Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
File:                     0unaaO71cIn0RVxxt8nHfu3iFmI.mft (raw, json)
Hash identifier:          4dWzd9gNkdVLugbJi7OX1E0IOR8NDzRcGoeGCNcsAHg=
Subject key identifier:   78:1D:19:AD:A3:CD:82:EA:EE:20:D0:57:6C:60:34:B8:BB:4F:DA:0F
Authority key identifier: D2:E9:DA:68:EE:F5:70:89:F4:45:5C:71:B7:C9:C7:7E:ED:E2:16:62
Certificate issuer:       /CN=F362E505AF/serialNumber=D2E9DA68EEF57089F4455C71B7C9C77EEDE21662
Certificate serial:       01D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
Manifest number:          01CF
Signing time:             Tue 22 Sep 2026 04:56:16 +0000
Manifest this update:     Tue 22 Sep 2026 04:56:15 +0000
Manifest next update:     Thu 24 Sep 2026 04:56:15 +0000
Files and hashes:         1: 0unaaO71cIn0RVxxt8nHfu3iFmI.crl (hash: +16nDpKv1xAp0co8ZMoGxv3IwH+tw46IeIjO977jiww=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362E505AF, serialNumber=D2E9DA68EEF57089F4455C71B7C9C77EEDE21662
        Validity
            Not Before: Sep 22 04:56:15 2026 GMT
            Not After : Sep 24 04:56:15 2026 GMT
        Subject: CN=6ab20a70-9b28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7e:3a:9b:30:9c:41:b2:9c:87:be:3f:0a:de:
                    f9:b2:f1:69:6b:47:ac:aa:43:0c:13:90:96:31:7b:
                    06:a2:f4:68:54:57:66:05:e5:08:21:74:b7:5e:33:
                    c4:dd:7e:18:72:7f:f2:c7:22:d0:12:99:cb:de:e6:
                    6d:e0:63:db:ff:8f:74:44:13:3b:73:af:d3:8b:a7:
                    0a:65:7b:30:d2:b4:e4:43:b3:06:5a:dc:9c:55:c1:
                    8b:c9:31:47:4f:d5:c2:b0:45:cb:8d:c3:19:83:14:
                    c5:ed:db:22:bb:e5:4e:bc:ed:7c:db:f0:6f:c6:eb:
                    98:a7:90:8c:f8:0c:81:bb:cb:2d:bf:c4:b9:7f:5e:
                    dd:c6:36:0a:a4:eb:d8:ce:2e:b6:f7:a5:c8:c4:f5:
                    13:97:56:a3:23:b0:67:06:64:f5:e0:8e:e9:26:3e:
                    1a:d1:c4:bd:5e:24:e1:7a:6b:95:59:81:61:c4:67:
                    43:93:5a:d6:84:28:ec:4b:32:42:ea:56:31:3c:fa:
                    45:d6:5f:d2:b4:86:8d:9a:bc:5a:75:24:a3:55:c6:
                    46:04:af:b7:8e:33:9b:19:29:2f:14:14:65:0d:c9:
                    83:5d:2e:68:5f:38:39:a1:56:2a:57:6c:56:e5:64:
                    2c:8d:2e:85:c8:8f:a4:c8:e7:bc:e5:6a:93:46:f0:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:1D:19:AD:A3:CD:82:EA:EE:20:D0:57:6C:60:34:B8:BB:4F:DA:0F
            X509v3 Authority Key Identifier:
