Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
File:                     pM4k_g7il2reULOd__0tfkLA8oo.mft (raw, json)
Hash identifier:          JJcNmEPI4P5ajYNHkp4NO0hlHP4YeyBm9RV0j72RhSs=
Subject key identifier:   FA:B9:85:3D:97:9B:DF:40:CD:20:96:E2:3B:A6:76:2A:9D:2E:0C:96
Authority key identifier: A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A
Certificate issuer:       /CN=F36987B2AF/serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
Certificate serial:       0871
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
Manifest number:          086F
Signing time:             Sat 26 Sep 2026 01:57:26 +0000
Manifest this update:     Sat 26 Sep 2026 01:57:25 +0000
Manifest next update:     Mon 28 Sep 2026 01:57:25 +0000
Files and hashes:         1: pM4k_g7il2reULOd__0tfkLA8oo.crl (hash: LnC4+ofJFduvoJuEe0JNuqG0wUk1pdBe2sz5B8+VQAA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2161 (0x871)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36987B2AF, serialNumber=A4CE24FE0EE2976ADE50B39DFFFD2D7E42C0F28A
        Validity
            Not Before: Sep 26 01:57:25 2026 GMT
            Not After : Sep 28 01:57:25 2026 GMT
        Subject: CN=6ab72686-39ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c9:4c:dd:ba:fa:a7:6c:cd:44:ef:59:cf:1f:
                    56:f9:0c:32:f1:5a:fb:6c:64:5c:e5:34:c0:ed:3b:
                    60:b2:74:b0:d8:95:62:46:5c:a2:18:4b:f9:85:51:
                    d6:47:da:64:cb:ea:56:9b:db:2e:48:6b:ca:c9:a1:
                    2d:25:3c:db:8f:3a:79:6d:fb:11:3b:4c:04:78:dd:
                    0d:6c:7b:72:ba:f0:db:c9:af:f5:e9:81:bc:5e:fc:
                    98:a7:03:c6:92:bb:8b:c8:36:cf:78:cd:ab:8c:7b:
                    fe:c8:6b:09:e4:59:cf:cb:ca:bb:42:e9:63:81:33:
                    05:b2:dc:b5:37:03:af:8c:fe:91:9d:a6:fa:62:15:
                    05:cd:8b:92:25:97:8b:ff:61:de:a6:62:9e:fe:de:
                    ab:6f:5c:71:56:01:69:89:1f:48:b6:a8:39:53:3a:
                    d8:86:8b:d4:77:50:80:c8:04:b1:3d:6c:8a:d0:49:
                    16:38:66:2a:95:b3:09:9d:6c:1d:6d:df:cf:76:05:
                    59:f0:50:5e:60:e7:d0:56:52:a0:00:a4:9e:4f:65:
                    1d:d2:5e:10:3f:2a:69:e7:b5:b9:99:e6:8e:7d:fd:
                    28:b9:ee:ae:9a:7f:0b:31:f1:1e:81:ff:35:bd:b6:
                    7a:b9:f7:77:b8:81:ee:d8:a5:41:48:e8:f4:39:a0:
                    c8:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B9:85:3D:97:9B:DF:40:CD:20:96:E2:3B:A6:76:2A:9D:2E:0C:96
            X509v3 Authority Key Identifier:
                keyid:A4:CE:24:FE:0E:E2:97:6A:DE:50:B3:9D:FF:FD:2D:7E:42:C0:F2:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pM4k_g7il2reULOd__0tfkLA8oo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36987B2/12929494413111EB81D05F08F8AEA228/pM4k_g7il2reULOd__0tfkLA8oo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6f:ab:41:16:ce:11:69:e9:f5:12:59:00:d9:82:96:f5:c6:
         b9:cb:ce:2e:15:1c:04:3f:16:9e:55:4d:8b:b9:49:24:43:c4:
         52:54:38:36:6f:9c:e9:29:e0:57:28:15:3f:31:fe:17:73:f0:
         4d:0e:88:75:20:49:b7:e9:98:1d:4d:55:a5:72:a6:42:e2:53:
         1a:89:87:4d:98:60:be:a5:ed:fa:39:0b:14:62:5e:8d:7d:2f:
         d7:fb:f6:8b:9a:34:db:a9:8d:12:76:cf:74:7c:d0:36:9f:2f:
         38:52:b8:4d:2f:53:11:62:bf:b3:8b:cd:fe:18:01:91:35:af:
         67:66:ff:41:ae:3b:22:59:08:b6:45:e5:0d:bd:9a:cf:93:ba:
         37:d3:3f:f3:2e:cb:cd:24:c0:87:67:07:b3:c8:1a:43:55:d3:
         34:b0:54:46:ef:b9:48:38:6c:c5:7b:d2:5b:27:e9:94:94:d3:
         8f:0c:08:d6:62:da:6b:45:c7:b4:4c:01:ea:f6:ec:d3:0c:78:
         b8:8e:83:2e:d1:a8:f4:a9:08:38:f1:ca:3b:91:49:9b:d1:e6:
         74:7c:4a:91:4b:42:8a:1d:b8:98:d6:4f:f6:b9:50:ba:bb:cf:
         eb:95:8d:e0:95:3b:74:96:fe:24:88:13:47:f0:4a:72:72:db:
         e4:95:4a:21
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTg3QjJBRjExMC8GA1UEBRMoQTRDRTI0RkUwRUUyOTc2QURFNTBCMzlERkZGRDJE
N0U0MkMwRjI4QTAeFw0yNjA5MjYwMTU3MjVaFw0yNjA5MjgwMTU3MjVaMBgxFjAU
BgNVBAMTDTZhYjcyNjg2LTM5ZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7yUzduvqnbM1E71nPH1b5DDLxWvtsZFzlNMDtO2CydLDYlWJGXKIYS/mF
UdZH2mTL6lab2y5Ia8rJoS0lPNuPOnlt+xE7TAR43Q1se3K68NvJr/Xpgbxe/Jin
A8aSu4vINs94zauMe/7IawnkWc/LyrtC6WOBMwWy3LU3A6+M/pGdpvpiFQXNi5Il
l4v/Yd6mYp7+3qtvXHFWAWmJH0i2qDlTOtiGi9R3UIDIBLE9bIrQSRY4ZiqVswmd
bB1t3892BVnwUF5g59BWUqAApJ5PZR3SXhA/KmnntbmZ5o59/Si57q6afwsx8R6B
/zW9tnq593e4ge7YpUFI6PQ5oMhpAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+rmF
PZeb30DNIJbiO6Z2Kp0uDJYwHwYDVR0jBBgwFoAUpM4k/g7il2reULOd//0tfkLA
8oowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4N0IyLzEyOTI5NDk0NDEzMTExRUI4MUQwNUYwOEY4QUVBMjI4L3BNNGtf
ZzdpbDJyZVVMT2RfXzB0ZmtMQThvby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3BNNGtfZzdpbDJyZVVMT2RfXzB0ZmtMQThvby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTg3QjIvMTI5Mjk0OTQ0MTMxMTFFQjgxRDA1RjA4RjhB
RUEyMjgvcE00a19nN2lsMnJlVUxPZF9fMHRma0xBOG9vLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAub6tBFs4Raen1ElkA2YKW9ca5y84u
FRwEPxaeVU2LuUkkQ8RSVDg2b5zpKeBXKBU/Mf4Xc/BNDoh1IEm36ZgdTVWlcqZC
4lMaiYdNmGC+pe36OQsUYl6NfS/X+/aLmjTbqY0Sds90fNA2ny84UrhNL1MRYr+z
i83+GAGRNa9nZv9BrjsiWQi2ReUNvZrPk7o30z/zLsvNJMCHZwezyBpDVdM0sFRG
77lIOGzFe9JbJ+mUlNOPDAjWYtprRce0TAHq9uzTDHi4joMu0aj0qQg48co7kUmb
0eZ0fEqRS0KKHbiY1k/2uVC6u8/rlY3glTt0lv4kiBNH8EpyctvklUoh
-----END CERTIFICATE-----