Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
File:                     AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft (raw, json)
Hash identifier:          02O4j2HWnjUnQM84KqIKftso6grTRbSiAe+YtiIGka0=
Subject key identifier:   DE:13:77:10:13:40:87:F7:73:F6:B7:02:AF:EA:CC:80:7F:B4:DF:65
Authority key identifier: 02:0A:4A:F0:D0:FE:11:B7:03:D1:1F:39:7A:53:63:CD:0F:BA:13:A4
Certificate issuer:       /CN=F36F5D39AR/serialNumber=020A4AF0D0FE11B703D11F397A5363CD0FBA13A4
Certificate serial:       0435
Authority info access:    rsync://rpki.afrinic.net/repository/arin/AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
Manifest number:          0432
Signing time:             Thu 24 Sep 2026 03:49:39 +0000
Manifest this update:     Thu 24 Sep 2026 03:49:38 +0000
Manifest next update:     Sat 26 Sep 2026 03:49:38 +0000
Files and hashes:         1: AgpK8ND-EbcD0R85elNjzQ-6E6Q.crl (hash: c1DSPbeDrZJVOUi0jC9+F4p2ItQ/CoVe04tblgMLeXQ=)
                          2: 9B39CC26859D11F0A5E988E7DAE4EC9C.roa (hash: ZTzhPubHt4ABYcrQAhS3FW42RiDE5CrvBfVwIcAQoPA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
                          rsync://rpki.afrinic.net/repository/arin/AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1077 (0x435)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5D39AR, serialNumber=020A4AF0D0FE11B703D11F397A5363CD0FBA13A4
        Validity
            Not Before: Sep 24 03:49:38 2026 GMT
            Not After : Sep 26 03:49:38 2026 GMT
        Subject: CN=6ab49dd2-61fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:04:44:a1:30:2b:d6:43:dc:a1:95:9a:7f:df:
                    4c:b9:9d:58:f2:27:c8:12:02:e9:27:44:8a:b4:e8:
                    45:0f:6b:30:0e:26:20:fb:a9:c0:34:c4:99:a9:35:
                    51:20:57:75:29:44:9a:57:25:af:4c:c0:82:8f:5b:
                    a8:00:03:e3:0c:60:b8:43:e1:7b:0e:29:cf:61:e1:
                    de:87:43:12:63:13:32:07:94:4f:1d:be:b9:03:37:
                    fc:b5:15:5a:59:d8:f0:43:42:bf:c8:fb:2c:4c:b8:
                    3b:10:2d:fe:94:3c:93:cb:91:e9:b8:78:5d:02:5a:
                    a5:ad:17:f9:d5:43:2e:5f:98:86:3d:43:9f:2b:c9:
                    22:75:65:b7:fc:87:b9:90:5a:24:2c:2b:80:31:7e:
                    31:81:bf:e2:47:61:ac:b8:f2:ce:d0:b7:83:79:65:
                    0d:78:0d:d8:95:a5:4d:45:14:f3:35:c8:8c:ac:8f:
                    c9:45:88:6c:97:b5:bf:3d:6c:c8:ff:0a:51:4a:a0:
                    c8:1b:26:cf:9a:f2:a8:7c:bc:89:70:10:97:0a:2a:
                    ee:7c:f1:48:f6:45:31:bf:78:86:e3:fa:b7:84:d8:
                    39:95:72:15:fa:f8:b1:76:30:59:9f:b1:f3:a3:4b:
                    2a:31:d7:d9:83:12:c3:6f:0b:53:ef:60:43:c4:10:
                    8b:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:13:77:10:13:40:87:F7:73:F6:B7:02:AF:EA:CC:80:7F:B4:DF:65
            X509v3 Authority Key Identifier:
                keyid:02:0A:4A:F0:D0:FE:11:B7:03:D1:1F:39:7A:53:63:CD:0F:BA:13:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/AgpK8ND-EbcD0R85elNjzQ-6E6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5D39/139026B082E011EE9099DC254AD9E6FC/AgpK8ND-EbcD0R85elNjzQ-6E6Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:eb:0e:8a:0f:ca:89:12:dc:d7:24:dc:46:1a:38:08:cc:e6:
         29:7d:d9:47:aa:de:cf:00:e1:97:99:f4:58:5f:59:b8:38:ae:
         fa:07:d0:c6:e8:3a:5d:af:fc:2c:6e:9d:18:65:a2:1b:b2:df:
         56:6d:26:2b:2b:62:38:f9:8b:58:a3:69:ad:d0:b7:95:37:63:
         1d:a1:e6:c5:8c:dc:18:b1:fa:de:8e:8f:7b:5f:93:9e:93:6b:
         45:e2:89:11:86:df:87:7a:6b:10:17:ca:ae:c3:51:bc:50:15:
         0e:7d:f3:8f:12:0f:b4:99:dd:5e:73:44:f0:c9:9a:bb:c3:ac:
         a5:a3:8d:47:63:ab:cd:79:a8:b0:59:97:b8:53:1d:53:da:87:
         0b:8d:05:50:38:21:d7:1c:d2:4d:9b:34:2e:b4:89:3c:96:49:
         3b:3f:df:36:33:21:f4:5c:82:2d:7a:00:a8:fc:cd:d3:94:cf:
         f7:7a:55:89:c2:6d:96:02:81:c5:c7:7d:41:ce:a1:dc:6c:b0:
         b5:2d:4b:45:05:3b:c0:3a:20:bc:db:1a:30:fc:34:0b:a8:91:
         cc:5f:3b:1f:78:da:d2:bb:4d:12:d0:c1:ed:2f:0b:3d:07:f6:
         59:68:1f:48:cf:b5:c2:23:d0:34:ea:03:b8:e5:83:a0:1d:e1:
         76:89:1e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----