Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
File:                     4sEXgjtyd70rre-ytXfGz5x2TY4.mft (raw, json)
Hash identifier:          ybOcxIZaIt345hwF3jS+5d3LeNLvqj1HqbhLJQj7dww=
Subject key identifier:   4A:10:E8:62:97:21:8A:F8:3B:64:88:42:92:AD:44:02:A4:FB:FC:4A
Authority key identifier: E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E
Certificate issuer:       /CN=F36592B4AF/serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
Certificate serial:       04CA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
Manifest number:          04CA
Signing time:             Sat 26 Sep 2026 03:31:35 +0000
Manifest this update:     Sat 26 Sep 2026 03:31:34 +0000
Manifest next update:     Mon 28 Sep 2026 03:31:34 +0000
Files and hashes:         1: 4sEXgjtyd70rre-ytXfGz5x2TY4.crl (hash: G1eAiv0nUjLGPcxVdBqF33HKte+wEL/hatAzkFAa9AQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
                          rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 03:31:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36592B4AF, serialNumber=E2C117823B7277BD2BADEFB2B577C6CF9C764D8E
        Validity
            Not Before: Sep 26 03:31:34 2026 GMT
            Not After : Sep 28 03:31:34 2026 GMT
        Subject: CN=6ab73c97-6be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:95:7f:3d:b2:78:73:f6:d3:d9:65:15:17:
                    24:45:60:d9:db:6b:0b:8e:7f:c1:50:ae:6f:5a:44:
                    f3:7e:c4:0d:7a:d3:c9:92:86:37:79:31:c5:f9:56:
                    46:cc:96:4c:66:1c:d2:f5:0f:d7:88:98:10:b1:a1:
                    e0:ab:0f:e3:ea:4f:e1:31:10:de:00:c0:a5:00:5a:
                    a6:ef:7c:97:d5:b2:90:10:69:63:21:77:db:26:26:
                    9a:d4:1b:ef:b6:49:6f:42:6b:2d:d2:75:34:9f:b2:
                    d5:22:fb:29:de:95:32:47:5c:03:a7:1e:d5:0f:cf:
                    56:eb:30:e1:20:ba:74:4c:6f:b3:40:9f:68:9f:d6:
                    8e:1e:99:e3:16:ac:ba:ef:2a:6a:fd:8f:f3:51:65:
                    f8:24:86:00:7b:b8:c7:0d:74:5b:5b:cf:b8:85:c7:
                    39:8e:11:30:ed:87:8d:55:4d:10:6f:4b:19:c3:9b:
                    21:84:b2:2b:b1:45:05:ae:34:36:b7:8b:d6:dc:29:
                    6e:e9:f1:54:00:b7:0d:0d:d0:32:19:14:3c:33:62:
                    a6:3f:fb:fb:2c:4c:3e:a7:44:7a:3d:b3:41:e4:06:
                    d0:95:06:f2:97:e5:9f:98:53:b3:28:41:db:aa:e5:
                    f9:1f:ce:24:6c:cd:b4:9e:ba:55:da:20:16:c1:ad:
                    75:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:10:E8:62:97:21:8A:F8:3B:64:88:42:92:AD:44:02:A4:FB:FC:4A
            X509v3 Authority Key Identifier:
                keyid:E2:C1:17:82:3B:72:77:BD:2B:AD:EF:B2:B5:77:C6:CF:9C:76:4D:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/4sEXgjtyd70rre-ytXfGz5x2TY4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36592B4/BE3F89E20C2B11EEA3A5016C4AD9E6FC/4sEXgjtyd70rre-ytXfGz5x2TY4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:21:bf:cc:0c:e0:95:2a:aa:66:f3:d0:02:4c:42:f9:c5:a5:
         5e:bc:84:17:5f:f0:23:16:38:80:aa:17:a8:0d:8a:2d:65:d5:
         2f:29:5c:99:05:c5:44:84:61:09:b9:4d:dc:5a:a2:02:d1:71:
         59:37:01:c4:ac:5c:31:24:a8:6b:79:5d:3c:49:c1:7e:b0:d7:
         99:f0:40:73:98:cc:28:73:a0:28:99:86:76:99:bd:bf:1a:5d:
         dd:98:ee:c1:62:3b:7c:de:ef:4a:b1:6b:ba:40:ec:64:e5:32:
         2c:21:57:22:7c:d4:04:56:84:55:f3:dd:51:e6:8a:33:b2:02:
         19:62:e7:bb:a7:ce:54:b5:ce:ce:72:5d:67:2d:b2:ce:ed:14:
         78:58:12:01:aa:5e:3b:52:b2:33:94:0d:dd:b1:a8:ba:84:07:
         30:fa:cb:49:92:56:2f:f4:7d:63:d0:8f:40:05:0f:d4:de:36:
         ba:36:b3:e4:0d:44:58:9a:5c:65:de:81:79:2a:d5:ff:24:a7:
         54:cd:b1:10:cf:3f:7a:3d:71:d1:58:b2:95:f6:e3:2a:94:c4:
         2e:60:cb:48:5b:59:20:04:af:ef:f0:91:6e:44:04:49:a5:56:
         20:1e:10:83:63:71:6d:4e:3e:40:74:b0:e8:89:ef:81:97:11:
         81:d1:b2:48
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBMowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTkyQjRBRjExMC8GA1UEBRMoRTJDMTE3ODIzQjcyNzdCRDJCQURFRkIyQjU3N0M2
Q0Y5Qzc2NEQ4RTAeFw0yNjA5MjYwMzMxMzRaFw0yNjA5MjgwMzMxMzRaMBgxFjAU
BgNVBAMTDTZhYjczYzk3LTZiZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDMVJV/PbJ4c/bT2WUVFyRFYNnbawuOf8FQrm9aRPN+xA1608mShjd5McX5
VkbMlkxmHNL1D9eImBCxoeCrD+PqT+ExEN4AwKUAWqbvfJfVspAQaWMhd9smJprU
G++2SW9Cay3SdTSfstUi+ynelTJHXAOnHtUPz1brMOEgunRMb7NAn2if1o4emeMW
rLrvKmr9j/NRZfgkhgB7uMcNdFtbz7iFxzmOETDth41VTRBvSxnDmyGEsiuxRQWu
NDa3i9bcKW7p8VQAtw0N0DIZFDwzYqY/+/ssTD6nRHo9s0HkBtCVBvKX5Z+YU7Mo
Qduq5fkfziRszbSeulXaIBbBrXV/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUShDo
Ypchivg7ZIhCkq1EAqT7/EowHwYDVR0jBBgwFoAU4sEXgjtyd70rre+ytXfGz5x2
TY4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU5MkI0L0JFM0Y4OUUyMEMyQjExRUVBM0E1MDE2QzRBRDlFNkZDLzRzRVhn
anR5ZDcwcnJlLXl0WGZHejV4MlRZNC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzRzRVhnanR5ZDcwcnJlLXl0WGZHejV4MlRZNC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTkyQjQvQkUzRjg5RTIwQzJCMTFFRUEzQTUwMTZDNEFE
OUU2RkMvNHNFWGdqdHlkNzBycmUteXRYZkd6NXgyVFk0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQChIb/MDOCVKqpm89ACTEL5xaVevIQX
X/AjFjiAqheoDYotZdUvKVyZBcVEhGEJuU3cWqIC0XFZNwHErFwxJKhreV08ScF+
sNeZ8EBzmMwoc6AomYZ2mb2/Gl3dmO7BYjt83u9KsWu6QOxk5TIsIVcifNQEVoRV
891R5oozsgIZYue7p85Utc7Ocl1nLbLO7RR4WBIBql47UrIzlA3dsai6hAcw+stJ
klYv9H1j0I9ABQ/U3ja6NrPkDURYmlxl3oF5KtX/JKdUzbEQzz96PXHRWLKV9uMq
lMQuYMtIW1kgBK/v8JFuRARJpVYgHhCDY3FtTj5AdLDoie+BlxGB0bJI
-----END CERTIFICATE-----