Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
File:                     Py4lhz-TCj4vdaXCxhVisCIN5ls.mft (raw, json)
Hash identifier:          NDReWi2DZd7rQ37Vz5vVVgWWdwwaed6Aph6jZbTQkkw=
Subject key identifier:   62:2A:A0:CD:0E:62:83:94:7B:C8:62:78:0A:F4:06:12:0C:E4:A9:7C
Authority key identifier: 3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B
Certificate issuer:       /CN=F365F31BAF/serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
Certificate serial:       0596
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
Manifest number:          0594
Signing time:             Thu 05 Nov 2026 03:10:57 +0000
Manifest this update:     Thu 05 Nov 2026 03:10:57 +0000
Manifest next update:     Sat 07 Nov 2026 03:10:56 +0000
Files and hashes:         1: Py4lhz-TCj4vdaXCxhVisCIN5ls.crl (hash: 22tALsdTqcVTolc8CeXF8TxZlElsOEZIjaa0ge0JLlI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1430 (0x596)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365F31BAF, serialNumber=3F2E25873F930A3E2F75A5C2C61562B0220DE65B
        Validity
            Not Before: Nov  5 03:10:57 2026 GMT
            Not After : Nov  7 03:10:56 2026 GMT
        Subject: CN=6aebf3c1-60fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:2a:a2:f2:f9:7d:60:fa:38:b0:c4:65:6b:
                    61:ba:fd:86:a5:67:f8:af:04:28:95:f5:54:79:4c:
                    65:97:26:57:9e:f6:3a:6c:d7:c0:8e:a9:c9:29:21:
                    e6:75:5e:6d:f5:3a:73:e2:54:40:9b:5a:05:28:8d:
                    9e:4e:b6:3f:52:ab:e1:98:bc:9c:a2:86:4a:28:99:
                    a3:7b:9b:e2:9c:97:b3:77:fb:9e:32:05:84:bf:a6:
                    ca:9c:75:1e:5c:45:aa:a8:01:2b:e0:86:bd:08:bb:
                    7b:a9:fd:1f:f9:92:74:67:59:de:bb:42:d1:a8:fb:
                    3a:12:ec:55:0f:ce:8a:46:53:64:95:19:b2:53:c0:
                    7c:52:9e:26:f9:05:be:ae:bf:33:4a:47:fa:10:d1:
                    26:59:0c:10:2e:0a:d2:45:43:80:59:bb:8a:cb:15:
                    4a:c4:0d:2d:75:37:7c:40:ab:37:dc:b5:ef:ec:0a:
                    7e:47:c3:45:f8:0e:2a:e3:2e:5b:9e:35:a7:47:5d:
                    19:26:58:ad:1c:e9:be:da:64:52:8e:b9:3b:eb:da:
                    92:78:1d:08:11:8c:cc:89:2a:48:58:b4:70:5c:92:
                    27:8b:97:7b:38:be:87:1c:b3:2c:64:01:99:a6:ca:
                    c0:0e:d4:4d:5b:52:98:1b:48:9d:8a:3f:99:0e:95:
                    b8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:2A:A0:CD:0E:62:83:94:7B:C8:62:78:0A:F4:06:12:0C:E4:A9:7C
            X509v3 Authority Key Identifier:
                keyid:3F:2E:25:87:3F:93:0A:3E:2F:75:A5:C2:C6:15:62:B0:22:0D:E6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Py4lhz-TCj4vdaXCxhVisCIN5ls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365F31B/D52C184A973311EDB423448DF1222468/Py4lhz-TCj4vdaXCxhVisCIN5ls.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:db:e9:9a:08:8d:77:68:ac:55:85:88:3e:a9:d5:1b:08:55:
         55:93:c3:63:82:6c:08:cc:90:a5:d2:8b:22:16:4f:dc:06:ad:
         ad:b9:b8:46:76:d9:9b:95:1f:eb:ad:6d:11:67:49:ef:fd:f3:
         83:56:eb:d1:41:05:10:de:1d:a3:ae:f7:1c:59:1a:a8:d6:98:
         e9:4e:fb:d7:e0:08:6b:ee:29:9b:ee:01:ce:a0:84:4f:7c:b0:
         0f:48:d8:ae:cc:c4:6c:3d:9b:50:f0:68:25:05:df:16:05:6f:
         90:83:28:9b:13:c2:29:ba:4d:c0:73:4c:37:f5:c7:15:33:71:
         3a:db:5c:18:1f:48:33:b2:f8:22:7c:8a:f0:c4:40:68:c4:75:
         46:fc:3e:6f:89:7b:94:9b:bf:97:48:46:07:b0:4f:a0:bf:5d:
         9d:1c:b3:12:88:30:2d:91:96:df:71:a4:52:9e:d7:75:4b:c5:
         7c:75:7e:54:3c:90:b2:ee:44:fe:48:de:61:e7:91:8f:b7:4e:
         80:c6:e9:5f:d1:2d:d1:96:26:99:fe:ff:56:e4:80:c3:df:a8:
         e3:43:58:80:ba:b9:f4:53:6b:f7:f4:0a:78:ff:28:80:00:5a:
         d0:4c:19:48:3b:fe:95:c9:a1:82:6c:53:88:df:5b:21:88:ea:
         c2:1c:6f:0e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBZYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NUYzMUJBRjExMC8GA1UEBRMoM0YyRTI1ODczRjkzMEEzRTJGNzVBNUMyQzYxNTYy
QjAyMjBERTY1QjAeFw0yNjExMDUwMzEwNTdaFw0yNjExMDcwMzEwNTZaMBgxFjAU
BgNVBAMTDTZhZWJmM2MxLTYwZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDCwyqi8vl9YPo4sMRla2G6/YalZ/ivBCiV9VR5TGWXJlee9jps18COqckp
IeZ1Xm31OnPiVECbWgUojZ5Otj9Sq+GYvJyihkoomaN7m+Kcl7N3+54yBYS/psqc
dR5cRaqoASvghr0Iu3up/R/5knRnWd67QtGo+zoS7FUPzopGU2SVGbJTwHxSnib5
Bb6uvzNKR/oQ0SZZDBAuCtJFQ4BZu4rLFUrEDS11N3xAqzfcte/sCn5Hw0X4Dirj
LlueNadHXRkmWK0c6b7aZFKOuTvr2pJ4HQgRjMyJKkhYtHBckieLl3s4voccsyxk
AZmmysAO1E1bUpgbSJ2KP5kOlbjhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUYiqg
zQ5ig5R7yGJ4CvQGEgzkqXwwHwYDVR0jBBgwFoAUPy4lhz+TCj4vdaXCxhVisCIN
5lswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjVGMzFCL0Q1MkMxODRBOTczMzExRURCNDIzNDQ4REYxMjIyNDY4L1B5NGxo
ei1UQ2o0dmRhWEN4aFZpc0NJTjVscy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1B5NGxoei1UQ2o0dmRhWEN4aFZpc0NJTjVscy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NUYzMUIvRDUyQzE4NEE5NzMzMTFFREI0MjM0NDhERjEy
MjI0NjgvUHk0bGh6LVRDajR2ZGFYQ3hoVmlzQ0lONWxzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCm2+maCI13aKxVhYg+qdUbCFVVk8Nj
gmwIzJCl0osiFk/cBq2tubhGdtmblR/rrW0RZ0nv/fODVuvRQQUQ3h2jrvccWRqo
1pjpTvvX4Ahr7imb7gHOoIRPfLAPSNiuzMRsPZtQ8GglBd8WBW+QgyibE8Ipuk3A
c0w39ccVM3E621wYH0gzsvgifIrwxEBoxHVG/D5viXuUm7+XSEYHsE+gv12dHLMS
iDAtkZbfcaRSntd1S8V8dX5UPJCy7kT+SN5h55GPt06Axulf0S3RliaZ/v9W5IDD
36jjQ1iAurn0U2v39Ap4/yiAAFrQTBlIO/6VyaGCbFOI31shiOrCHG8O
-----END CERTIFICATE-----