Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
File:                     DgQKv0-UXzDXfaKLvwKLasSdBCw.mft (raw, json)
Hash identifier:          FvUyvAW9xTlnVHeVHloypID9/wMt4kDcSid9IZ5g5L8=
Subject key identifier:   F0:42:32:83:79:18:48:38:2E:A4:95:10:9D:F2:96:DC:D7:75:25:C1
Authority key identifier: 0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C
Certificate issuer:       /CN=F36EC7CEAF/serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
Certificate serial:       0AD1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
Manifest number:          0AB8
Signing time:             Wed 23 Sep 2026 01:31:57 +0000
Manifest this update:     Wed 23 Sep 2026 01:31:56 +0000
Manifest next update:     Fri 25 Sep 2026 01:31:56 +0000
Files and hashes:         1: DgQKv0-UXzDXfaKLvwKLasSdBCw.crl (hash: eASk2f9sbq9JZNZHBfHoLEYhMvfLhwmqgBg1YK/mfKM=)
                          2: DE9ABBFE963D11F1B08864D6CE1D38B0.roa (hash: LmmF61WGi+c5tx7diHsUKoBkDLwT10AuaotpS4JIsnQ=)
                          3: 8CD08FF6963D11F1B152F6D3CE1D38B0.roa (hash: LjBqzY7fBybv856/VtVP+nEOO3AmKuFtPd1aUQ0N8HQ=)
                          4: 4AEF13BE963D11F193B912D2CE1D38B0.roa (hash: Bz08Ul12aPFmnFeKKATupuMupMgsuN47O/3D94SpZWE=)
                          5: 72BC5C90964111F185D9FBEACE1D38B0.roa (hash: Mxu0IHDBtQ0gMB1uc7mq59dmgNdwE/tx0wzZZlIE8+8=)
                          6: 32E00976963E11F1BA5349D8CE1D38B0.roa (hash: qsn/ZGUqSLM9gPu3EBVDp2FPQBJAHeUtYE5HvF7jt10=)
                          7: FA78C2A4963711F189AD42B3CE1D38B0.roa (hash: sqnMHuAuMvtV2NgF64lasqjlK/Azxonx9qZ8oNc6bXc=)
                          8: 395614AE964211F1BA6029EFCE1D38B0.roa (hash: QyuBb1INrn+/cQ2YciuIzau9AUi/xUasqlCunSIHwdA=)
                          9: A297428E963E11F1B85B87DACE1D38B0.roa (hash: rwz2mY6LmqgsS1AN3WQHj/GNPsl7soX1ygGDhkn5Bc8=)
                          10: 3C8D028C963711F191EB1CAFCE1D38B0.roa (hash: /csTm7NNdYNrJIGKEt25hO4hUKRB4n++erm3mKTTkw4=)
                          11: 4A3694E2963811F1BF267CB5CE1D38B0.roa (hash: rtVS5HOqdqtfYhUrlLaUxNjHLjakyUDG7lf4/fsJQn8=)
                          12: 173885C6963F11F1B4DE99DECE1D38B0.roa (hash: sljKKRTTajQPxDBI0X/jcTbwc1nGR6g6Fjk6QwtmvBU=)
                          13: 0B08958C964111F1AC8EC9E8CE1D38B0.roa (hash: ncjb02+UNksMyKo4Uj1M6fyigS9dLGoCVJI4SCyLtLo=)
                          14: 73CBFB96964011F1848080E6CE1D38B0.roa (hash: aYkoDEflzTDdM24OkR3wpR411xpSYWokIlV8nq/XCgc=)
                          15: 9A7B53D0963711F1B2A05DB1CE1D38B0.roa (hash: HmyAQJnkkRmlSFFgdyH41p3xz7nklLlBMiyaitvZ59Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 01:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2769 (0xad1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EC7CEAF, serialNumber=0E040ABF4F945F30D77DA28BBF028B6AC49D042C
