Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
File:                     BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft (raw, json)
Hash identifier:          sJSJUDV2ZRoovzC0uaNWu2Ox8TidRzuwHAFbOqaIPxM=
Subject key identifier:   20:74:D4:AD:53:3D:C7:60:EA:78:8E:A3:EA:56:DC:80:0C:EB:B6:25
Authority key identifier: 04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2
Certificate issuer:       /CN=F364DD25AF/serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2
Certificate serial:       01D4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
Manifest number:          01D2
Signing time:             Mon 28 Sep 2026 04:58:58 +0000
Manifest this update:     Mon 28 Sep 2026 04:58:57 +0000
Manifest next update:     Wed 30 Sep 2026 04:58:57 +0000
Files and hashes:         1: BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl (hash: y7tDxa77ESn8xGipitc89tMu1/UC0EEM0IWK+/zxQ4A=)
                          2: D0193846529E11F0BBC03EB2DAE4EC9C.roa (hash: RPEdKIAKBSzqVLXcECrRATliI7vLtXP88nKKeklWY7A=)
                          3: 09F47684529F11F0AC9FA6B2DAE4EC9C.roa (hash: MdGJ3CUnVttvPq+a7aB4/HqidShiV81Q3YLvvUB2hgE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364DD25AF, serialNumber=04D6CAC23B145B66ED68BED67F2C1D87665CF5B2
        Validity
            Not Before: Sep 28 04:58:57 2026 GMT
            Not After : Sep 30 04:58:57 2026 GMT
        Subject: CN=6ab9f412-164a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a6:f0:8e:05:83:ba:6e:5a:e9:3b:2e:9c:30:
                    b7:5e:a2:bb:de:6e:e9:22:1b:bd:64:9d:90:c3:0d:
                    24:24:fd:48:de:40:f0:d4:f3:c0:1e:fd:56:4c:80:
                    47:99:f6:8b:1f:05:7d:9a:2d:6b:9e:c3:15:fc:71:
                    cc:39:6b:8c:f3:c2:2a:01:46:e4:10:8c:ce:e0:55:
                    df:ce:ee:f3:01:42:d1:1d:40:6d:36:26:d9:f5:fa:
                    57:99:13:39:2a:74:f3:52:0e:fe:26:5d:77:4e:fd:
                    e3:f4:f7:56:25:80:28:f8:33:6f:cb:17:6e:62:2c:
                    a3:8c:8f:7a:3b:ba:1c:0d:34:42:40:b2:2f:e0:19:
                    96:f1:24:ee:d0:c3:38:80:0c:d6:ce:31:b8:59:ba:
                    5b:85:3e:4c:47:88:1d:d6:d4:c9:40:72:e9:b2:c1:
                    84:94:b0:b9:18:10:14:3b:57:bd:4c:aa:2d:d3:f2:
                    33:6b:cc:a4:51:0f:6f:e4:94:09:78:d6:3b:1b:27:
                    b5:03:71:a1:44:e4:ae:ab:21:92:be:34:1b:e6:29:
                    1b:78:9b:33:09:d3:57:b6:0e:55:41:45:01:f1:12:
                    3a:ea:48:13:9a:da:fb:94:92:cf:64:95:ad:d7:b0:
                    27:ba:43:c4:51:8d:df:13:82:24:3a:60:14:3b:c7:
                    d5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:74:D4:AD:53:3D:C7:60:EA:78:8E:A3:EA:56:DC:80:0C:EB:B6:25
            X509v3 Authority Key Identifier:
                keyid:04:D6:CA:C2:3B:14:5B:66:ED:68:BE:D6:7F:2C:1D:87:66:5C:F5:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/BNbKwjsUW2btaL7Wfywdh2Zc9bI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364DD25/F30273FA529D11F095582EAADAE4EC9C/BNbKwjsUW2btaL7Wfywdh2Zc9bI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:6a:bc:d0:56:0f:52:28:f3:6a:c6:8e:a1:91:98:f5:1e:80:
         22:05:66:72:fb:cd:d8:a6:4c:da:82:cb:54:5f:c2:cf:ab:6a:
         ba:75:d0:74:66:e0:39:fe:e7:f3:24:41:b4:5b:7a:67:6f:93:
         df:a7:0f:51:c2:d2:fa:af:48:96:5e:65:5f:f8:20:cb:9c:59:
         37:39:80:d7:cb:f5:24:a6:91:ac:01:a4:c2:b9:55:4a:04:d8:
         b0:2f:71:17:f0:d4:37:31:bb:73:d1:35:d3:d7:1c:44:68:ae:
         a2:99:22:2e:c5:03:b7:ef:17:1a:57:22:d1:20:b0:c4:8a:7e:
         9e:ca:68:d1:29:39:bc:f4:dc:b7:aa:44:49:19:57:e7:ea:70:
         44:d3:22:a3:a0:7f:a7:b1:a0:dd:9a:1f:9c:df:b7:e2:bd:3f:
         25:db:b6:fc:44:74:2c:ed:7f:51:0d:32:ad:96:1f:e9:1d:7a:
         c3:e3:11:84:b0:dc:76:66:f7:18:79:90:04:af:98:51:ad:42:
         05:79:8f:dd:1e:19:5f:ed:df:77:46:20:f9:b6:28:88:84:9c:
         90:e0:fe:80:84:4b:ba:6c:ef:97:2a:21:41:2c:a4:5b:0e:33:
         ef:f8:9d:7f:f4:40:24:44:c6:52:32:de:8c:3a:c6:aa:1a:72:
         fc:df:5c:7f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAdQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEREMjVBRjExMC8GA1UEBRMoMDRENkNBQzIzQjE0NUI2NkVENjhCRUQ2N0YyQzFE
ODc2NjVDRjVCMjAeFw0yNjA5MjgwNDU4NTdaFw0yNjA5MzAwNDU4NTdaMBgxFjAU
BgNVBAMTDTZhYjlmNDEyLTE2NGEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPpvCOBYO6blrpOy6cMLdeorvebukiG71knZDDDSQk/UjeQPDU88Ae/VZM
gEeZ9osfBX2aLWuewxX8ccw5a4zzwioBRuQQjM7gVd/O7vMBQtEdQG02Jtn1+leZ
EzkqdPNSDv4mXXdO/eP091YlgCj4M2/LF25iLKOMj3o7uhwNNEJAsi/gGZbxJO7Q
wziADNbOMbhZuluFPkxHiB3W1MlAcumywYSUsLkYEBQ7V71Mqi3T8jNrzKRRD2/k
lAl41jsbJ7UDcaFE5K6rIZK+NBvmKRt4mzMJ01e2DlVBRQHxEjrqSBOa2vuUks9k
la3XsCe6Q8RRjd8TgiQ6YBQ7x9VTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUIHTU
rVM9x2DqeI6j6lbcgAzrtiUwHwYDVR0jBBgwFoAUBNbKwjsUW2btaL7Wfywdh2Zc
9bIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRERDI1L0YzMDI3M0ZBNTI5RDExRjA5NTU4MkVBQURBRTRFQzlDL0JOYkt3
anNVVzJidGFMN1dmeXdkaDJaYzliSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0JOYkt3anNVVzJidGFMN1dmeXdkaDJaYzliSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NEREMjUvRjMwMjczRkE1MjlEMTFGMDk1NTgyRUFBREFF
NEVDOUMvQk5iS3dqc1VXMmJ0YUw3V2Z5d2RoMlpjOWJJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAiarzQVg9SKPNqxo6hkZj1HoAiBWZy
+83YpkzagstUX8LPq2q6ddB0ZuA5/ufzJEG0W3pnb5Pfpw9RwtL6r0iWXmVf+CDL
nFk3OYDXy/UkppGsAaTCuVVKBNiwL3EX8NQ3Mbtz0TXT1xxEaK6imSIuxQO37xca
VyLRILDEin6eymjRKTm89Ny3qkRJGVfn6nBE0yKjoH+nsaDdmh+c37fivT8l27b8
RHQs7X9RDTKtlh/pHXrD4xGEsNx2ZvcYeZAEr5hRrUIFeY/dHhlf7d93RiD5tiiI
hJyQ4P6AhEu6bO+XKiFBLKRbDjPv+J1/9EAkRMZSMt6MOsaqGnL831x/
-----END CERTIFICATE-----