:00:23:00:68:25:95:BD:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/IMgTB9QVShV5wAQJACMAaCWVvTU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD00F/6CC833B2D66511ED8CA573B0F1222468/IMgTB9QVShV5wAQJACMAaCWVvTU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:78:66:a1:99:1b:ba:8d:24:72:73:ee:27:3b:e8:af:78:e5:
         52:4d:96:60:dd:a6:36:c4:75:7a:28:c8:43:83:c1:12:37:00:
         02:12:44:74:a0:f3:f2:7b:72:b7:74:bb:b5:5a:b5:31:e9:d4:
         15:9e:8d:0f:45:2c:7f:77:c8:e3:5b:e0:09:c2:d1:72:08:8e:
         cd:4d:5e:70:75:e9:1b:85:4c:12:c1:62:8c:0f:1b:30:12:3d:
         99:89:06:fd:dc:39:4a:f2:5c:ed:29:b7:5a:c6:de:72:2a:c4:
         37:83:3f:d2:d0:b1:6d:ee:77:80:e9:b7:b4:a5:8e:3e:61:00:
         0d:49:94:d8:8f:8e:00:22:34:ce:f7:9b:e5:8d:aa:0e:2f:d6:
         77:aa:68:b7:f6:d6:9a:64:2f:3b:5d:c1:a8:ce:a5:de:61:98:
         ad:0f:d5:a1:78:51:36:28:1c:1c:7b:b1:61:90:93:73:5c:3f:
         ba:c7:21:04:43:d8:75:4f:db:5a:05:18:67:96:de:b2:91:54:
         a1:e6:93:8a:4d:3f:a0:f9:8c:d1:34:31:7b:10:a4:34:17:eb:
         d6:8e:fe:9a:39:65:39:97:38:38:0a:30:91:bc:aa:f2:bb:82:
         dd:29:29:ab:80:49:27:51:07:7d:e1:17:30:55:8e:cf:27:8c:
         92:b2:3d:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----