        Validity
            Not Before: Sep 23 01:31:56 2026 GMT
            Not After : Sep 25 01:31:56 2026 GMT
        Subject: CN=6ab32c0d-b367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:be:4c:17:4b:f3:32:bf:e3:83:14:85:82:75:
                    98:51:ea:ec:d3:79:f1:b4:ce:ae:eb:09:ed:0a:91:
                    30:d2:82:d9:62:2e:ea:d2:ef:ae:e4:b3:f6:a0:16:
                    cb:f6:81:04:2d:56:75:bb:8f:e0:58:b3:5f:1a:b6:
                    83:9a:7b:ba:cd:f0:58:18:38:3c:e0:ea:d1:6a:fc:
                    00:85:22:71:f6:8c:0e:1e:b1:34:36:b3:70:98:b9:
                    39:ad:68:e5:03:78:bd:6b:03:07:07:00:d7:31:67:
                    80:ef:bb:6e:b4:cd:c8:a8:a6:f7:48:7e:e2:3b:1c:
                    eb:75:ff:60:43:a5:d8:54:2c:04:58:64:5d:b7:a0:
                    d3:77:dd:cd:6f:40:7a:25:4c:92:1b:b7:29:58:12:
                    d9:8c:ae:53:53:c9:5c:79:c3:d6:e3:2a:19:70:b9:
                    6c:58:a3:80:f4:1b:05:76:2e:b1:ed:db:db:c6:ca:
                    5f:6c:8c:d1:45:63:a6:a2:bc:a0:00:8f:9f:76:74:
                    e3:59:bc:5c:62:e5:55:06:51:4a:4e:72:e7:bf:7f:
                    11:a7:a4:ce:73:80:07:db:46:45:6b:b8:ce:b0:85:
                    c8:2b:cc:2f:8c:5d:5a:d5:50:72:46:2e:56:de:62:
                    6d:89:b4:56:7a:08:36:e6:70:84:1f:bd:c0:eb:6b:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:42:32:83:79:18:48:38:2E:A4:95:10:9D:F2:96:DC:D7:75:25:C1
            X509v3 Authority Key Identifier:
                keyid:0E:04:0A:BF:4F:94:5F:30:D7:7D:A2:8B:BF:02:8B:6A:C4:9D:04:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/DgQKv0-UXzDXfaKLvwKLasSdBCw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EC7CE/82014A10989911E9B7396A33F8AEA228/DgQKv0-UXzDXfaKLvwKLasSdBCw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f7:55:92:73:e2:f4:e6:5e:4d:d6:64:f6:1e:f2:30:e9:4c:
         a9:9a:2b:00:12:89:82:7c:98:99:57:2c:d1:9a:96:5f:fe:62:
         00:8d:c8:a4:62:cd:76:a0:4b:21:4f:b6:1b:d7:52:5a:d9:0f:
         e6:92:fe:df:73:5b:d6:c0:eb:02:02:54:75:c1:fa:da:70:1a:
         b4:8c:8e:73:c6:25:0a:ad:11:9d:b9:c0:b0:57:40:67:53:61:
         a2:91:a9:de:a4:fb:f0:ab:97:3f:79:b3:19:2d:8b:c5:36:7f:
         a2:e8:a6:23:fe:19:45:07:6f:74:6a:b1:f5:77:ce:5a:85:da:
         0f:05:5c:81:cb:4b:9a:1b:99:59:84:5b:88:dc:e5:75:68:60:
         e4:73:34:a3:de:74:21:1c:a3:3d:70:0c:33:a2:2d:24:86:9e:
         8d:59:cb:ed:62:d5:65:a0:f5:61:b2:c8:58:90:b2:5c:30:cb:
         74:bb:bb:39:da:10:e3:ae:31:fb:f2:a3:2b:55:d6:89:c4:45:
         41:a4:76:e2:38:30:b2:8e:3a:88:9c:4d:5d:ca:18:11:ad:f4:
         6b:45:0d:3c:aa:b0:a4:6d:27:a3:ba:fb:23:9a:f0:58:6a:c9:
         c3:ae:b6:27:bb:0d:b6:70:c1:69:9a:a4:19:20:61:3f:90:c6:
         6b:9a:f0:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----