Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
File:                     X8N97OtwCLunQTR4RbdrR2d66mk.mft (raw, json)
Hash identifier:          ppQqgLSXQtanAFN/qch7yND7Ob4eobNKDrKeMRR17Ls=
Subject key identifier:   E3:1D:DF:74:54:D5:21:25:6E:B4:D8:FC:B1:70:48:4D:EF:84:EC:D3
Authority key identifier: 5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69
Certificate issuer:       /CN=F3650567AF/serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
Certificate serial:       0454
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
Manifest number:          044B
Signing time:             Wed 23 Sep 2026 03:47:28 +0000
Manifest this update:     Wed 23 Sep 2026 03:47:27 +0000
Manifest next update:     Fri 25 Sep 2026 03:47:27 +0000
Files and hashes:         1: X8N97OtwCLunQTR4RbdrR2d66mk.crl (hash: tGacfXSPUmEWY6XGuDWO5xqLiFCZIcganp4HPX3/FJ4=)
                          2: BFAA8AC8221E11F192CFBEB7DAE4EC9C.roa (hash: QgCzz1u02jAncdSqmMDgneUgSDpivS4kunm1jBqDAMg=)
                          3: AE083B9A221D11F1B6A7C7B1DAE4EC9C.roa (hash: BZz928+JG9DymUs/tfXn2o5xj9tzz1PFhKTIyjMNWuU=)
                          4: EEED23E0221E11F1929878B9DAE4EC9C.roa (hash: PIbvfw2+WuzsuifwkM5C+2Xq3LEZFo6ygJtOvVyzU5Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3650567AF, serialNumber=5FC37DECEB7008BBA741347845B76B47677AEA69
        Validity
            Not Before: Sep 23 03:47:27 2026 GMT
            Not After : Sep 25 03:47:27 2026 GMT
        Subject: CN=6ab34bd0-aed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b3:7c:92:20:c2:15:45:05:c8:49:71:37:64:
                    76:4e:91:2b:c7:63:7c:fc:32:7a:11:a6:30:ac:7d:
                    98:fa:a0:5c:90:d0:c0:de:22:9e:ab:b2:af:5a:cc:
                    7b:98:83:67:ce:ee:94:99:0b:c8:32:27:db:eb:16:
                    e1:9e:96:9e:31:28:91:07:71:8b:59:1c:00:bf:5e:
                    37:5f:f3:cf:44:3b:fa:3f:d6:a1:28:a6:48:37:65:
                    dd:9e:ec:3f:93:66:02:2a:73:8f:ba:07:c4:dc:c6:
                    25:96:c9:71:44:7e:76:3c:35:25:ec:db:cd:89:2f:
                    9e:2e:af:db:9c:38:b8:15:b5:d3:0e:72:51:97:69:
                    cc:e6:dc:67:d8:34:4f:ab:fe:a1:61:2d:38:43:bc:
                    16:dc:e7:af:9e:ac:38:81:b7:66:a0:08:a2:7e:72:
                    55:68:bf:0d:6c:75:25:e7:d6:d9:d5:ee:5d:06:4e:
                    97:15:af:f0:cc:59:55:1e:96:ca:d2:63:22:f5:27:
                    1c:c9:9c:75:6c:ab:78:7f:e1:dd:04:4c:b3:9a:84:
                    b1:6d:dc:43:71:f3:e6:5c:90:ac:e1:81:8b:34:3c:
                    56:fa:a9:78:a1:b3:f1:0e:05:ca:ac:a1:1c:5c:55:
                    a7:d5:25:29:f5:1a:53:7e:12:f9:5e:bd:2f:f8:02:
                    3a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1D:DF:74:54:D5:21:25:6E:B4:D8:FC:B1:70:48:4D:EF:84:EC:D3
            X509v3 Authority Key Identifier:
