Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
File:                     NaE6RzFmxUdFBUsur-85WeOenW8.mft (raw, json)
Hash identifier:          yT78sFAd2xy02YndYCGXNoJqjcm0pEWpOHz+74wJu88=
Subject key identifier:   C7:A4:D5:9A:F6:F3:77:AC:4C:93:4B:D8:A9:4C:11:75:18:4C:9B:EE
Authority key identifier: 35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F
Certificate issuer:       /CN=F3666101AF/serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
Certificate serial:       06AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
Manifest number:          06AB
Signing time:             Thu 24 Sep 2026 02:39:23 +0000
Manifest this update:     Thu 24 Sep 2026 02:39:22 +0000
Manifest next update:     Sat 26 Sep 2026 02:39:22 +0000
Files and hashes:         1: NaE6RzFmxUdFBUsur-85WeOenW8.crl (hash: EvDLAAIBhYGZ9kEsx/5GFvQSK84HhlLjmHzH8oPUVyw=)
                          2: 99A1984E57F311F086ED54DEDAE4EC9C.roa (hash: ZM8T8/0Cbu1okxArEtkbxlaS5j1+sO4e39kgIitch78=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 00:07:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1710 (0x6ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3666101AF, serialNumber=35A13A473166C54745054B2EAFEF3959E39E9D6F
        Validity
            Not Before: Sep 24 02:39:22 2026 GMT
            Not After : Sep 26 02:39:22 2026 GMT
        Subject: CN=6ab48d5b-be44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:2c:1a:f4:8f:4b:a1:ca:60:f4:01:bf:25:8f:
                    eb:0e:41:46:5f:41:44:bd:3e:00:0d:0a:8b:1b:52:
                    96:a2:0f:1d:df:08:aa:0c:8f:51:7a:4e:34:dd:6a:
                    c0:8e:63:f1:13:fe:80:66:31:f8:0f:df:41:c2:65:
                    35:8e:1c:b5:09:6b:15:53:c6:82:98:3c:eb:b8:c2:
                    7c:c2:ca:4a:d3:f9:2f:4a:f6:86:32:a6:7b:9e:e5:
                    61:4a:17:58:53:12:d6:14:9b:86:cf:16:61:e2:40:
                    eb:ef:2a:29:5a:f8:b0:ea:8a:4e:d7:af:4c:3f:1b:
                    8c:52:41:6c:36:0c:ac:8a:3b:c4:cb:f5:68:ac:22:
                    b1:2a:e5:bb:b9:d3:f0:38:04:eb:6c:4b:d4:97:ac:
                    c3:dc:f4:c0:30:1d:e8:e7:94:c3:d2:bf:50:0b:0b:
                    4a:00:6a:d4:55:00:07:f4:50:93:1e:e1:c5:a4:23:
                    5b:38:3d:52:1a:ff:1c:20:ae:22:a4:a6:2d:9c:9f:
                    ca:99:f2:88:ec:c1:a2:0c:68:7e:b6:1c:c1:42:91:
                    55:23:0c:c8:93:94:c6:c1:7e:7f:56:37:83:8c:8a:
                    02:25:d1:67:24:df:e4:4c:17:71:60:ce:97:85:e8:
                    48:af:94:2f:d9:35:8b:18:a1:45:89:fc:fe:2c:e5:
                    19:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:A4:D5:9A:F6:F3:77:AC:4C:93:4B:D8:A9:4C:11:75:18:4C:9B:EE
            X509v3 Authority Key Identifier:
                keyid:35:A1:3A:47:31:66:C5:47:45:05:4B:2E:AF:EF:39:59:E3:9E:9D:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NaE6RzFmxUdFBUsur-85WeOenW8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3666101/4AD5EC589BA211ECB39203765A40D577/NaE6RzFmxUdFBUsur-85WeOenW8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:24:5b:4b:37:1d:f3:01:da:7e:77:82:10:e7:65:b3:e4:f6:
         17:98:32:9c:48:98:da:5e:f2:50:d8:2a:99:d6:d7:5c:30:50:
         0a:a2:96:01:45:57:94:7b:b7:4d:48:b7:73:9b:64:52:c5:59:
         e9:e8:8d:e7:7f:4a:9c:63:a6:5a:62:9c:8e:5e:20:36:55:d1:
         36:d5:24:f3:6f:1e:70:f9:f8:f7:9d:bf:8a:ab:8f:7a:2f:3a:
         5f:a0:38:ed:21:fd:0d:ed:18:98:52:a8:fe:e3:b9:82:10:19:
         5c:b9:fa:c1:33:85:d5:96:11:04:ab:77:15:9b:dc:8b:f8:51:
         e9:60:3d:fd:8d:53:81:7c:56:fa:5e:53:9b:9b:80:49:c1:60:
         f4:24:af:f7:0e:df:f9:14:d4:96:d0:bb:93:94:bb:60:8e:aa:
         31:f0:ca:b4:e1:4c:44:c6:bb:a8:52:c9:56:cb:3f:42:c8:2c:
         7e:ad:b7:16:4d:b7:a3:fb:72:32:ce:a8:96:1e:4d:47:5d:49:
         81:8e:8f:a5:e1:02:d6:19:4f:22:ba:6b:f7:b7:ee:e2:e2:21:
         bc:53:46:69:7a:9e:06:0d:29:1a:37:18:0e:73:01:93:86:6a:
         de:1a:63:88:5f:94:bc:7d:a1:bf:53:c0:c4:cd:5f:07:29:b3:
         50:db:42:f5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjYxMDFBRjExMC8GA1UEBRMoMzVBMTNBNDczMTY2QzU0NzQ1MDU0QjJFQUZFRjM5
NTlFMzlFOUQ2RjAeFw0yNjA5MjQwMjM5MjJaFw0yNjA5MjYwMjM5MjJaMBgxFjAU
BgNVBAMTDTZhYjQ4ZDViLWJlNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDtLBr0j0uhymD0Ab8lj+sOQUZfQUS9PgANCosbUpaiDx3fCKoMj1F6TjTd
asCOY/ET/oBmMfgP30HCZTWOHLUJaxVTxoKYPOu4wnzCykrT+S9K9oYypnue5WFK
F1hTEtYUm4bPFmHiQOvvKila+LDqik7Xr0w/G4xSQWw2DKyKO8TL9WisIrEq5bu5
0/A4BOtsS9SXrMPc9MAwHejnlMPSv1ALC0oAatRVAAf0UJMe4cWkI1s4PVIa/xwg
riKkpi2cn8qZ8ojswaIMaH62HMFCkVUjDMiTlMbBfn9WN4OMigIl0Wck3+RMF3Fg
zpeF6EivlC/ZNYsYoUWJ/P4s5RnvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUx6TV
mvbzd6xMk0vYqUwRdRhMm+4wHwYDVR0jBBgwFoAUNaE6RzFmxUdFBUsur+85WeOe
nW8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY2MTAxLzRBRDVFQzU4OUJBMjExRUNCMzkyMDM3NjVBNDBENTc3L05hRTZS
ekZteFVkRkJVc3VyLTg1V2VPZW5XOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05hRTZSekZteFVkRkJVc3VyLTg1V2VPZW5XOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjYxMDEvNEFENUVDNTg5QkEyMTFFQ0IzOTIwMzc2NUE0
MEQ1NzcvTmFFNlJ6Rm14VWRGQlVzdXItODVXZU9lblc4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAKJFtLNx3zAdp+d4IQ52Wz5PYXmDKc
SJjaXvJQ2CqZ1tdcMFAKopYBRVeUe7dNSLdzm2RSxVnp6I3nf0qcY6ZaYpyOXiA2
VdE21STzbx5w+fj3nb+Kq496LzpfoDjtIf0N7RiYUqj+47mCEBlcufrBM4XVlhEE
q3cVm9yL+FHpYD39jVOBfFb6XlObm4BJwWD0JK/3Dt/5FNSW0LuTlLtgjqox8Mq0
4UxExruoUslWyz9CyCx+rbcWTbej+3IyzqiWHk1HXUmBjo+l4QLWGU8iumv3t+7i
4iG8U0Zpep4GDSkaNxgOcwGThmreGmOIX5S8faG/U8DEzV8HKbNQ20L1
-----END CERTIFICATE-----