Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft
File:                     7GwN3it-gbOk5sxGye8OxVb-0zo.mft (raw, json)
Hash identifier:          31p252Hg/bZyP5aaY+8Jd3JDT4MZgujUrSSHBSIP8+4=
Subject key identifier:   E8:4A:62:29:79:7D:3B:BE:02:DF:1E:DD:4A:C5:51:CB:19:5E:75:F3
Authority key identifier: EC:6C:0D:DE:2B:7E:81:B3:A4:E6:CC:46:C9:EF:0E:C5:56:FE:D3:3A
Certificate issuer:       /CN=F3620624AF/serialNumber=EC6C0DDE2B7E81B3A4E6CC46C9EF0EC556FED33A
Certificate serial:       0489
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7GwN3it-gbOk5sxGye8OxVb-0zo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft
Manifest number:          0487
Signing time:             Sun 20 Sep 2026 03:39:55 +0000
Manifest this update:     Sun 20 Sep 2026 03:39:54 +0000
Manifest next update:     Tue 22 Sep 2026 03:39:54 +0000
Files and hashes:         1: 7GwN3it-gbOk5sxGye8OxVb-0zo.crl (hash: XBzFqxE/hz6shv8wmm5EG8XEiHsA/J4/AQRsOWDTyV4=)
                          2: 44B6BBCA3C2F11EE828F83524AD9E6FC.roa (hash: KBkFV6KhcBCrxzqWrsJlJzC0Smcm+dsmEDXDCESEL9Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7GwN3it-gbOk5sxGye8OxVb-0zo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1161 (0x489)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3620624AF, serialNumber=EC6C0DDE2B7E81B3A4E6CC46C9EF0EC556FED33A
        Validity
            Not Before: Sep 20 03:39:54 2026 GMT
            Not After : Sep 22 03:39:54 2026 GMT
        Subject: CN=6aaf558b-0903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:22:4d:d9:72:93:d2:7d:a5:e6:b5:ed:29:
                    44:f7:11:48:23:44:90:d6:b8:a0:aa:b4:00:ca:36:
                    1a:0f:2c:93:98:12:55:6a:3d:91:dc:23:34:5f:a0:
                    fd:6e:09:94:00:b5:41:b1:b8:8c:c2:63:6d:ae:67:
                    4f:97:ed:b0:df:22:b6:66:e6:d0:8e:5b:d8:19:4f:
                    9a:e8:ea:aa:97:1e:4a:05:4f:c1:6c:64:e9:64:ca:
                    9f:a7:99:19:38:49:bf:4e:9f:86:75:0d:28:1c:6d:
                    ec:9a:a7:8d:6a:39:d5:40:98:ae:61:1e:ba:af:e3:
                    9e:5d:89:30:14:61:d3:5c:a5:f4:46:64:04:74:2e:
                    ea:9c:16:89:0e:6e:4f:e6:3a:d1:14:8b:f9:af:25:
                    80:fe:0c:cf:0b:b4:73:07:0c:b9:c6:62:d8:f2:8c:
                    52:e6:5e:fc:f2:2b:4c:02:b2:0b:43:92:3b:55:63:
                    91:44:8e:2c:09:8b:f3:3d:da:4c:ca:ee:25:6c:ba:
                    7e:d1:1a:03:62:9a:67:dd:57:f4:c7:15:c9:cf:40:
                    9e:5e:e1:30:5b:23:a2:e4:ed:a5:8d:0d:82:94:d6:
                    53:62:ec:e3:50:1e:ff:55:73:b8:70:85:d6:62:6d:
                    51:ce:42:45:40:83:10:68:39:49:87:7e:c1:5c:98:
                    79:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:4A:62:29:79:7D:3B:BE:02:DF:1E:DD:4A:C5:51:CB:19:5E:75:F3
            X509v3 Authority Key Identifier:
                keyid:EC:6C:0D:DE:2B:7E:81:B3:A4:E6:CC:46:C9:EF:0E:C5:56:FE:D3:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7GwN3it-gbOk5sxGye8OxVb-0zo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3620624/DF05C77C3C2D11EEA9AA684E4AD9E6FC/7GwN3it-gbOk5sxGye8OxVb-0zo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:b9:39:f6:85:49:bc:91:69:bf:e7:db:05:03:98:df:0d:a8:
         ce:ff:0f:33:f8:a9:f6:64:42:4b:ef:3a:5e:5f:bd:54:d7:d7:
         91:c0:b9:3b:d1:af:bf:98:01:2a:5a:34:1c:ed:2c:c0:61:90:
         54:05:99:3d:36:23:3b:c0:92:7e:85:9d:3d:8f:4d:ac:ea:2c:
         d4:bd:8d:c7:20:4b:ae:1a:4a:b0:f6:dd:b8:b5:12:b2:35:a2:
         4b:f2:1b:76:b1:19:03:79:fa:6d:7c:46:15:25:71:0a:5a:25:
         38:fa:9d:ae:27:b7:ad:9e:64:42:95:7d:e2:96:3c:4a:e1:a1:
         7a:ec:37:0b:d5:34:18:e3:64:ac:2a:fe:41:c1:e9:7e:1c:2e:
         a9:d8:bb:cf:b0:f4:c5:88:ec:1a:36:d5:39:51:4f:f0:cc:96:
         c3:bc:d8:f4:c8:b4:1d:15:8b:5c:1e:f5:60:37:f3:cb:20:b7:
         a5:e2:0a:3e:3d:c9:e5:54:1f:e7:bc:70:9a:6f:f5:71:4e:1f:
         2b:54:5a:38:a4:53:a7:8a:f0:f6:38:4c:04:2e:d5:51:82:32:
         8e:4d:ce:d3:21:4f:b3:e0:53:ce:be:aa:f9:ad:b6:1c:06:5e:
         34:27:3c:cf:9b:61:44:48:8e:d6:f6:f7:3c:87:50:25:b3:1f:
         f5:9c:fc:5f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBIkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjA2MjRBRjExMC8GA1UEBRMoRUM2QzBEREUyQjdFODFCM0E0RTZDQzQ2QzlFRjBF
QzU1NkZFRDMzQTAeFw0yNjA5MjAwMzM5NTRaFw0yNjA5MjIwMzM5NTRaMBgxFjAU
BgNVBAMTDTZhYWY1NThiLTA5MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJfyJN2XKT0n2l5rXtKUT3EUgjRJDWuKCqtADKNhoPLJOYElVqPZHcIzRf
oP1uCZQAtUGxuIzCY22uZ0+X7bDfIrZm5tCOW9gZT5ro6qqXHkoFT8FsZOlkyp+n
mRk4Sb9On4Z1DSgcbeyap41qOdVAmK5hHrqv455diTAUYdNcpfRGZAR0LuqcFokO
bk/mOtEUi/mvJYD+DM8LtHMHDLnGYtjyjFLmXvzyK0wCsgtDkjtVY5FEjiwJi/M9
2kzK7iVsun7RGgNimmfdV/THFcnPQJ5e4TBbI6Lk7aWNDYKU1lNi7ONQHv9Vc7hw
hdZibVHOQkVAgxBoOUmHfsFcmHkLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU6Epi
KXl9O74C3x7dSsVRyxledfMwHwYDVR0jBBgwFoAU7GwN3it+gbOk5sxGye8OxVb+
0zowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIwNjI0L0RGMDVDNzdDM0MyRDExRUVBOUFBNjg0RTRBRDlFNkZDLzdHd04z
aXQtZ2JPazVzeEd5ZThPeFZiLTB6by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdHd04zaXQtZ2JPazVzeEd5ZThPeFZiLTB6by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjA2MjQvREYwNUM3N0MzQzJEMTFFRUE5QUE2ODRFNEFE
OUU2RkMvN0d3TjNpdC1nYk9rNXN4R3llOE94VmItMHpvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCduTn2hUm8kWm/59sFA5jfDajO/w8z
+Kn2ZEJL7zpeX71U19eRwLk70a+/mAEqWjQc7SzAYZBUBZk9NiM7wJJ+hZ09j02s
6izUvY3HIEuuGkqw9t24tRKyNaJL8ht2sRkDefptfEYVJXEKWiU4+p2uJ7etnmRC
lX3iljxK4aF67DcL1TQY42SsKv5Bwel+HC6p2LvPsPTFiOwaNtU5UU/wzJbDvNj0
yLQdFYtcHvVgN/PLILel4go+PcnlVB/nvHCab/VxTh8rVFo4pFOnivD2OEwELtVR
gjKOTc7TIU+z4FPOvqr5rbYcBl40JzzPm2FESI7W9vc8h1Alsx/1nPxf
-----END CERTIFICATE-----