Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655E48/2DD522F88BF911F1A55C3B06CF1D38B0/Ho-Pgg19Afi1kVdisfXGOP1p5xA.mft
File:                     Ho-Pgg19Afi1kVdisfXGOP1p5xA.mft (raw, json)
Hash identifier:          IIM77sZ0dPjJRCLTUVCxV8VXFBcW2m8YiBbxkc9Oqag=
Subject key identifier:   4A:75:67:30:58:54:68:BD:20:47:2E:B2:6C:14:A3:D7:B3:C7:A7:8B
Authority key identifier: 1E:8F:8F:82:0D:7D:01:F8:B5:91:57:62:B1:F5:C6:38:FD:69:E7:10
Certificate issuer:       /CN=F3655E48AF/serialNumber=1E8F8F820D7D01F8B5915762B1F5C638FD69E710
Certificate serial:       3C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ho-Pgg19Afi1kVdisfXGOP1p5xA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655E48/2DD522F88BF911F1A55C3B06CF1D38B0/Ho-Pgg19Afi1kVdisfXGOP1p5xA.mft
Manifest number:          3A
Signing time:             Tue 22 Sep 2026 05:47:21 +0000
Manifest this update:     Tue 22 Sep 2026 05:47:20 +0000
Manifest next update:     Thu 24 Sep 2026 05:47:20 +0000
Files and hashes:         1: Ho-Pgg19Afi1kVdisfXGOP1p5xA.crl (hash: TVjolRrnjuN77yCROnIbTQ0t4Z5km+tqyivNY5PAjck=)
                          2: 2CB96FFE8C1311F1A48940A4CE1D38B0.roa (hash: 4BVXrsjSfZOlG6Lwd79j2HTxKWPi7qZHUFZz5/3agyk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655E48/2DD522F88BF911F1A55C3B06CF1D38B0/Ho-Pgg19Afi1kVdisfXGOP1p5xA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655E48/2DD522F88BF911F1A55C3B06CF1D38B0/Ho-Pgg19Afi1kVdisfXGOP1p5xA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ho-Pgg19Afi1kVdisfXGOP1p5xA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655E48AF, serialNumber=1E8F8F820D7D01F8B5915762B1F5C638FD69E710
        Validity
            Not Before: Sep 22 05:47:20 2026 GMT
            Not After : Sep 24 05:47:20 2026 GMT
        Subject: CN=6ab21669-6977
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:3a:d4:ed:31:aa:df:de:3a:1c:49:7f:08:
                    86:14:00:11:75:f7:36:4c:1b:91:a3:08:53:c7:9c:
                    d6:08:6f:4c:62:7d:23:46:06:77:7f:24:1f:3b:d5:
                    c5:89:76:bc:3d:7e:f7:fe:69:ca:69:d9:d6:bf:8c:
                    19:9a:d3:5c:d7:c1:b1:0e:73:0c:86:dc:db:c7:b6:
                    c2:4f:a8:dc:25:40:58:ce:22:e3:be:a3:f5:1f:40:
                    17:3c:3b:c5:dd:c8:0b:15:75:dc:7b:79:f9:b3:e7:
                    9f:3f:76:11:9c:6d:f5:3f:ab:97:52:97:ed:69:99:
                    0f:21:33:65:84:99:95:e6:18:17:eb:d2:0f:9c:f9:
                    3c:dc:7f:e5:33:ae:71:50:fa:a0:c2:d0:8d:b9:13:
                    4f:61:ef:cb:96:7c:95:fc:f8:49:88:46:bb:28:17:
                    87:b8:bb:09:89:3d:b1:b0:7b:91:92:be:1a:ca:1f:
                    c4:e4:3a:70:2b:51:ae:2b:7f:d0:23:a6:69:01:98:
                    58:7e:b1:5e:c4:22:24:fe:a6:87:c2:a7:ae:af:7a:
                    13:96:ce:d2:83:7a:9f:ba:f6:0f:64:a9:3c:a5:b0:
                    30:05:f5:7f:5b:e8:d5:22:94:8a:5f:c5:9d:0b:1c:
                    be:00:8d:b6:ee:8c:c8:8d:12:dd:75:a2:14:ce:c0:
                    89:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:75:67:30:58:54:68:BD:20:47:2E:B2:6C:14:A3:D7:B3:C7:A7:8B