                keyid:5F:C3:7D:EC:EB:70:08:BB:A7:41:34:78:45:B7:6B:47:67:7A:EA:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/X8N97OtwCLunQTR4RbdrR2d66mk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3650567/33E3302674BA11EEAA94C1734AD9E6FC/X8N97OtwCLunQTR4RbdrR2d66mk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:87:08:c9:d6:2e:14:33:d9:2c:4a:02:fb:ab:b5:0b:23:39:
         67:b4:11:ad:59:e7:91:75:c1:17:1d:1c:bb:15:ce:eb:ef:65:
         5d:f7:67:a4:36:a0:12:2e:f8:54:75:e6:5b:59:16:4e:64:36:
         1f:d2:42:6a:3f:76:ad:9a:66:2c:a7:43:3f:32:89:a5:90:b9:
         0e:d6:27:a5:40:6b:02:53:ea:d0:ad:64:da:a8:f8:10:88:11:
         eb:42:07:29:74:38:2d:f2:22:82:c1:56:05:5f:89:90:9d:f2:
         7f:f9:59:50:33:ce:8a:7b:39:fe:7e:41:98:b4:ef:2d:e0:4d:
         4f:58:1d:66:bb:24:e9:f8:5f:2d:4f:cc:cf:7c:17:56:83:17:
         ca:eb:3f:44:f4:57:b6:88:57:a8:6f:63:a4:12:77:38:a1:5c:
         78:02:e1:de:5d:03:5c:fc:de:7b:87:e1:3d:ba:59:ae:6a:ac:
         e6:97:c0:97:51:a0:0c:5e:9a:12:64:a2:b2:19:cb:cb:f0:87:
         60:98:6d:b3:80:73:0b:a0:ed:49:2c:6a:c6:5c:00:55:5c:60:
         03:8d:50:7f:e6:36:47:16:55:30:60:40:b9:cb:c2:ee:e2:28:
         d6:2e:f5:ba:b8:f7:29:20:41:81:3a:95:83:1a:f5:de:ea:78:
         56:25:7a:46
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTA1NjdBRjExMC8GA1UEBRMoNUZDMzdERUNFQjcwMDhCQkE3NDEzNDc4NDVCNzZC
NDc2NzdBRUE2OTAeFw0yNjA5MjMwMzQ3MjdaFw0yNjA5MjUwMzQ3MjdaMBgxFjAU
BgNVBAMTDTZhYjM0YmQwLWFlZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCps3ySIMIVRQXISXE3ZHZOkSvHY3z8MnoRpjCsfZj6oFyQ0MDeIp6rsq9a
zHuYg2fO7pSZC8gyJ9vrFuGelp4xKJEHcYtZHAC/Xjdf889EO/o/1qEopkg3Zd2e
7D+TZgIqc4+6B8TcxiWWyXFEfnY8NSXs282JL54ur9ucOLgVtdMOclGXaczm3GfY
NE+r/qFhLThDvBbc56+erDiBt2agCKJ+clVovw1sdSXn1tnV7l0GTpcVr/DMWVUe
lsrSYyL1JxzJnHVsq3h/4d0ETLOahLFt3ENx8+ZckKzhgYs0PFb6qXihs/EOBcqs
oRxcVafVJSn1GlN+EvlevS/4AjopAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4x3f
dFTVISVutNj8sXBITe+E7NMwHwYDVR0jBBgwFoAUX8N97OtwCLunQTR4RbdrR2d6
6mkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjUwNTY3LzMzRTMzMDI2NzRCQTExRUVBQTk0QzE3MzRBRDlFNkZDL1g4Tjk3
T3R3Q0x1blFUUjRSYmRyUjJkNjZtay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1g4Tjk3T3R3Q0x1blFUUjRSYmRyUjJkNjZtay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTA1NjcvMzNFMzMwMjY3NEJBMTFFRUFBOTRDMTczNEFE
OUU2RkMvWDhOOTdPdHdDTHVuUVRSNFJiZHJSMmQ2Nm1rLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBghwjJ1i4UM9ksSgL7q7ULIzlntBGt
WeeRdcEXHRy7Fc7r72Vd92ekNqASLvhUdeZbWRZOZDYf0kJqP3atmmYsp0M/Moml
kLkO1ielQGsCU+rQrWTaqPgQiBHrQgcpdDgt8iKCwVYFX4mQnfJ/+VlQM86Kezn+
fkGYtO8t4E1PWB1muyTp+F8tT8zPfBdWgxfK6z9E9Fe2iFeob2OkEnc4oVx4AuHe
XQNc/N57h+E9ulmuaqzml8CXUaAMXpoSZKKyGcvL8IdgmG2zgHMLoO1JLGrGXABV
XGADjVB/5jZHFlUwYEC5y8Lu4ijWLvW6uPcpIEGBOpWDGvXe6nhWJXpG
-----END CERTIFICATE-----