Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
File:                     Rh3mXlosn0bNsVRHChQs6rACo-g.mft (raw, json)
Hash identifier:          RTTm61VH6LvmN+wRt6CngGWNwv7Ia9/C994TUNAJe+E=
Subject key identifier:   DD:0A:A6:0D:86:9B:FC:F1:D9:7F:75:34:07:68:C7:95:B0:42:81:59
Authority key identifier: 46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8
Certificate issuer:       /CN=F36E0C57AF/serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
Certificate serial:       0340
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
Manifest number:          033F
Signing time:             Mon 28 Sep 2026 04:18:55 +0000
Manifest this update:     Mon 28 Sep 2026 04:18:55 +0000
Manifest next update:     Wed 30 Sep 2026 04:18:55 +0000
Files and hashes:         1: Rh3mXlosn0bNsVRHChQs6rACo-g.crl (hash: xjdzgulJj8KdrMuNrqe8nKCbo5xFR94EoB2D06fLsak=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 832 (0x340)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E0C57AF, serialNumber=461DE65E5A2C9F46CDB154470A142CEAB002A3E8
        Validity
            Not Before: Sep 28 04:18:55 2026 GMT
            Not After : Sep 30 04:18:55 2026 GMT
        Subject: CN=6ab9eaaf-c3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9e:75:4a:c5:d8:1a:2a:99:13:e3:6a:0e:a2:
                    14:a4:5e:20:f5:f7:26:1a:de:cd:81:ad:45:27:dc:
                    15:f0:7a:d0:0e:c3:79:cf:80:a9:50:65:6a:cb:cc:
                    da:3c:c0:b3:c6:ca:a5:37:56:b5:7f:a2:88:36:3d:
                    e0:58:5a:86:df:8d:ed:e4:4e:d0:11:7d:b1:d6:b8:
                    d5:9c:a8:1a:d2:9c:63:1c:c1:7f:6e:70:4a:31:12:
                    4a:4b:13:de:cd:6d:c4:94:51:0f:1e:15:b5:ad:07:
                    15:37:1e:e1:01:f6:9f:fe:95:4e:43:4e:45:41:31:
                    ec:4c:fa:da:64:d0:f9:a6:e6:30:46:c3:43:06:86:
                    9c:85:0e:e3:ad:23:5a:83:a3:54:6b:ce:3c:cf:34:
                    2d:9e:cb:41:e0:1f:a4:0e:b6:27:27:11:d1:fe:43:
                    14:9d:51:9e:79:c3:0c:e5:dd:ba:e7:0a:a4:7b:62:
                    4e:81:6c:0b:01:78:92:4c:c9:b3:5f:77:c4:36:0b:
                    8d:a3:bc:ff:54:56:5c:ca:01:ef:09:19:8f:20:5e:
                    04:37:5e:42:bc:cf:46:a1:85:8a:64:90:a7:06:7c:
                    c5:b4:55:bf:14:81:7e:e8:ab:8a:97:22:2e:0f:2d:
                    d4:1a:ab:b9:1c:e4:31:d5:fd:da:30:9f:6c:a9:cd:
                    46:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0A:A6:0D:86:9B:FC:F1:D9:7F:75:34:07:68:C7:95:B0:42:81:59
            X509v3 Authority Key Identifier:
                keyid:46:1D:E6:5E:5A:2C:9F:46:CD:B1:54:47:0A:14:2C:EA:B0:02:A3:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Rh3mXlosn0bNsVRHChQs6rACo-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E0C57/A4AE8D863AC211EFA189D362762E951A/Rh3mXlosn0bNsVRHChQs6rACo-g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:de:4a:7b:cd:8b:d5:70:c3:cb:df:11:e5:e5:77:08:f9:ff:
         87:1d:d9:51:6e:a4:c1:d1:0b:d2:f1:75:81:02:b2:0f:93:a0:
         2c:dc:23:5f:60:c8:e8:05:86:7a:ed:4c:67:b7:d1:11:b1:ae:
         15:d4:ed:a3:ce:b3:da:2f:05:cc:67:f5:95:60:55:62:5a:66:
         23:e6:b4:a7:6e:0e:b5:80:43:ac:b9:26:ba:a7:96:2b:ae:e7:
         40:06:00:34:33:db:ba:c9:e3:ae:49:a7:45:6c:32:c1:b3:60:
         28:67:b4:fb:0a:7c:22:4f:aa:dd:d4:29:31:c2:02:e0:9c:32:
         6e:47:23:b4:88:81:57:b7:db:6c:de:9a:9b:f0:3b:2d:a3:96:
         cb:3a:69:91:b0:9a:bc:d8:61:80:7e:8b:d0:83:25:76:81:ae:
         c7:0f:83:11:f3:49:5c:4e:b2:65:e0:c4:36:5e:a5:5d:ad:53:
         1c:a8:f3:1d:4d:ef:1d:38:d8:d2:91:3b:4f:9d:1e:ab:28:77:
         dc:69:85:7d:9f:2b:8c:ab:30:4c:e6:d6:14:14:00:42:b9:06:
         e9:4e:5d:d0:d7:37:7c:e2:a6:d7:1b:af:3a:ac:01:c0:0d:3f:
         6e:ac:94:8e:78:56:e0:c4:a4:42:5c:3e:11:4c:d5:c2:82:71:
         b5:db:14:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----