Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F7B44/1C6BF9FA316F11F0B49A9AB4DAE4EC9C/o8nuwL9utklejOwMsjf4ptKaMu0.mft
File:                     o8nuwL9utklejOwMsjf4ptKaMu0.mft (raw, json)
Hash identifier:          0U61/XuMUgkk5OBK9cuWIJOZvQnkJ/UnYve1K6nR5rA=
Subject key identifier:   DA:4A:03:27:4A:00:5B:ED:16:66:06:DF:C0:90:F7:09:96:3B:32:EB
Authority key identifier: A3:C9:EE:C0:BF:6E:B6:49:5E:8C:EC:0C:B2:37:F8:A6:D2:9A:32:ED
Certificate issuer:       /CN=F36F7B44AF/serialNumber=A3C9EEC0BF6EB6495E8CEC0CB237F8A6D29A32ED
Certificate serial:       01F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/o8nuwL9utklejOwMsjf4ptKaMu0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F7B44/1C6BF9FA316F11F0B49A9AB4DAE4EC9C/o8nuwL9utklejOwMsjf4ptKaMu0.mft
Manifest number:          01F8
Signing time:             Thu 24 Sep 2026 04:52:37 +0000
Manifest this update:     Thu 24 Sep 2026 04:52:36 +0000
Manifest next update:     Sat 26 Sep 2026 04:52:36 +0000
Files and hashes:         1: o8nuwL9utklejOwMsjf4ptKaMu0.crl (hash: 4G0gwRc+Os1x62YYup6g07Y32RBB8IRp49XxlZZokz4=)
                          2: A64C0358317011F08C073EC0DAE4EC9C.roa (hash: hGMo1TkfzC+9+ayAahdFQnR5FChuHYPQw3lEmeqRL/E=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F7B44/1C6BF9FA316F11F0B49A9AB4DAE4EC9C/o8nuwL9utklejOwMsjf4ptKaMu0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F7B44/1C6BF9FA316F11F0B49A9AB4DAE4EC9C/o8nuwL9utklejOwMsjf4ptKaMu0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/o8nuwL9utklejOwMsjf4ptKaMu0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 04:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 505 (0x1f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F7B44AF, serialNumber=A3C9EEC0BF6EB6495E8CEC0CB237F8A6D29A32ED
        Validity
            Not Before: Sep 24 04:52:36 2026 GMT
            Not After : Sep 26 04:52:36 2026 GMT
        Subject: CN=6ab4ac94-7455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:08:89:b6:7e:87:f2:9b:81:df:09:0f:5c:29:
                    02:e2:dc:a4:8f:ee:20:de:e5:77:4d:9b:86:c8:9f:
                    ab:a5:d3:d7:4a:de:76:e1:31:52:c4:03:ea:ee:ba:
                    96:34:72:4d:29:16:e8:c0:af:1c:ff:c8:0e:05:bd:
                    74:1f:44:b5:ad:e9:c3:14:79:a1:d1:14:7b:52:26:
                    54:02:ff:ad:c3:c6:e2:67:05:9d:9b:e4:5a:62:4a:
                    85:02:4e:ba:39:99:78:04:b9:99:87:3c:09:44:68:
                    59:10:b9:30:a2:c0:0d:5f:85:fd:96:e5:b1:27:f2:
                    e3:0b:df:11:8f:01:93:b6:8b:4f:49:ac:38:b1:21:
                    90:da:c2:81:4a:a5:d8:a9:ec:6b:fd:7e:00:9b:1c:
                    29:db:74:33:9c:81:54:fa:11:fc:44:17:bb:85:25:
                    d1:6f:ac:f3:b2:90:d7:2f:fd:c0:91:1c:43:46:f8:
                    8c:85:ab:b8:b1:41:95:bf:a6:7a:96:97:4c:da:45:
                    c8:26:32:94:c7:8f:cb:3f:b3:7b:0f:e7:7d:e3:08:
                    59:6c:91:d1:af:c8:ac:7b:6e:ae:ae:64:18:22:d1:
                    b6:bf:fc:1e:91:2b:9e:e0:5f:61:2f:b9:35:4c:4c:
                    68:da:c6:86:e4:0c:03:24:dd:81:55:c1:12:bd:a3:
                    6b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4A:03:27:4A:00:5B:ED:16:66:06:DF:C0:90:F7:09:96:3B:32:EB
            X509v3 Authority Key Identifier:
                keyid:A3:C9:EE:C0:BF:6E:B6:49:5E:8C:EC:0C:B2:37:F8:A6:D2:9A:32:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7B44/1C6BF9FA316F11F0B49A9AB4DAE4EC9C/o8nuwL9utklejOwMsjf4ptKaMu0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o8nuwL9utklejOwMsjf4ptKaMu0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F7B44/1C6BF9FA316F11F0B49A9AB4DAE4EC9C/o8nuwL9utklejOwMsjf4ptKaMu0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:53:10:38:1b:5a:d4:76:92:6b:bd:18:31:4d:ec:2d:6e:c7:
         ea:ad:37:1c:59:c6:40:0d:3b:2b:ba:99:c7:c7:49:e6:2c:dd:
         95:e8:2f:d5:b0:70:b4:a2:54:fe:63:24:30:70:f2:3a:db:7f:
         f5:4f:23:18:f9:c7:09:a4:c9:70:85:5e:0a:79:7d:9a:8d:82:
         57:fd:c3:c5:60:ae:66:2a:36:70:7b:4b:22:22:f4:ab:cb:7e:
         78:bf:4b:ea:c0:ee:25:69:ce:55:37:de:55:96:6d:38:12:8c:
         24:f1:9a:61:b6:21:e9:89:c6:29:25:4b:7e:22:ee:e3:ef:64:
         ac:cd:23:ba:4e:a8:3b:32:53:bb:70:01:a2:40:aa:bf:d5:4e:
         1f:c0:bc:95:ef:3e:cf:c0:dc:87:3f:97:00:d1:f1:3f:72:be:
         71:22:e5:36:2b:17:db:59:ec:53:8f:a8:6e:7b:91:37:4a:7a:
         c0:5a:ed:c6:85:61:34:9e:20:34:8a:6a:19:cc:97:28:4b:3c:
         51:5d:fa:b4:97:30:85:90:78:9c:b7:74:96:4d:a8:38:d6:77:
         2c:44:ad:42:52:56:4f:2e:00:81:bc:98:9f:b2:1d:42:23:c4:
         a6:b4:6f:69:c4:da:5c:6f:db:a0:11:b8:5d:01:34:27:a3:28:
         6a:ff:bc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----