Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
File:                     mo0OmoAqT1sF0LmwiVg0TYdylpw.mft (raw, json)
Hash identifier:          KBAuOyYrryTZCtHqDVkJvi11m6d1jc1TC0/NrkNxiag=
Subject key identifier:   CA:D8:A0:35:7C:09:31:27:03:BF:60:F5:A1:8F:5F:23:1F:28:B3:AA
Authority key identifier: 9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C
Certificate issuer:       /CN=F3664A2AAF/serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
Certificate serial:       04BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
Manifest number:          04B7
Signing time:             Sun 11 Oct 2026 03:35:59 +0000
Manifest this update:     Sun 11 Oct 2026 03:35:59 +0000
Manifest next update:     Tue 13 Oct 2026 03:35:59 +0000
Files and hashes:         1: mo0OmoAqT1sF0LmwiVg0TYdylpw.crl (hash: JIvWcwRZAqcPR6C6J1Cn7vpeYc4Pq54VLVGn+aC/REw=)
                          2: 74A188D4198F11F1A0453B9FDAE4EC9C.roa (hash: heRN3Hl/VoKOoahx6fv1krdzclqG2Ce9G2KiMF/ZKFs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3664A2AAF, serialNumber=9A8D0E9A802A4F5B05D0B9B08958344D8772969C
        Validity
            Not Before: Oct 11 03:35:59 2026 GMT
            Not After : Oct 13 03:35:59 2026 GMT
        Subject: CN=6acb041f-2192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:23:c6:e3:2d:4a:73:f3:0a:96:e6:b8:8b:9e:
                    70:ff:73:e0:60:89:86:40:8d:df:ab:eb:c0:06:3f:
                    89:7e:20:cf:9c:fc:b5:87:63:97:d3:c3:10:91:51:
                    f8:f9:c3:5a:18:b1:21:d0:82:9d:06:80:8b:64:99:
                    f8:83:54:52:da:45:4e:81:7f:8a:a2:d8:d4:0c:22:
                    44:3d:e9:7f:1b:e5:89:39:b7:65:f4:f1:a1:9e:4e:
                    7e:a1:d3:12:ed:9f:fb:e4:39:59:43:c9:c5:40:7b:
                    b8:73:99:29:c3:1a:8c:48:b2:f8:11:38:11:13:46:
                    9a:73:e3:e6:89:ae:ae:52:a5:89:d1:f5:af:70:80:
                    e9:fa:74:de:6e:5c:4d:58:48:72:81:e7:b9:0b:9d:
                    5b:43:b4:ff:05:dd:f4:30:42:f6:7a:52:37:c3:1e:
                    28:66:8e:18:4b:c0:d3:59:5a:e6:60:13:a6:fd:a4:
                    35:d6:b5:cd:c2:f2:d0:d9:9a:bb:6d:bf:c6:90:6b:
                    3d:62:64:74:04:a1:22:68:e0:0e:c1:d8:c8:26:3a:
                    5c:9e:63:60:78:cd:1f:83:c6:ba:00:c5:a8:59:e5:
                    19:f5:f1:f8:17:6a:fa:32:ad:86:6a:24:2d:46:af:
                    f5:57:26:ab:a8:80:c5:79:07:2e:67:54:0a:e1:62:
                    ce:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D8:A0:35:7C:09:31:27:03:BF:60:F5:A1:8F:5F:23:1F:28:B3:AA
            X509v3 Authority Key Identifier:
                keyid:9A:8D:0E:9A:80:2A:4F:5B:05:D0:B9:B0:89:58:34:4D:87:72:96:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mo0OmoAqT1sF0LmwiVg0TYdylpw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3664A2A/61139A4C2A5311EE9174E2464AD9E6FC/mo0OmoAqT1sF0LmwiVg0TYdylpw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9a:d5:41:01:c3:b0:87:26:ac:ca:e8:fb:c2:ce:95:55:9c:
         fc:68:e9:14:90:96:5e:9e:c3:db:da:af:38:b5:13:a4:ce:60:
         9c:4d:16:97:12:90:f5:bc:b3:88:5e:92:0d:c9:ab:5b:1a:19:
         ef:1b:36:aa:90:ce:42:08:6d:d6:77:84:e3:1e:95:85:a5:07:
         20:45:29:3a:73:ee:82:9b:ba:ac:85:27:4f:47:9e:bd:8a:f4:
         26:e2:06:a4:9d:32:d7:59:eb:06:21:59:11:5a:69:1e:1a:30:
         16:80:36:23:af:5e:6e:55:bf:3d:2f:23:72:c0:e8:b6:df:b6:
         f2:67:82:e3:3b:63:fe:0e:ad:8a:47:89:5d:a8:b0:c4:02:c4:
         37:dc:a7:cb:48:f4:f3:5c:04:39:9e:34:b6:78:69:7d:5c:32:
         ff:59:6e:f0:16:34:f0:b9:27:09:b9:9c:b1:30:c1:a0:a9:f7:
         a5:ef:74:bc:24:a3:3d:0e:3f:83:fd:e1:ee:e3:bd:d5:9a:8f:
         4f:85:bd:b8:07:a9:8a:be:c7:7f:10:f0:51:fe:8e:3b:d9:29:
         33:1b:c4:72:c0:a7:83:e1:79:79:cd:65:d2:e3:ee:6d:b9:34:
         17:cd:56:a2:7d:e2:4a:04:58:07:42:0c:40:5c:a3:5d:4d:58:
         c6:b6:63:ae
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBLowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjRBMkFBRjExMC8GA1UEBRMoOUE4RDBFOUE4MDJBNEY1QjA1RDBCOUIwODk1ODM0
NEQ4NzcyOTY5QzAeFw0yNjEwMTEwMzM1NTlaFw0yNjEwMTMwMzM1NTlaMBgxFjAU
BgNVBAMTDTZhY2IwNDFmLTIxOTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgI8bjLUpz8wqW5riLnnD/c+BgiYZAjd+r68AGP4l+IM+c/LWHY5fTwxCR
Ufj5w1oYsSHQgp0GgItkmfiDVFLaRU6Bf4qi2NQMIkQ96X8b5Yk5t2X08aGeTn6h
0xLtn/vkOVlDycVAe7hzmSnDGoxIsvgROBETRppz4+aJrq5SpYnR9a9wgOn6dN5u
XE1YSHKB57kLnVtDtP8F3fQwQvZ6UjfDHihmjhhLwNNZWuZgE6b9pDXWtc3C8tDZ
mrttv8aQaz1iZHQEoSJo4A7B2MgmOlyeY2B4zR+DxroAxahZ5Rn18fgXavoyrYZq
JC1Gr/VXJquogMV5By5nVArhYs5rAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUytig
NXwJMScDv2D1oY9fIx8os6owHwYDVR0jBBgwFoAUmo0OmoAqT1sF0LmwiVg0TYdy
lpwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY0QTJBLzYxMTM5QTRDMkE1MzExRUU5MTc0RTI0NjRBRDlFNkZDL21vME9t
b0FxVDFzRjBMbXdpVmcwVFlkeWxwdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21vME9tb0FxVDFzRjBMbXdpVmcwVFlkeWxwdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjRBMkEvNjExMzlBNEMyQTUzMTFFRTkxNzRFMjQ2NEFE
OUU2RkMvbW8wT21vQXFUMXNGMExtd2lWZzBUWWR5bHB3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1mtVBAcOwhyasyuj7ws6VVZz8aOkU
kJZensPb2q84tROkzmCcTRaXEpD1vLOIXpINyatbGhnvGzaqkM5CCG3Wd4TjHpWF
pQcgRSk6c+6Cm7qshSdPR569ivQm4gaknTLXWesGIVkRWmkeGjAWgDYjr15uVb89
LyNywOi237byZ4LjO2P+Dq2KR4ldqLDEAsQ33KfLSPTzXAQ5njS2eGl9XDL/WW7w
FjTwuScJuZyxMMGgqfel73S8JKM9Dj+D/eHu473Vmo9Phb24B6mKvsd/EPBR/o47
2SkzG8RywKeD4Xl5zWXS4+5tuTQXzVaifeJKBFgHQgxAXKNdTVjGtmOu
-----END CERTIFICATE-----