Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
File:                     NoqlwYM32LEA43kHcgA1BOIR25U.mft (raw, json)
Hash identifier:          hro1Tes8Ctdta4fJlrsvVdBtay07Zwj3mbmUmdCc8I4=
Subject key identifier:   1B:15:4D:34:39:30:56:9B:BE:72:74:54:0F:66:43:5C:0F:C8:8D:60
Authority key identifier: 36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95
Certificate issuer:       /CN=F3664815AF/serialNumber=368AA5C18337D8B100E3790772003504E211DB95
Certificate serial:       0101
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
Manifest number:          0100
Signing time:             Sat 26 Sep 2026 05:22:57 +0000
Manifest this update:     Sat 26 Sep 2026 05:22:57 +0000
Manifest next update:     Mon 28 Sep 2026 05:22:57 +0000
Files and hashes:         1: NoqlwYM32LEA43kHcgA1BOIR25U.crl (hash: PDXJN1tTAziFI3oDvk3elevINqmy+RJuj+C9FIMLz6U=)
                          2: 728FCC2EF1D811F0A90A06B4DAE4EC9C.roa (hash: 6RL/4V6ZWEbg7BN3QUTvLxt/VnmJ1eoKO54see9w44I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664815AF, serialNumber=368AA5C18337D8B100E3790772003504E211DB95
        Validity
            Not Before: Sep 26 05:22:57 2026 GMT
            Not After : Sep 28 05:22:57 2026 GMT
        Subject: CN=6ab756b1-c33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:18:02:0f:67:ce:69:df:c8:52:1b:53:46:1a:
                    00:a3:12:64:a5:8a:f3:dd:96:99:ef:04:ec:60:e2:
                    e0:24:26:00:31:1e:50:a0:ba:c1:eb:4e:d7:58:7d:
                    74:c7:1c:9a:0a:24:15:c6:3c:e5:fb:87:2c:af:93:
                    8a:13:1c:87:a4:0e:9a:20:76:b3:4f:20:85:2f:c9:
                    19:30:2c:ef:d8:1c:cb:9e:42:40:2a:78:9a:50:57:
                    a6:8c:66:68:b0:bb:be:73:58:e1:8f:15:68:46:d2:
                    f8:ab:0b:4e:55:b0:9b:a2:98:21:1e:46:17:a5:52:
                    dd:18:cd:13:50:f7:e8:66:1a:3e:5c:01:03:ed:3b:
                    bf:d2:17:d0:2d:3b:b1:f4:b3:71:1f:8c:46:2b:c8:
                    90:ef:bb:32:f3:59:a3:06:3b:17:b4:ca:1d:fb:56:
                    97:b0:00:24:52:b9:07:44:75:f5:49:81:4f:07:08:
                    4b:58:fc:39:45:84:c7:ab:9d:4d:da:40:a7:43:71:
                    fa:2d:da:5a:3c:b4:60:77:bb:f0:bb:f3:a1:59:1e:
                    49:96:63:7b:6e:0a:3a:5a:0e:82:45:6f:fc:5c:60:
                    85:57:6c:34:42:c6:bd:be:94:8d:01:54:54:fe:00:
                    4d:d5:17:ee:f9:93:3e:de:19:30:54:91:0c:be:65:
                    29:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:15:4D:34:39:30:56:9B:BE:72:74:54:0F:66:43:5C:0F:C8:8D:60
            X509v3 Authority Key Identifier:
                keyid:36:8A:A5:C1:83:37:D8:B1:00:E3:79:07:72:00:35:04:E2:11:DB:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NoqlwYM32LEA43kHcgA1BOIR25U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664815/F675B6D0F1D711F0B0265CB1DAE4EC9C/NoqlwYM32LEA43kHcgA1BOIR25U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:df:eb:27:94:ee:9f:87:a2:92:26:f2:c4:58:ef:d0:67:13:
         d8:87:99:8d:58:0c:d4:69:0d:3d:87:1e:e4:c7:0b:1b:3f:28:
         25:e9:1a:f9:a6:0c:99:99:86:65:f0:f1:60:20:68:c8:47:d9:
         12:9a:f6:ad:30:40:a2:91:73:fa:21:9e:1f:8b:f6:ca:b9:e0:
         b9:2e:6f:24:91:de:82:f5:0c:fd:e5:ea:bb:2b:0f:db:c0:a0:
         dc:c1:28:24:c6:f2:08:c5:c6:48:09:b4:f1:0b:be:3f:9f:cd:
         1a:b2:5c:66:33:2a:8f:b7:37:48:09:e4:c8:b9:3e:82:37:c8:
         fe:45:79:1a:e1:f0:99:a3:33:de:ef:c4:d3:9f:b0:85:c1:9a:
         55:59:5f:ea:8a:0e:1b:6b:b8:60:fb:ec:e2:e3:03:c7:ec:0e:
         a7:0f:73:1b:5e:f0:43:1a:f5:79:1b:b8:9c:d8:a5:ad:4e:71:
         f4:5c:b1:ad:5a:53:fa:93:73:75:eb:8c:7e:f4:21:8d:b2:b8:
         c6:cd:c5:6e:4f:db:2f:74:9b:c6:fb:91:a6:dc:61:00:64:1c:
         2c:a7:da:c2:24:b9:b1:f5:3c:f9:81:18:9b:bd:3a:95:07:88:
         a9:6b:fa:12:aa:00:9c:b1:e0:74:59:8c:de:5c:c8:96:0c:6e:
         bc:22:5e:ca
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjQ4MTVBRjExMC8GA1UEBRMoMzY4QUE1QzE4MzM3RDhCMTAwRTM3OTA3NzIwMDM1
MDRFMjExREI5NTAeFw0yNjA5MjYwNTIyNTdaFw0yNjA5MjgwNTIyNTdaMBgxFjAU
BgNVBAMTDTZhYjc1NmIxLWMzM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCgGAIPZ85p38hSG1NGGgCjEmSlivPdlpnvBOxg4uAkJgAxHlCgusHrTtdY
fXTHHJoKJBXGPOX7hyyvk4oTHIekDpogdrNPIIUvyRkwLO/YHMueQkAqeJpQV6aM
Zmiwu75zWOGPFWhG0virC05VsJuimCEeRhelUt0YzRNQ9+hmGj5cAQPtO7/SF9At
O7H0s3EfjEYryJDvuzLzWaMGOxe0yh37VpewACRSuQdEdfVJgU8HCEtY/DlFhMer
nU3aQKdDcfot2lo8tGB3u/C786FZHkmWY3tuCjpaDoJFb/xcYIVXbDRCxr2+lI0B
VFT+AE3VF+75kz7eGTBUkQy+ZSnPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUGxVN
NDkwVpu+cnRUD2ZDXA/IjWAwHwYDVR0jBBgwFoAUNoqlwYM32LEA43kHcgA1BOIR
25UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY0ODE1L0Y2NzVCNkQwRjFENzExRjBCMDI2NUNCMURBRTRFQzlDL05vcWx3
WU0zMkxFQTQza0hjZ0ExQk9JUjI1VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05vcWx3WU0zMkxFQTQza0hjZ0ExQk9JUjI1VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjQ4MTUvRjY3NUI2RDBGMUQ3MTFGMEIwMjY1Q0IxREFF
NEVDOUMvTm9xbHdZTTMyTEVBNDNrSGNnQTFCT0lSMjVVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBU3+snlO6fh6KSJvLEWO/QZxPYh5mN
WAzUaQ09hx7kxwsbPygl6Rr5pgyZmYZl8PFgIGjIR9kSmvatMECikXP6IZ4fi/bK
ueC5Lm8kkd6C9Qz95eq7Kw/bwKDcwSgkxvIIxcZICbTxC74/n80aslxmMyqPtzdI
CeTIuT6CN8j+RXka4fCZozPe78TTn7CFwZpVWV/qig4ba7hg++zi4wPH7A6nD3Mb
XvBDGvV5G7ic2KWtTnH0XLGtWlP6k3N164x+9CGNsrjGzcVuT9svdJvG+5Gm3GEA
ZBwsp9rCJLmx9Tz5gRibvTqVB4ipa/oSqgCcseB0WYzeXMiWDG68Il7K
-----END CERTIFICATE-----