                keyid:D2:E9:DA:68:EE:F5:70:89:F4:45:5C:71:B7:C9:C7:7E:ED:E2:16:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0unaaO71cIn0RVxxt8nHfu3iFmI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362E505/A91DAD3E4F3E11F09A6706C4DAE4EC9C/0unaaO71cIn0RVxxt8nHfu3iFmI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:61:b8:68:3b:91:99:fd:ed:d7:79:9e:07:5f:f8:23:ce:2f:
         b0:ea:0f:3f:dc:e1:b7:0e:5c:04:c2:62:98:4b:9c:3c:e9:31:
         bb:35:8e:f3:b4:e0:b3:e5:a8:6e:06:d2:9e:f0:c9:83:82:5c:
         17:da:9b:70:38:8d:d4:2e:67:d7:ee:d7:dc:27:15:17:4c:f3:
         61:5a:48:0c:c9:39:da:d5:f2:f9:26:20:3e:31:b1:0e:88:64:
         6a:61:2f:f8:d6:7d:5f:0f:39:6c:16:c3:b1:5c:58:7a:bc:53:
         16:d0:56:34:de:98:19:08:53:09:00:27:3a:cf:47:58:77:69:
         62:e4:24:6c:47:19:b7:f2:0b:91:13:86:8b:eb:c8:ab:a3:7c:
         bb:99:0e:27:d2:c6:e6:8e:f0:bb:00:5c:1b:da:eb:a6:a0:c4:
         bd:e5:d2:c1:75:61:80:76:03:2c:7e:0a:bf:d7:e2:c7:34:01:
         44:b0:34:26:0f:28:88:a0:fc:52:1c:b5:97:17:33:19:a5:fb:
         92:9f:57:a9:49:51:f3:89:f5:bc:ed:56:57:1d:72:b1:6d:09:
         ef:ab:e4:f5:20:9e:dd:80:37:75:40:27:0d:5e:c1:4e:cf:11:
         55:f8:e5:43:06:10:e4:0a:7f:b8:19:5e:3a:95:aa:2b:5b:24:
         a4:8f:65:59
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkU1MDVBRjExMC8GA1UEBRMoRDJFOURBNjhFRUY1NzA4OUY0NDU1QzcxQjdDOUM3
N0VFREUyMTY2MjAeFw0yNjA5MjIwNDU2MTVaFw0yNjA5MjQwNDU2MTVaMBgxFjAU
BgNVBAMTDTZhYjIwYTcwLTliMjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQfjqbMJxBspyHvj8K3vmy8WlrR6yqQwwTkJYxewai9GhUV2YF5QghdLde
M8Tdfhhyf/LHItASmcve5m3gY9v/j3REEztzr9OLpwplezDStORDswZa3JxVwYvJ
MUdP1cKwRcuNwxmDFMXt2yK75U687Xzb8G/G65inkIz4DIG7yy2/xLl/Xt3GNgqk
69jOLrb3pcjE9ROXVqMjsGcGZPXgjukmPhrRxL1eJOF6a5VZgWHEZ0OTWtaEKOxL
MkLqVjE8+kXWX9K0ho2avFp1JKNVxkYEr7eOM5sZKS8UFGUNyYNdLmhfODmhVipX
bFblZCyNLoXIj6TI57zlapNG8ETrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeB0Z
raPNguruINBXbGA0uLtP2g8wHwYDVR0jBBgwFoAU0unaaO71cIn0RVxxt8nHfu3i
FmIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJFNTA1L0E5MURBRDNFNEYzRTExRjA5QTY3MDZDNERBRTRFQzlDLzB1bmFh
TzcxY0luMFJWeHh0OG5IZnUzaUZtSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzB1bmFhTzcxY0luMFJWeHh0OG5IZnUzaUZtSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkU1MDUvQTkxREFEM0U0RjNFMTFGMDlBNjcwNkM0REFF
NEVDOUMvMHVuYWFPNzFjSW4wUlZ4eHQ4bkhmdTNpRm1JLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAYbhoO5GZ/e3XeZ4HX/gjzi+w6g8/
3OG3DlwEwmKYS5w86TG7NY7ztOCz5ahuBtKe8MmDglwX2ptwOI3ULmfX7tfcJxUX
TPNhWkgMyTna1fL5JiA+MbEOiGRqYS/41n1fDzlsFsOxXFh6vFMW0FY03pgZCFMJ
ACc6z0dYd2li5CRsRxm38guRE4aL68iro3y7mQ4n0sbmjvC7AFwb2uumoMS95dLB
dWGAdgMsfgq/1+LHNAFEsDQmDyiIoPxSHLWXFzMZpfuSn1epSVHzifW87VZXHXKx
bQnvq+T1IJ7dgDd1QCcNXsFOzxFV+OVDBhDkCn+4GV46laorWySkj2VZ
-----END CERTIFICATE-----