Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
File:                     nYezEXqhvXgot91GTXMHa66NzJY.mft (raw, json)
Hash identifier:          sK0zGsKVrbtdKX8pwxphQLRA9MHNK4CccZPlBCwjTpU=
Subject key identifier:   79:94:4A:AF:68:C5:5A:75:D0:06:E0:0C:B3:1B:89:9D:49:C6:09:6D
Authority key identifier: 9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96
Certificate issuer:       /CN=F367F26DRI/serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
Certificate serial:       0AD9
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
Manifest number:          0AD4
Signing time:             Sat 26 Sep 2026 01:19:14 +0000
Manifest this update:     Sat 26 Sep 2026 01:19:13 +0000
Manifest next update:     Mon 28 Sep 2026 01:19:13 +0000
Files and hashes:         1: nYezEXqhvXgot91GTXMHa66NzJY.crl (hash: 2lVOB40MuIKXqyLTzVVB0JGmhEAdEiGxqFobJMDHjV0=)
                          2: 2080E9B0188C11F1AB23ECE6DAE4EC9C.roa (hash: 7+2h/hAR0ZH797eWYPIRfzQR4D387dc0Npd3o5pHyjg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                          rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:45:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777 (0xad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367F26DRI, serialNumber=9D87B3117AA1BD7828B7DD464D73076BAE8DCC96
        Validity
            Not Before: Sep 26 01:19:13 2026 GMT
            Not After : Sep 28 01:19:13 2026 GMT
        Subject: CN=6ab71d92-e078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bc:81:58:0b:99:37:f6:2b:08:f8:79:42:6a:
                    be:eb:81:b7:f2:ae:53:08:b4:3f:b8:f2:20:b6:2a:
                    35:18:3c:f3:29:67:4f:fd:e4:36:01:82:4e:42:2e:
                    97:e9:13:a0:90:73:25:bd:9a:6f:96:25:c0:10:55:
                    18:e4:0a:28:2d:0a:14:3e:d5:29:7b:64:11:bc:54:
                    21:22:54:9a:c3:c2:43:18:b1:78:14:11:e0:3f:af:
                    38:d8:77:b4:a3:fb:19:5a:ef:7e:cb:52:70:b1:bc:
                    8e:45:36:05:4b:03:af:29:9b:8b:13:d2:24:ed:d1:
                    31:97:ee:5a:29:0b:0e:fa:dd:17:06:29:1d:a3:7f:
                    52:3c:16:cd:45:b6:1c:fa:77:ed:92:38:fa:14:5c:
                    3a:e7:2e:57:ac:9f:69:30:0f:34:5f:7c:e4:fa:f6:
                    34:ab:d8:8e:bf:47:74:e1:f6:99:46:4b:7d:80:74:
                    67:3a:94:04:f1:ed:ee:6a:b6:11:34:8d:a6:05:00:
                    7d:7d:45:46:65:1a:74:46:4a:a3:ef:a5:b1:91:a4:
                    e8:5d:9e:26:6d:18:54:c2:55:62:06:1a:11:c4:60:
                    fb:7c:61:9f:84:34:36:b6:f7:38:42:c8:de:6b:ea:
                    12:20:8b:07:bf:d2:d6:b8:53:13:a2:4b:b4:c1:f4:
                    46:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:94:4A:AF:68:C5:5A:75:D0:06:E0:0C:B3:1B:89:9D:49:C6:09:6D
            X509v3 Authority Key Identifier:
