Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
File:                     6y_2M0NFlzp0sAkALjaRcdk48DM.mft (raw, json)
Hash identifier:          BRNpU2bAnhtjczR06nMiQD4iKNWSR0GIlvBgzckQgCg=
Subject key identifier:   63:C9:E9:DC:A1:43:93:B3:E0:9F:D0:B1:7E:BD:19:18:BB:84:7B:3E
Authority key identifier: EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33
Certificate issuer:       /CN=F36FDDCFAF/serialNumber=EB2FF6334345973A74B009002E369171D938F033
Certificate serial:       0839
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
Manifest number:          0837
Signing time:             Tue 22 Sep 2026 02:00:57 +0000
Manifest this update:     Tue 22 Sep 2026 02:00:56 +0000
Manifest next update:     Thu 24 Sep 2026 02:00:56 +0000
Files and hashes:         1: 6y_2M0NFlzp0sAkALjaRcdk48DM.crl (hash: 34fruFuAhV05g59SijtdxMyaySj+ZkodE/Jihs15Eb4=)
                          2: 3ED2C7FA73DF11F08938C08EDAE4EC9C.roa (hash: iyabqTBm+x48hvA2ztaOaTXns/fPRnTXSFF6KRFDSwY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105 (0x839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDDCFAF, serialNumber=EB2FF6334345973A74B009002E369171D938F033
        Validity
            Not Before: Sep 22 02:00:56 2026 GMT
            Not After : Sep 24 02:00:56 2026 GMT
        Subject: CN=6ab1e159-6dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ce:63:46:ab:81:6c:3b:95:fb:43:dd:82:6f:
                    57:53:71:a9:f6:25:e3:b9:3b:da:d6:0e:68:24:cd:
                    47:cc:99:4c:c6:6a:1c:c7:72:20:93:c0:0b:ef:53:
                    1c:e7:4b:70:7c:db:44:17:72:cf:ef:6b:d5:ff:c3:
                    1b:63:e9:ee:6b:d0:b2:16:3a:d7:a9:43:eb:24:81:
                    c9:90:e0:6f:45:31:b1:8d:d9:6c:29:fb:d1:53:11:
                    6a:f6:a0:bb:96:0e:1c:ab:a6:3a:f9:0e:65:9b:b3:
                    ae:49:a9:84:59:33:dc:28:60:eb:a3:18:52:bf:b2:
                    b0:71:3e:44:d4:0b:b9:c3:06:b9:8f:60:3f:d0:bc:
                    eb:98:7c:0f:68:a0:d1:68:64:6e:a3:21:c7:e0:a8:
                    6e:ef:49:a7:c6:c3:41:2a:a4:56:e5:53:92:8b:92:
                    d6:3e:eb:36:73:4c:36:21:a0:53:a5:b9:8d:88:41:
                    34:fd:87:3e:28:28:4b:fd:04:12:90:55:c4:b1:ee:
                    17:58:7e:3f:69:99:95:2e:13:3a:7a:5d:b8:e3:41:
                    07:a7:1e:9a:21:b6:0b:6c:52:6e:f5:5f:63:19:53:
                    d1:a3:27:40:48:73:3b:92:cf:5a:b0:f5:a1:5b:e5:
                    99:ac:5c:e8:48:a5:cd:f4:3e:72:81:47:59:ca:ed:
                    d0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C9:E9:DC:A1:43:93:B3:E0:9F:D0:B1:7E:BD:19:18:BB:84:7B:3E
            X509v3 Authority Key Identifier:
                keyid:EB:2F:F6:33:43:45:97:3A:74:B0:09:00:2E:36:91:71:D9:38:F0:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/6y_2M0NFlzp0sAkALjaRcdk48DM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDDCF/ED44E9306A1B11EBBA744416F8AEA228/6y_2M0NFlzp0sAkALjaRcdk48DM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:d3:94:b1:b0:7a:b6:4d:a1:9e:94:35:52:91:ef:15:1c:cf:
         0c:d5:fe:2d:af:cc:ea:1d:6c:03:51:fd:a8:05:37:74:ee:31:
         1d:a2:a2:82:4e:cc:e8:d1:63:ec:6e:f3:af:18:7f:a6:f5:47:
         64:49:99:e2:04:0f:27:0e:0f:8f:13:a5:2f:98:24:51:f6:e6:
         8d:57:3f:3c:fe:23:11:cb:10:30:ad:3c:a4:d1:3d:d6:3c:8b:
         b8:e0:09:91:4a:bd:4e:1a:d2:72:a4:e3:12:23:fa:c4:d3:65:
         f9:fc:cf:bc:bd:fa:5d:72:88:a4:61:6b:60:0b:8d:0e:4d:8c:
         1a:cc:da:fc:e9:86:fb:2e:d8:3d:7f:2a:92:c4:31:7d:23:26:
         65:4d:bc:27:87:19:c0:ed:30:f4:4a:01:7f:64:d4:01:db:bf:
         04:49:5b:23:23:03:9b:dd:41:28:6e:46:c4:f3:e6:a6:e0:e5:
         68:7f:f4:c7:9e:03:53:30:50:15:00:f9:47:f5:00:73:74:b8:
         2b:ae:d5:15:51:84:33:51:6d:6a:af:37:e0:2e:24:13:9b:51:
         cc:d5:76:9d:30:25:81:bb:36:d9:00:73:e3:e6:10:ca:3e:dc:
         ee:ca:42:8e:90:f6:c9:ee:80:3f:bf:37:b0:cd:38:0b:f2:f6:
         91:1e:78:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----