Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
File:                     b60oLUjzGQY2QqK5qAO2puATULQ.mft (raw, json)
Hash identifier:          Z3DOeu+AUSWfeCYCbrljI4Cw7x4+nFhtbE7/jxriqT4=
Subject key identifier:   11:7A:9F:76:36:8B:9A:43:F0:D4:35:4A:60:54:CE:F9:46:32:23:E0
Authority key identifier: 6F:AD:28:2D:48:F3:19:06:36:42:A2:B9:A8:03:B6:A6:E0:13:50:B4
Certificate issuer:       /CN=F36FDBB4AF/serialNumber=6FAD282D48F319063642A2B9A803B6A6E01350B4
Certificate serial:       0362
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/b60oLUjzGQY2QqK5qAO2puATULQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
Manifest number:          0361
Signing time:             Wed 23 Sep 2026 04:12:51 +0000
Manifest this update:     Wed 23 Sep 2026 04:12:50 +0000
Manifest next update:     Fri 25 Sep 2026 04:12:50 +0000
Files and hashes:         1: b60oLUjzGQY2QqK5qAO2puATULQ.crl (hash: rmhKWUImyQt9PkjjT2TLgg86IuKB6bP9ebqUCFiYyIc=)
                          2: 5AE15E321D8E11EFB150AF207DDC24C2.roa (hash: 02fS43r1eNuS1EPFvyivvFwrFFekmWd3UmleeUTRe0g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/b60oLUjzGQY2QqK5qAO2puATULQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDBB4AF, serialNumber=6FAD282D48F319063642A2B9A803B6A6E01350B4
        Validity
            Not Before: Sep 23 04:12:50 2026 GMT
            Not After : Sep 25 04:12:50 2026 GMT
        Subject: CN=6ab351c3-f4e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:6d:bf:25:28:5d:2d:df:f6:65:d7:32:24:7a:
                    9f:65:9a:19:e9:e2:0b:2f:e7:b3:71:51:a2:18:cf:
                    cf:ed:c3:bb:81:b6:4a:20:b6:8c:0c:be:4e:7e:57:
                    22:ac:0e:68:31:fd:56:f4:6a:98:a7:1a:96:a6:4a:
                    7b:06:9d:9a:d1:df:0c:aa:f4:8a:79:d8:ec:5f:21:
                    92:4f:31:3e:c4:c1:b7:d6:17:47:73:b9:d7:4c:ae:
                    5d:7f:79:47:bd:b0:72:23:42:dc:51:01:e9:4b:e5:
                    4b:56:88:c9:9d:50:f6:34:23:70:e0:b4:0f:f7:c0:
                    b5:be:bb:d6:c3:e2:c9:bc:f2:f2:a1:1c:5f:6d:19:
                    f7:9c:9c:d3:3b:df:d9:09:9b:a8:13:19:8a:bd:76:
                    01:b9:fa:aa:fa:d5:65:14:da:73:cc:c0:f5:84:a8:
                    f7:1d:31:0e:85:f9:2a:29:36:65:9f:72:70:f7:6d:
                    64:ff:0d:b4:08:ca:07:0e:6f:1b:2c:c9:c9:51:7f:
                    92:11:8b:e4:23:c9:3c:06:3e:0d:0f:ff:f4:e3:7a:
                    ce:60:c3:ff:91:02:d5:23:8f:31:43:df:ea:15:c9:
                    bb:06:bb:42:dc:d2:20:dd:7f:1e:84:96:c9:e7:22:
                    72:b9:a3:b9:cc:5a:d0:46:eb:a0:7c:e7:42:52:fe:
                    7c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7A:9F:76:36:8B:9A:43:F0:D4:35:4A:60:54:CE:F9:46:32:23:E0
            X509v3 Authority Key Identifier:
                keyid:6F:AD:28:2D:48:F3:19:06:36:42:A2:B9:A8:03:B6:A6:E0:13:50:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/b60oLUjzGQY2QqK5qAO2puATULQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDBB4/F4E0DF141D8C11EFB9C5A8E47CDC24C2/b60oLUjzGQY2QqK5qAO2puATULQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6c:7b:92:16:3f:56:60:ae:2c:2e:39:01:5e:98:de:f1:91:
         c4:b1:86:19:92:ac:70:6f:49:06:31:76:02:9f:eb:31:04:28:
         c0:8d:94:33:19:72:6f:7b:86:3f:dc:89:55:38:7c:e3:31:e9:
         b2:41:8a:e8:3d:4c:dd:6d:1f:77:3b:ba:a0:bd:57:04:33:d8:
         7a:8e:71:60:16:0c:6c:eb:0a:b9:90:08:a3:72:31:d1:22:86:
         05:68:2b:ad:d8:51:a8:73:4e:da:76:78:17:d3:af:21:48:5b:
         27:8a:b9:e9:ea:d4:f1:7e:52:6e:73:2e:cf:ca:2f:1f:0f:de:
         11:7e:0c:47:48:c7:0e:1b:90:5c:bb:ea:9b:16:28:85:7d:23:
         e6:39:58:8b:48:ab:c7:5a:bd:96:48:cc:71:20:66:9f:9f:f1:
         57:f6:4c:6e:08:ee:a4:e9:2c:63:44:6b:57:1c:ae:d0:7f:cb:
         31:83:c0:b7:ac:dd:8e:78:b9:30:cf:53:25:d2:9e:63:e0:8c:
         e8:2b:6b:dd:fa:ce:af:a5:4a:82:49:55:a5:f4:37:4d:cb:01:
         a8:84:65:07:cd:07:bc:23:b3:5d:a4:c5:dd:f1:2c:58:9e:40:
         a7:99:e0:7c:28:77:b6:37:1d:f1:ce:1f:58:25:6d:c0:8c:d7:
         bf:66:78:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----