Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
File:                     mlfRoEhHbJDZjDymmHBdYtTdRNM.mft (raw, json)
Hash identifier:          v4kozbLCYQLYiXZbU2bDqvksaeThaToFyavmTMTVXts=
Subject key identifier:   E5:7E:9E:D3:96:D6:7A:F4:3B:38:99:4B:98:68:8A:B1:37:6B:A0:C1
Authority key identifier: 9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3
Certificate issuer:       /CN=F36A44EAAF/serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
Certificate serial:       0AB6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
Manifest number:          0AAF
Signing time:             Mon 21 Sep 2026 01:27:00 +0000
Manifest this update:     Mon 21 Sep 2026 01:26:59 +0000
Manifest next update:     Wed 23 Sep 2026 01:26:59 +0000
Files and hashes:         1: mlfRoEhHbJDZjDymmHBdYtTdRNM.crl (hash: 8AoR+i3+/eZDenw8MGVFpkCloMhKc8wsgN1E9sS/qGQ=)
                          2: A59E099282C411F0B018AEC1DAE4EC9C.roa (hash: okBnUm/NcC2euNDAK0BM3ThQh/20GIpH4iqpfDhnEF8=)
                          3: E600EA8C82C311F0AA9237BDDAE4EC9C.roa (hash: fG/5xWCUdEM58O5TjC0L4Y26zDzPnoakqNic7vSKxmM=)
                          4: 6A3D42E489B911F1BE2734BFCE1D38B0.roa (hash: xFggCMOp+wX+72NPjHT5Q9DwGoQjc5rzY3XRbug6TNk=)
                          5: 193C239E82C411F090E870BDDAE4EC9C.roa (hash: aipTiaVnDtgCS5hSfDq+yj7qAJemAqvJkMKoIB8dgLA=)
                          6: A800754A82C311F09AF518BBDAE4EC9C.roa (hash: SAIigmdTDHDxOusEjUmretqLmVMcAl3gAWgtzTQZPeI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 01:26:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2742 (0xab6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A44EAAF, serialNumber=9A57D1A048476C90D98C3CA698705D62D4DD44D3
        Validity
            Not Before: Sep 21 01:26:59 2026 GMT
            Not After : Sep 23 01:26:59 2026 GMT
        Subject: CN=6ab087e4-8ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:02:0f:cf:36:b5:94:35:ff:e7:cb:97:90:44:
                    37:eb:c1:d9:ac:f3:1d:5f:93:c1:ba:0d:d9:2c:ac:
                    27:ed:20:13:04:b2:d1:fe:43:6d:af:93:59:ab:58:
                    95:4a:1a:85:3c:e7:1b:3c:7b:bd:99:1c:3d:da:c8:
                    52:1c:29:ed:b9:33:fc:1f:9c:8e:e8:5e:10:01:cf:
                    48:c8:c5:c4:d1:6b:08:ca:63:92:69:63:5a:e3:3a:
                    c5:54:97:c9:6e:6b:50:84:41:01:0c:9b:74:c1:c6:
                    d0:1f:8e:58:46:84:6a:99:fe:ee:ca:7e:fe:81:8b:
                    f0:9c:50:b9:84:11:c5:5c:f9:0e:6a:df:2f:a7:d1:
                    d7:4c:e3:83:c9:7a:f4:47:67:fe:13:34:94:5a:1a:
                    e7:ae:0b:bf:66:3b:cb:4f:1a:52:9f:43:68:e4:93:
                    f4:34:7e:a8:38:4d:88:27:cc:26:8f:07:07:87:b5:
                    62:1e:5d:b0:d1:54:4a:e5:8d:5c:49:dd:b5:0e:12:
                    ab:e5:1c:2c:72:ad:9a:d3:2e:f3:ee:6d:59:99:55:
                    f5:db:63:ef:20:21:c5:4d:c2:a0:c7:69:ae:9e:71:
                    6a:61:ea:cd:df:d7:08:a5:5e:52:f2:9e:66:f7:9a:
                    db:f6:79:63:79:3a:5f:c9:f2:80:6d:6d:5d:1d:87:
                    89:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7E:9E:D3:96:D6:7A:F4:3B:38:99:4B:98:68:8A:B1:37:6B:A0:C1
            X509v3 Authority Key Identifier:
                keyid:9A:57:D1:A0:48:47:6C:90:D9:8C:3C:A6:98:70:5D:62:D4:DD:44:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mlfRoEhHbJDZjDymmHBdYtTdRNM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A44EA/90E3EB36890911E984EC3C5FF8AEA228/mlfRoEhHbJDZjDymmHBdYtTdRNM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:ba:f1:8d:21:06:55:81:e7:1a:ca:9b:b0:0d:4e:5d:b6:
         cc:cf:88:63:87:9d:04:b2:be:b6:79:66:4d:7c:4d:cc:6c:88:
         41:dc:c3:de:a0:e3:8c:dc:43:35:ac:b8:e8:1d:cc:d9:70:cf:
         11:49:1e:0c:ec:07:22:79:b9:da:b0:0c:d2:63:fc:fa:34:08:
         35:b6:c2:87:35:65:2e:18:f0:6d:f7:82:ba:2d:e6:71:f9:3f:
         c5:eb:fc:62:35:88:4b:a7:48:87:f8:93:41:66:9d:68:64:d6:
         22:59:24:05:b8:7b:f6:e7:7b:b2:c9:ae:f4:15:4f:5a:08:28:
         fc:81:fa:5e:33:0a:af:17:1b:6b:31:04:fe:5b:c2:1b:40:dd:
         14:93:e4:95:25:55:8c:73:37:e1:5e:26:a2:32:cb:cd:53:80:
         b4:01:bd:aa:52:8c:fd:5e:86:44:26:96:96:fd:61:c6:df:6e:
         d8:b6:56:3e:6e:91:79:41:69:8f:92:d6:9b:09:f8:6f:cb:db:
         e2:c1:6e:2f:a2:15:f3:a0:9f:e9:12:1e:25:92:72:d8:f9:83:
         b6:21:0f:4b:3b:7c:e9:cb:eb:1d:f8:88:bd:85:28:c0:98:83:
         d2:e8:72:4a:e5:7d:9d:76:9c:f8:c2:a5:d3:b5:60:b1:c6:14:
         eb:52:d8:46
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCrYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTQ0RUFBRjExMC8GA1UEBRMoOUE1N0QxQTA0ODQ3NkM5MEQ5OEMzQ0E2OTg3MDVE
NjJENERENDREMzAeFw0yNjA5MjEwMTI2NTlaFw0yNjA5MjMwMTI2NTlaMBgxFjAU
BgNVBAMTDTZhYjA4N2U0LThlY2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQClAg/PNrWUNf/ny5eQRDfrwdms8x1fk8G6DdksrCftIBMEstH+Q22vk1mr
WJVKGoU85xs8e72ZHD3ayFIcKe25M/wfnI7oXhABz0jIxcTRawjKY5JpY1rjOsVU
l8lua1CEQQEMm3TBxtAfjlhGhGqZ/u7Kfv6Bi/CcULmEEcVc+Q5q3y+n0ddM44PJ
evRHZ/4TNJRaGueuC79mO8tPGlKfQ2jkk/Q0fqg4TYgnzCaPBweHtWIeXbDRVErl
jVxJ3bUOEqvlHCxyrZrTLvPubVmZVfXbY+8gIcVNwqDHaa6ecWph6s3f1wilXlLy
nmb3mtv2eWN5Ol/J8oBtbV0dh4nVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU5X6e
05bWevQ7OJlLmGiKsTdroMEwHwYDVR0jBBgwFoAUmlfRoEhHbJDZjDymmHBdYtTd
RNMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE0NEVBLzkwRTNFQjM2ODkwOTExRTk4NEVDM0M1RkY4QUVBMjI4L21sZlJv
RWhIYkpEWmpEeW1tSEJkWXRUZFJOTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21sZlJvRWhIYkpEWmpEeW1tSEJkWXRUZFJOTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTQ0RUEvOTBFM0VCMzY4OTA5MTFFOTg0RUMzQzVGRjhB
RUEyMjgvbWxmUm9FaEhiSkRaakR5bW1IQmRZdFRkUk5NLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6lrrxjSEGVYHnGsqbsA1OXbbMz4hj
h50Esr62eWZNfE3MbIhB3MPeoOOM3EM1rLjoHczZcM8RSR4M7AciebnasAzSY/z6
NAg1tsKHNWUuGPBt94K6LeZx+T/F6/xiNYhLp0iH+JNBZp1oZNYiWSQFuHv253uy
ya70FU9aCCj8gfpeMwqvFxtrMQT+W8IbQN0Uk+SVJVWMczfhXiaiMsvNU4C0Ab2q
Uoz9XoZEJpaW/WHG327YtlY+bpF5QWmPktabCfhvy9viwW4vohXzoJ/pEh4lknLY
+YO2IQ9LO3zpy+sd+Ii9hSjAmIPS6HJK5X2ddpz4wqXTtWCxxhTrUthG
-----END CERTIFICATE-----