Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
File:                     ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft (raw, json)
Hash identifier:          s1ULSAZYiHtvRWDn9R0t3FQA0lN/Tg/o+tqdxPp3pew=
Subject key identifier:   46:30:0C:9E:00:0F:50:13:5A:49:7D:CD:11:44:08:35:4A:4D:91:4F
Authority key identifier: 38:D2:17:BB:C9:98:9F:8B:1C:EC:1B:3A:43:60:1F:11:E3:D1:1E:4B
Certificate issuer:       /CN=F3674908AF/serialNumber=38D217BBC9989F8B1CEC1B3A43601F11E3D11E4B
Certificate serial:       01C6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
Manifest number:          01C5
Signing time:             Mon 21 Sep 2026 04:57:19 +0000
Manifest this update:     Mon 21 Sep 2026 04:57:19 +0000
Manifest next update:     Wed 23 Sep 2026 04:57:19 +0000
Files and hashes:         1: ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl (hash: 1iadGo3AugbqnkUxpVff0pMxFwAzVMCw0b/C6WXGpCU=)
                          2: 1F963ED8564511F0A6FF3AF2DAE4EC9C.roa (hash: X2krD4jdJ7pGQ3zXFaC89RNcw5IbwbOm7CUbTFo1if4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 04:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 454 (0x1c6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3674908AF, serialNumber=38D217BBC9989F8B1CEC1B3A43601F11E3D11E4B
        Validity
            Not Before: Sep 21 04:57:19 2026 GMT
            Not After : Sep 23 04:57:19 2026 GMT
        Subject: CN=6ab0b92f-7b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:a8:36:af:6c:e2:2c:70:25:5a:33:c9:ea:
                    60:3f:76:a5:a0:1b:53:68:b5:63:18:58:61:1c:b4:
                    36:4f:29:04:b1:df:bf:4b:4c:ce:f5:65:ae:63:aa:
                    df:dd:33:84:19:99:f3:d1:93:01:cd:17:a8:cc:4a:
                    93:9c:d8:0e:42:d8:bb:b0:b5:ca:2e:8f:31:49:cd:
                    c1:2a:24:bb:ef:25:4d:16:60:50:7a:d5:6e:e3:d4:
                    21:69:bb:f3:49:6f:b1:6b:6c:21:00:5c:8c:97:99:
                    c3:48:32:a2:06:21:43:27:60:65:67:6a:9e:c1:ba:
                    a3:e2:46:2a:16:4f:b8:78:36:0d:87:54:67:38:80:
                    1a:6b:3a:46:e9:38:a5:a3:c1:78:4e:ad:2c:ab:f9:
                    fb:b7:c6:a7:88:95:f7:dd:d0:4c:07:90:2f:5a:e9:
                    20:d6:20:bd:6c:57:4e:17:2e:9f:d0:33:16:4e:13:
                    a9:50:55:d6:c2:a5:87:a2:e4:44:7e:58:d2:67:9c:
                    39:b5:7e:31:67:7d:18:02:7c:18:df:c3:f6:e9:a0:
                    24:55:6b:33:ab:19:25:53:d6:d6:d7:76:ea:7a:b4:
                    53:8b:95:ac:f1:03:c6:05:8d:0a:f6:61:b3:1a:45:
                    6a:82:f5:31:2f:b3:9d:72:70:fe:ab:03:dd:26:e4:
                    ff:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:30:0C:9E:00:0F:50:13:5A:49:7D:CD:11:44:08:35:4A:4D:91:4F
            X509v3 Authority Key Identifier:
                keyid:38:D2:17:BB:C9:98:9F:8B:1C:EC:1B:3A:43:60:1F:11:E3:D1:1E:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ONIXu8mYn4sc7Bs6Q2AfEePRHks.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3674908/5ED4860A564411F0A5A4B7EDDAE4EC9C/ONIXu8mYn4sc7Bs6Q2AfEePRHks.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:9e:4c:c3:42:19:0a:65:f2:c6:55:21:cb:45:b4:a9:2c:d7:
         80:18:54:37:0f:59:73:17:67:da:7d:2b:3b:29:d1:ee:bf:d8:
         60:95:e8:98:8d:7c:a7:06:b4:c4:b6:61:ee:eb:14:45:bf:a0:
         71:77:1b:69:36:0a:10:56:d2:59:cf:0f:d0:97:fc:e7:2f:30:
         9a:3b:2e:fb:45:70:a6:6f:41:a1:e2:a4:0a:c1:7b:84:3a:fe:
         13:5c:16:88:8d:7f:75:25:32:89:13:60:b9:6e:db:ed:eb:b0:
         32:d5:c4:aa:77:bb:0c:33:d1:d6:fa:b9:d6:fa:89:60:75:0d:
         87:21:e5:4d:5d:56:28:3f:eb:1d:f8:ae:3c:40:40:bb:ff:3d:
         4f:c7:2a:44:4b:95:33:1c:57:c8:16:3c:c6:07:a9:77:0c:aa:
         90:86:a4:ad:6b:01:d1:c6:9d:c1:b8:cb:3e:68:00:5c:fc:c0:
         a1:66:3d:99:46:55:34:fc:8d:11:a6:92:f7:d9:a0:ad:53:60:
         33:1d:9f:4d:ee:66:1f:3d:29:8b:11:f0:3d:75:6e:a8:a9:22:
         80:83:04:56:25:e1:03:c8:5c:39:3d:64:9e:49:6e:55:a4:49:
         1f:00:95:5b:6c:4b:e6:3e:2c:4f:00:70:01:5c:f8:c7:cb:5b:
         8e:7a:86:92
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAcYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzQ5MDhBRjExMC8GA1UEBRMoMzhEMjE3QkJDOTk4OUY4QjFDRUMxQjNBNDM2MDFG
MTFFM0QxMUU0QjAeFw0yNjA5MjEwNDU3MTlaFw0yNjA5MjMwNDU3MTlaMBgxFjAU
BgNVBAMTDTZhYjBiOTJmLTdiMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwN6g2r2ziLHAlWjPJ6mA/dqWgG1NotWMYWGEctDZPKQSx379LTM71Za5j
qt/dM4QZmfPRkwHNF6jMSpOc2A5C2LuwtcoujzFJzcEqJLvvJU0WYFB61W7j1CFp
u/NJb7FrbCEAXIyXmcNIMqIGIUMnYGVnap7BuqPiRioWT7h4Ng2HVGc4gBprOkbp
OKWjwXhOrSyr+fu3xqeIlffd0EwHkC9a6SDWIL1sV04XLp/QMxZOE6lQVdbCpYei
5ER+WNJnnDm1fjFnfRgCfBjfw/bpoCRVazOrGSVT1tbXdup6tFOLlazxA8YFjQr2
YbMaRWqC9TEvs51ycP6rA90m5P9DAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQURjAM
ngAPUBNaSX3NEUQINUpNkU8wHwYDVR0jBBgwFoAUONIXu8mYn4sc7Bs6Q2AfEePR
HkswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc0OTA4LzVFRDQ4NjBBNTY0NDExRjBBNUE0QjdFRERBRTRFQzlDL09OSVh1
OG1ZbjRzYzdCczZRMkFmRWVQUkhrcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09OSVh1OG1ZbjRzYzdCczZRMkFmRWVQUkhrcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzQ5MDgvNUVENDg2MEE1NjQ0MTFGMEE1QTRCN0VEREFF
NEVDOUMvT05JWHU4bVluNHNjN0JzNlEyQWZFZVBSSGtzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB0nkzDQhkKZfLGVSHLRbSpLNeAGFQ3
D1lzF2fafSs7KdHuv9hgleiYjXynBrTEtmHu6xRFv6BxdxtpNgoQVtJZzw/Ql/zn
LzCaOy77RXCmb0Gh4qQKwXuEOv4TXBaIjX91JTKJE2C5btvt67Ay1cSqd7sMM9HW
+rnW+olgdQ2HIeVNXVYoP+sd+K48QEC7/z1PxypES5UzHFfIFjzGB6l3DKqQhqSt
awHRxp3BuMs+aABc/MChZj2ZRlU0/I0RppL32aCtU2AzHZ9N7mYfPSmLEfA9dW6o
qSKAgwRWJeEDyFw5PWSeSW5VpEkfAJVbbEvmPixPAHABXPjHy1uOeoaS
-----END CERTIFICATE-----