            X509v3 Authority Key Identifier:
                keyid:1E:8F:8F:82:0D:7D:01:F8:B5:91:57:62:B1:F5:C6:38:FD:69:E7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655E48/2DD522F88BF911F1A55C3B06CF1D38B0/Ho-Pgg19Afi1kVdisfXGOP1p5xA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ho-Pgg19Afi1kVdisfXGOP1p5xA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655E48/2DD522F88BF911F1A55C3B06CF1D38B0/Ho-Pgg19Afi1kVdisfXGOP1p5xA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:d3:72:eb:9d:7d:8e:1a:d2:c7:c4:20:6a:00:41:f6:45:2f:
         f7:b9:07:bb:f1:ec:8c:e2:dd:50:77:da:5f:1a:55:76:8d:65:
         3a:91:7a:14:99:c9:ed:65:9f:0d:01:d3:f5:b3:b2:c0:fe:f8:
         d2:15:8b:92:be:97:bd:27:81:a3:ad:2b:ec:19:80:6f:ff:7e:
         ce:a0:0b:c8:06:4e:14:89:dd:fe:6e:ba:f3:ce:71:59:1f:76:
         fd:7c:77:4e:d6:c7:61:fb:6d:0e:bf:0a:57:e8:97:70:d4:e8:
         67:fb:52:7c:9c:ed:20:71:bb:08:1d:46:38:d8:0a:52:37:2a:
         e4:25:44:0c:ca:c9:79:0b:c9:42:25:72:c6:31:7c:7f:2e:ec:
         ac:ad:86:a4:23:23:bb:d6:48:3c:46:b2:d1:47:ec:9b:ff:35:
         1b:be:76:d6:07:c5:60:af:57:1c:14:ac:ef:ed:75:d5:8a:41:
         31:22:1e:25:78:3c:fc:8a:19:f3:fe:52:d9:0a:c6:06:04:66:
         cd:3d:c4:49:15:b2:23:86:6b:9d:dc:f2:c0:9a:cf:a9:ff:4d:
         e4:a3:e4:78:74:ad:87:cc:bf:57:06:82:6a:5e:4c:89:02:77:
         b7:4d:71:5b:37:32:c7:fb:72:6c:51:2e:97:fb:df:72:87:ef:
         bb:fc:99:e1
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBPDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
NUU0OEFGMTEwLwYDVQQFEygxRThGOEY4MjBEN0QwMUY4QjU5MTU3NjJCMUY1QzYz
OEZENjlFNzEwMB4XDTI2MDkyMjA1NDcyMFoXDTI2MDkyNDA1NDcyMFowGDEWMBQG
A1UEAxMNNmFiMjE2NjktNjk3NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANZ9OtTtMarf3jocSX8IhhQAEXX3NkwbkaMIU8ec1ghvTGJ9I0YGd38kHzvV
xYl2vD1+9/5pymnZ1r+MGZrTXNfBsQ5zDIbc28e2wk+o3CVAWM4i476j9R9AFzw7
xd3ICxV13Ht5+bPnnz92EZxt9T+rl1KX7WmZDyEzZYSZleYYF+vSD5z5PNx/5TOu
cVD6oMLQjbkTT2Hvy5Z8lfz4SYhGuygXh7i7CYk9sbB7kZK+GsofxOQ6cCtRrit/
0COmaQGYWH6xXsQiJP6mh8Knrq96E5bO0oN6n7r2D2SpPKWwMAX1f1vo1SKUil/F
nQscvgCNtu6MyI0S3XWiFM7AiVkCAwEAAaOCArgwggK0MB0GA1UdDgQWBBRKdWcw
WFRovSBHLrJsFKPXs8enizAfBgNVHSMEGDAWgBQej4+CDX0B+LWRV2Kx9cY4/Wnn
EDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTVFNDgvMkRENTIyRjg4QkY5MTFGMUE1NUMzQjA2Q0YxRDM4QjAvSG8tUGdn
MTlBZmkxa1ZkaXNmWEdPUDFwNXhBLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvSG8tUGdnMTlBZmkxa1ZkaXNmWEdPUDFwNXhBLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY1NUU0OC8yREQ1MjJGODhCRjkxMUYxQTU1QzNCMDZDRjFE
MzhCMC9Iby1QZ2cxOUFmaTFrVmRpc2ZYR09QMXA1eEEubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBADjTcuudfY4a0sfEIGoAQfZFL/e5B7vx
7Izi3VB32l8aVXaNZTqRehSZye1lnw0B0/WzssD++NIVi5K+l70ngaOtK+wZgG//
fs6gC8gGThSJ3f5uuvPOcVkfdv18d07Wx2H7bQ6/Clfol3DU6Gf7Unyc7SBxuwgd
RjjYClI3KuQlRAzKyXkLyUIlcsYxfH8u7KythqQjI7vWSDxGstFH7Jv/NRu+dtYH
xWCvVxwUrO/tddWKQTEiHiV4PPyKGfP+UtkKxgYEZs09xEkVsiOGa53c8sCaz6n/
TeSj5Hh0rYfMv1cGgmpeTIkCd7dNcVs3Msf7cmxRLpf733KH77v8meE=
-----END CERTIFICATE-----