Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
File:                     JIykhYdpP_HNXYNmIkrKDSuXyjs.mft (raw, json)
Hash identifier:          /Ky4yrd1J4NdxbUjiM3xH0SqglOW19PmXxkNzdd+0TE=
Subject key identifier:   FF:2C:C9:A5:7B:BA:94:40:C0:74:37:EF:6E:CD:98:68:13:CC:3B:62
Authority key identifier: 24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B
Certificate issuer:       /CN=F36F387AAF/serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
Certificate serial:       03E1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
Manifest number:          03DF
Signing time:             Tue 29 Sep 2026 04:01:05 +0000
Manifest this update:     Tue 29 Sep 2026 04:01:04 +0000
Manifest next update:     Thu 01 Oct 2026 04:01:04 +0000
Files and hashes:         1: JIykhYdpP_HNXYNmIkrKDSuXyjs.crl (hash: TOiO8c7U5Q1Wbo+Et/Ml777doGVZeKxcjmm7F5xco94=)
                          2: 3FF210A8625711F08B604AD6DAE4EC9C.roa (hash: zNyQHQEUKkigM9g+wWCSuCKgDN1DQE+TD5fh7VtDwxw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 01 Oct 2026 00:07:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F387AAF, serialNumber=248CA48587693FF1CD5D8366224ACA0D2B97CA3B
        Validity
            Not Before: Sep 29 04:01:04 2026 GMT
            Not After : Oct  1 04:01:04 2026 GMT
        Subject: CN=6abb3801-fa72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:db:ec:24:73:53:ad:d7:b0:eb:0a:5d:93:
                    18:a9:62:38:0b:bc:75:16:6b:5f:1c:4e:17:14:d9:
                    f9:86:14:72:41:a8:17:a4:07:e1:58:9d:fc:90:7f:
                    19:ee:c4:06:24:f0:dd:e6:c1:47:bb:03:dc:46:2c:
                    a6:b8:e5:9d:0c:7d:68:d5:79:51:cb:66:ce:7e:44:
                    89:41:1c:21:5a:4c:65:59:c7:bc:e4:f0:69:3b:12:
                    f6:97:be:3b:63:81:76:de:2e:d1:ac:d5:a4:11:ad:
                    e9:54:7a:6b:1b:76:80:f9:7a:9c:33:8c:79:39:7e:
                    63:d4:5e:53:e6:e9:78:dc:44:04:34:88:ce:d0:a8:
                    66:44:42:5e:e3:55:b3:56:58:5b:89:bb:83:eb:a1:
                    ef:d4:20:9d:5d:34:18:31:78:d6:2a:57:c6:2c:87:
                    44:12:b0:d1:19:28:3b:9a:e3:e9:e5:f0:80:c9:10:
                    0a:df:c6:de:45:39:0d:89:a8:a9:3c:b7:83:54:44:
                    ee:ab:a8:c5:0a:6a:20:4b:28:5d:bd:d3:1c:40:92:
                    59:41:93:3a:73:11:18:b2:56:b4:00:c6:ea:88:0a:
                    60:1d:10:46:bd:c7:05:83:41:61:cd:e7:1c:00:1a:
                    ca:39:c3:18:be:29:21:90:b1:35:56:6b:17:77:7d:
                    ee:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2C:C9:A5:7B:BA:94:40:C0:74:37:EF:6E:CD:98:68:13:CC:3B:62
            X509v3 Authority Key Identifier:
                keyid:24:8C:A4:85:87:69:3F:F1:CD:5D:83:66:22:4A:CA:0D:2B:97:CA:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JIykhYdpP_HNXYNmIkrKDSuXyjs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F387A/1CA710B0C4D511EE99F0246A775412E6/JIykhYdpP_HNXYNmIkrKDSuXyjs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f1:6c:33:d3:74:cf:e2:7d:e1:8b:33:e8:96:8b:49:25:ba:
         c1:19:65:8f:f3:9e:62:8a:24:86:78:e8:b8:73:29:51:2b:ea:
         9f:4c:11:23:04:dc:34:65:dd:01:34:35:0f:4d:33:a5:41:3d:
         dd:f6:10:1c:88:db:35:9a:15:09:d8:55:b3:d3:dc:fc:00:b3:
         c0:04:33:81:28:0b:96:c2:a1:42:a2:2e:2d:7d:2a:ee:89:36:
         8d:02:4b:f3:28:bf:9a:2d:6f:3c:e6:cd:a5:06:83:eb:08:e3:
         7c:85:ad:da:4d:e2:e9:3d:a1:aa:f3:0f:f6:dd:75:cf:7a:5c:
         b0:0a:38:3d:b9:9a:e8:4d:ed:0f:55:9a:68:26:39:3c:08:0b:
         73:a2:70:5b:ed:7e:f6:24:de:c2:b9:29:24:a6:d8:f2:56:df:
         c1:33:b1:e7:cd:08:ae:27:58:37:86:40:6b:4e:e5:ae:4d:6e:
         a5:26:69:60:07:ee:a5:78:3f:5e:82:da:ea:19:37:e8:87:c1:
         46:ec:cd:bd:20:43:a7:6a:da:90:87:ed:81:2e:1e:d9:a3:a0:
         74:78:22:90:d2:d4:99:b1:e6:43:6d:97:6c:79:38:3d:cf:ad:
         83:4a:b1:0b:03:51:e5:e9:66:16:c8:17:39:9e:a2:56:26:29:
         66:e4:30:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----