                keyid:9D:87:B3:11:7A:A1:BD:78:28:B7:DD:46:4D:73:07:6B:AE:8D:CC:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/nYezEXqhvXgot91GTXMHa66NzJY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367F26D/3F4041FC70B911E9A7F25D3FF8AEA228/nYezEXqhvXgot91GTXMHa66NzJY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:5e:99:81:c1:a3:40:59:ac:00:ef:c5:8c:84:61:76:36:92:
         f0:bd:eb:c0:55:b8:b2:18:db:ae:30:a9:c2:90:0b:a2:0f:a2:
         21:a9:f4:d3:43:11:b8:22:46:e9:28:35:ac:1e:a9:51:42:0d:
         a8:03:2a:b3:50:46:72:60:64:bc:4e:46:bf:18:37:cd:69:e9:
         28:21:89:9a:19:df:d2:30:8f:9e:d6:a2:81:b8:71:44:c5:1d:
         b5:c0:aa:b2:28:fa:9b:bb:9c:8c:70:c7:69:57:6e:d4:9a:fa:
         37:f2:c2:e7:0f:3f:dc:11:41:ca:dd:2c:a4:50:d1:59:c3:cf:
         0d:f4:c3:07:b6:36:2f:c4:74:0e:ce:cd:93:c7:0a:96:05:8b:
         51:c4:ac:62:85:b9:dc:89:11:bc:85:14:5e:d8:98:3a:58:6c:
         16:ab:c9:31:7c:ba:83:23:71:25:a3:2e:e5:3f:56:5f:df:ec:
         78:3b:32:21:f4:41:a5:70:3e:3d:ff:b0:fd:03:ff:75:47:19:
         03:40:bc:2c:89:5e:11:4c:7b:96:ce:a2:91:c8:97:d5:28:79:
         12:a2:59:e5:e2:b0:fe:c8:3a:11:d2:e2:19:dd:e3:81:82:14:
         fb:15:e1:4e:51:58:9a:ff:23:c1:fb:1a:0f:a5:af:96:41:02:
         56:f4:0f:33
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCtkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0YyNkRSSTExMC8GA1UEBRMoOUQ4N0IzMTE3QUExQkQ3ODI4QjdERDQ2NEQ3MzA3
NkJBRThEQ0M5NjAeFw0yNjA5MjYwMTE5MTNaFw0yNjA5MjgwMTE5MTNaMBgxFjAU
BgNVBAMTDTZhYjcxZDkyLWUwNzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDmvIFYC5k39isI+HlCar7rgbfyrlMItD+48iC2KjUYPPMpZ0/95DYBgk5C
LpfpE6CQcyW9mm+WJcAQVRjkCigtChQ+1Sl7ZBG8VCEiVJrDwkMYsXgUEeA/rzjY
d7Sj+xla737LUnCxvI5FNgVLA68pm4sT0iTt0TGX7lopCw763RcGKR2jf1I8Fs1F
thz6d+2SOPoUXDrnLlesn2kwDzRffOT69jSr2I6/R3Th9plGS32AdGc6lATx7e5q
thE0jaYFAH19RUZlGnRGSqPvpbGRpOhdniZtGFTCVWIGGhHEYPt8YZ+ENDa29zhC
yN5r6hIgiwe/0ta4UxOiS7TB9EZNAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUeZRK
r2jFWnXQBuAMsxuJnUnGCW0wHwYDVR0jBBgwFoAUnYezEXqhvXgot91GTXMHa66N
zJYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGMjZELzNGNDA0MUZDNzBCOTExRTlBN0YyNUQzRkY4QUVBMjI4L25ZZXpF
WHFodlhnb3Q5MUdUWE1IYTY2TnpKWS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L25ZZXpFWHFodlhnb3Q5MUdUWE1IYTY2TnpKWS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0YyNkQvM0Y0MDQxRkM3MEI5MTFFOUE3RjI1RDNGRjhBRUEy
MjgvblllekVYcWh2WGdvdDkxR1RYTUhhNjZOekpZLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8XpmBwaNAWawA78WMhGF2NpLwvevAVbiy
GNuuMKnCkAuiD6IhqfTTQxG4IkbpKDWsHqlRQg2oAyqzUEZyYGS8Tka/GDfNaeko
IYmaGd/SMI+e1qKBuHFExR21wKqyKPqbu5yMcMdpV27Umvo38sLnDz/cEUHK3Syk
UNFZw88N9MMHtjYvxHQOzs2TxwqWBYtRxKxihbnciRG8hRRe2Jg6WGwWq8kxfLqD
I3Eloy7lP1Zf3+x4OzIh9EGlcD49/7D9A/91RxkDQLwsiV4RTHuWzqKRyJfVKHkS
olnl4rD+yDoR0uIZ3eOBghT7FeFOUVia/yPB+xoPpa+WQQJW9A8z
-----END CERTIFICATE-----