Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
File:                     KxftsiWoqa1OodSC-tfzt4JwvaQ.mft (raw, json)
Hash identifier:          LSoI+b/MAukotubqvKOWHIrwf7jo3aHaYweTn9C0xv4=
Subject key identifier:   D5:C8:D2:77:23:C4:1E:6A:D8:59:B8:18:86:C4:D6:84:0E:88:5D:C2
Authority key identifier: 2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4
Certificate issuer:       /CN=F36746EBAF/serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
Certificate serial:       06FB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
Manifest number:          06F9
Signing time:             Mon 21 Sep 2026 02:32:52 +0000
Manifest this update:     Mon 21 Sep 2026 02:32:51 +0000
Manifest next update:     Wed 23 Sep 2026 02:32:51 +0000
Files and hashes:         1: KxftsiWoqa1OodSC-tfzt4JwvaQ.crl (hash: bv3LgvMWNqe2kaa4mj5isfV910lAu+BaARNe/3KLvfY=)
                          2: 50EE860C89D411F1BC8148E0CE1D38B0.roa (hash: BNEjT+IAIoFe9htz0QXTgR9t7EbvGjjHJq8r7GRqrIg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 02:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1787 (0x6fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36746EBAF, serialNumber=2B17EDB225A8A9AD4EA1D482FAD7F3B78270BDA4
        Validity
            Not Before: Sep 21 02:32:51 2026 GMT
            Not After : Sep 23 02:32:51 2026 GMT
        Subject: CN=6ab09754-65aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:02:69:f4:3e:56:7d:6c:f0:39:d1:3f:42:02:
                    47:a8:98:e9:34:b9:28:21:3d:70:da:ff:57:39:c2:
                    cb:89:1a:cc:98:70:a1:23:77:aa:5e:f2:d0:68:eb:
                    89:0a:18:8f:4c:2f:ed:5b:54:ed:27:7d:ef:ab:ca:
                    14:e8:5a:97:43:8d:2c:68:81:57:e8:9f:bb:cc:f2:
                    17:a8:b8:29:e9:bb:61:ee:6c:d2:cf:ae:07:30:f9:
                    1e:67:1a:58:56:ec:d1:fd:ee:9e:67:5c:06:b8:c1:
                    92:16:99:75:3f:0b:77:5c:e0:c3:d2:64:7b:35:1e:
                    37:3c:88:84:89:af:67:40:2d:a5:95:c6:44:5e:74:
                    63:7a:5d:1f:28:4f:ea:d9:9e:f9:cf:91:a8:d5:5d:
                    11:bd:38:30:ec:d5:2e:2b:26:f7:06:06:7a:de:e2:
                    be:3d:5d:40:87:03:87:f2:99:8a:3c:e9:a2:41:70:
                    2c:8a:f6:9b:c0:cb:86:b2:67:14:4e:aa:64:66:c4:
                    55:73:66:35:03:57:2f:b6:34:b9:0b:f9:2e:fd:9a:
                    7b:d3:e3:7f:4f:d0:7d:bf:8d:03:40:09:cf:65:67:
                    e6:4a:19:ac:62:b6:9c:02:16:c5:09:9b:5a:82:10:
                    3a:0a:d3:3f:59:b1:35:e0:70:11:24:8e:1b:ca:05:
                    37:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:C8:D2:77:23:C4:1E:6A:D8:59:B8:18:86:C4:D6:84:0E:88:5D:C2
            X509v3 Authority Key Identifier:
                keyid:2B:17:ED:B2:25:A8:A9:AD:4E:A1:D4:82:FA:D7:F3:B7:82:70:BD:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KxftsiWoqa1OodSC-tfzt4JwvaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36746EB/0C564C5E5E4711ECB9A1AED95A40D577/KxftsiWoqa1OodSC-tfzt4JwvaQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:a6:ab:51:93:5c:2a:61:b1:c8:1f:f7:49:82:2c:92:8f:8c:
         62:90:30:8b:a5:0e:21:65:61:6c:e6:9c:c8:a2:4a:54:8f:ca:
         aa:22:0b:f7:55:da:94:c3:d6:bb:e8:c9:c4:38:47:bc:c3:ec:
         f7:c3:73:17:38:20:74:5a:3d:f0:0d:1b:88:64:f7:42:09:a6:
         43:b8:5e:22:6c:1c:12:b2:7f:5c:2a:26:9d:04:9c:31:22:e5:
         51:64:8d:dd:98:86:5b:0d:77:ad:0c:3b:f1:bc:12:89:1e:af:
         ac:66:6f:0b:3c:1b:1e:67:6c:37:73:38:91:e2:92:94:3e:ab:
         d6:df:63:b0:b1:31:5c:5c:f7:21:d3:22:cf:c5:57:13:af:91:
         bc:82:d8:28:12:9f:58:9c:b5:07:5f:c4:65:a4:27:61:37:d9:
         18:d4:68:52:3f:10:1b:9e:a3:85:b3:a9:30:a4:a4:f5:ca:23:
         b3:7e:2d:60:42:92:b1:36:cd:b7:dd:cf:ed:f5:01:b1:e3:54:
         29:ef:91:b2:27:96:e0:ac:c9:dc:8e:61:4d:8e:3d:1d:60:cd:
         17:c4:57:5f:40:5f:74:cf:f3:2f:92:b5:7e:fa:28:39:34:3e:
         9b:a6:e0:7b:e3:52:f6:ae:b2:16:2a:7b:90:da:ca:42:7b:45:
         ba:e3:f4:f4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBvswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQ2RUJBRjExMC8GA1UEBRMoMkIxN0VEQjIyNUE4QTlBRDRFQTFENDgyRkFEN0Yz
Qjc4MjcwQkRBNDAeFw0yNjA5MjEwMjMyNTFaFw0yNjA5MjMwMjMyNTFaMBgxFjAU
BgNVBAMTDTZhYjA5NzU0LTY1YWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDOAmn0PlZ9bPA50T9CAkeomOk0uSghPXDa/1c5wsuJGsyYcKEjd6pe8tBo
64kKGI9ML+1bVO0nfe+ryhToWpdDjSxogVfon7vM8heouCnpu2HubNLPrgcw+R5n
GlhW7NH97p5nXAa4wZIWmXU/C3dc4MPSZHs1Hjc8iISJr2dALaWVxkRedGN6XR8o
T+rZnvnPkajVXRG9ODDs1S4rJvcGBnre4r49XUCHA4fymYo86aJBcCyK9pvAy4ay
ZxROqmRmxFVzZjUDVy+2NLkL+S79mnvT439P0H2/jQNACc9lZ+ZKGaxitpwCFsUJ
m1qCEDoK0z9ZsTXgcBEkjhvKBTfBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1cjS
dyPEHmrYWbgYhsTWhA6IXcIwHwYDVR0jBBgwFoAUKxftsiWoqa1OodSC+tfzt4Jw
vaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0NkVCLzBDNTY0QzVFNUU0NzExRUNCOUExQUVEOTVBNDBENTc3L0t4ZnRz
aVdvcWExT29kU0MtdGZ6dDRKd3ZhUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0t4ZnRzaVdvcWExT29kU0MtdGZ6dDRKd3ZhUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzQ2RUIvMEM1NjRDNUU1RTQ3MTFFQ0I5QTFBRUQ5NUE0
MEQ1NzcvS3hmdHNpV29xYTFPb2RTQy10Znp0NEp3dmFRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBcpqtRk1wqYbHIH/dJgiySj4xikDCL
pQ4hZWFs5pzIokpUj8qqIgv3VdqUw9a76MnEOEe8w+z3w3MXOCB0Wj3wDRuIZPdC
CaZDuF4ibBwSsn9cKiadBJwxIuVRZI3dmIZbDXetDDvxvBKJHq+sZm8LPBseZ2w3
cziR4pKUPqvW32OwsTFcXPch0yLPxVcTr5G8gtgoEp9YnLUHX8RlpCdhN9kY1GhS
PxAbnqOFs6kwpKT1yiOzfi1gQpKxNs233c/t9QGx41Qp75GyJ5bgrMncjmFNjj0d
YM0XxFdfQF90z/MvkrV++ig5ND6bpuB741L2rrIWKnuQ2spCe0W64/T0
-----END CERTIFICATE-----