Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
File:                     X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft (raw, json)
Hash identifier:          khfUQAP4hgRTrgjZ6mJjvGggWB821DGFyZb7X+/HN9A=
Subject key identifier:   0F:0B:DD:9C:37:5E:8C:49:D8:D4:F9:4C:F2:25:83:A9:49:AB:5D:ED
Authority key identifier: 5F:D4:C6:0A:EC:0F:5B:27:6D:AA:B9:DB:69:11:76:65:89:D8:AA:24
Certificate issuer:       /CN=F36DD1E2AF/serialNumber=5FD4C60AEC0F5B276DAAB9DB6911766589D8AA24
Certificate serial:       091D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
Manifest number:          091C
Signing time:             Sun 04 Oct 2026 01:50:59 +0000
Manifest this update:     Sun 04 Oct 2026 01:50:59 +0000
Manifest next update:     Tue 06 Oct 2026 01:50:59 +0000
Files and hashes:         1: X9TGCuwPWydtqrnbaRF2ZYnYqiQ.crl (hash: Rr2Cuv+QCDMZ4Er5SNOpIEcAWELmtLHDKA6cwlOl4GU=)
                          2: 9E5F4D20C02911EAA359D20AF8AEA228.roa (hash: mddgoRu4s2817HTK3OKl+Ig4JHtX0J/FyOyMNUGfu+I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 01:50:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2333 (0x91d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DD1E2AF, serialNumber=5FD4C60AEC0F5B276DAAB9DB6911766589D8AA24
        Validity
            Not Before: Oct  4 01:50:59 2026 GMT
            Not After : Oct  6 01:50:59 2026 GMT
        Subject: CN=6ac1b103-29d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:df:e3:f6:02:f2:ad:cc:61:6f:72:71:2d:dd:
                    1c:e3:d3:34:c1:47:2e:a8:0e:83:52:76:ad:a0:1c:
                    3e:64:d1:ad:f2:69:46:b5:49:61:51:ee:ef:7d:7d:
                    92:e3:7e:03:d0:25:a0:b3:fb:7c:ce:f1:e5:42:4f:
                    c2:f7:92:8d:34:41:d1:49:41:80:88:02:cc:6f:9b:
                    c3:75:87:9f:b1:ae:df:48:39:ff:5e:82:de:3c:0c:
                    1d:24:07:27:43:d1:f7:ef:c9:ce:df:e2:0b:d3:7d:
                    0d:9e:de:54:51:cf:d1:45:7d:7d:77:b1:4c:c1:7d:
                    c4:09:ab:5c:e2:58:a2:62:a2:52:e7:41:23:da:9e:
                    38:3b:de:11:b2:b1:75:11:e4:6e:8a:c9:9b:c8:9f:
                    d5:6a:8f:1a:6c:ca:a0:75:99:b2:67:11:0a:92:91:
                    9a:c9:c9:74:7b:b1:73:a2:6e:67:c9:d0:37:f1:24:
                    10:46:21:d1:60:a0:55:a8:bb:a4:d4:f9:fe:9b:ed:
                    db:bf:74:8c:ec:fa:08:d8:55:e2:56:5b:d2:97:38:
                    e7:38:0a:b4:91:b9:dc:a1:fb:72:bc:68:65:57:fd:
                    c7:44:3c:cb:87:06:26:e4:8f:23:44:43:b1:2d:61:
                    7f:a3:29:fc:61:6d:c6:23:af:f4:4a:a5:45:07:bf:
                    2c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:0B:DD:9C:37:5E:8C:49:D8:D4:F9:4C:F2:25:83:A9:49:AB:5D:ED
            X509v3 Authority Key Identifier:
                keyid:5F:D4:C6:0A:EC:0F:5B:27:6D:AA:B9:DB:69:11:76:65:89:D8:AA:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DD1E2/54C9192AC02911EA91C3870AF8AEA228/X9TGCuwPWydtqrnbaRF2ZYnYqiQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:02:25:3c:69:9d:03:67:0f:28:0d:3e:4b:da:8f:5f:17:3f:
         2b:c5:b8:6f:6c:0a:0a:cd:5b:6f:56:0d:ae:29:d0:ef:83:a5:
         be:12:fa:ba:0a:0e:e8:99:dc:50:4d:84:94:60:0f:1b:a2:b0:
         29:06:6c:f7:ab:b1:fe:f8:38:75:62:d0:8f:2b:a8:51:0c:f1:
         e4:46:8a:4f:4f:69:40:c2:49:e3:97:94:d1:83:bd:60:e4:96:
         84:e2:c3:68:77:a7:24:8d:76:13:7b:7d:3c:a7:31:a4:af:78:
         99:c8:01:9b:32:68:c6:5e:d2:8d:b8:8c:3d:00:b7:1b:79:7f:
         15:16:9a:9c:36:2d:33:05:0f:ea:01:12:ab:3d:b3:bb:1d:f8:
         49:ae:5f:66:62:c5:5b:25:b3:2d:05:91:0e:d4:dd:c9:8e:c3:
         3a:fb:9c:cf:5e:26:bb:d9:4a:04:91:90:c5:81:aa:a3:61:ba:
         0b:32:8a:9f:99:e2:68:f7:30:9d:31:58:68:74:0a:b6:5f:62:
         d4:b7:64:b6:2b:fb:5d:fc:4a:3f:a5:2f:72:46:cb:fa:0f:dd:
         cc:aa:2a:34:62:ec:ac:7f:80:7d:1a:03:7d:a4:dd:47:6f:b0:
         94:03:cd:e2:02:68:da:af:45:e4:76:68:97:5c:46:f2:c1:f3:
         32:d8:f5:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----