Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A9BEB/6DBCE3E4707C11F1BB2BA3A8CE1D38B0/vqVC8IuIG5jhigqL8rFmqt31QPk.mft
File:                     vqVC8IuIG5jhigqL8rFmqt31QPk.mft (raw, json)
Hash identifier:          UHhuMv5mhJaG2g5Lc7WNT3BqNo1Zm0k/003wExigeT0=
Subject key identifier:   CD:33:02:EF:4F:96:61:FB:15:16:BA:AD:E0:86:12:E0:DD:12:FF:A7
Authority key identifier: BE:A5:42:F0:8B:88:1B:98:E1:8A:0A:8B:F2:B1:66:AA:DD:F5:40:F9
Certificate issuer:       /CN=F36A9BEBAF/serialNumber=BEA542F08B881B98E18A0A8BF2B166AADDF540F9
Certificate serial:       76
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vqVC8IuIG5jhigqL8rFmqt31QPk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A9BEB/6DBCE3E4707C11F1BB2BA3A8CE1D38B0/vqVC8IuIG5jhigqL8rFmqt31QPk.mft
Manifest number:          73
Signing time:             Sun 11 Oct 2026 05:43:25 +0000
Manifest this update:     Sun 11 Oct 2026 05:43:24 +0000
Manifest next update:     Tue 13 Oct 2026 05:43:24 +0000
Files and hashes:         1: vqVC8IuIG5jhigqL8rFmqt31QPk.crl (hash: CjyNLXCR/6az5ltPk2fE/hR8DzN6zzifYhcw1t/NFNM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A9BEB/6DBCE3E4707C11F1BB2BA3A8CE1D38B0/vqVC8IuIG5jhigqL8rFmqt31QPk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A9BEB/6DBCE3E4707C11F1BB2BA3A8CE1D38B0/vqVC8IuIG5jhigqL8rFmqt31QPk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vqVC8IuIG5jhigqL8rFmqt31QPk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A9BEBAF, serialNumber=BEA542F08B881B98E18A0A8BF2B166AADDF540F9
        Validity
            Not Before: Oct 11 05:43:24 2026 GMT
            Not After : Oct 13 05:43:24 2026 GMT
        Subject: CN=6acb21fc-489b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:78:3b:c7:b7:34:49:a2:6c:f4:42:9a:4f:b5:
                    e9:db:4e:73:da:da:da:68:c3:05:b1:12:37:d5:65:
                    42:fe:f3:17:43:76:d4:f7:59:69:18:45:d2:35:d0:
                    31:2e:02:e6:78:c5:73:54:5c:9f:c6:89:c1:35:d6:
                    7e:5e:ca:22:90:2b:d2:2f:fc:76:1a:3d:3e:8a:7d:
                    2c:4d:ba:b2:4c:ff:3b:cb:9d:59:7a:b3:1f:c2:7d:
                    7b:a1:2f:72:f0:04:03:27:a4:48:85:9c:29:55:df:
                    3c:c9:d0:7a:11:8d:d1:0f:77:55:ba:16:a9:c5:f2:
                    8f:87:36:24:9c:c3:ab:ba:83:da:c9:8a:a5:5a:8e:
                    f7:a7:3c:01:b7:61:f3:8c:29:fd:f3:f8:e3:aa:29:
                    6a:f1:de:ee:a8:cd:9d:0f:92:37:8d:32:f4:3f:ea:
                    40:fa:55:fd:fc:c2:9e:20:b1:24:01:68:28:a1:1c:
                    42:d3:f7:d9:79:49:a1:21:18:b1:93:5d:15:49:73:
                    1c:c7:f9:45:cb:a3:18:32:4b:b9:e7:5a:a7:ca:fe:
                    57:7e:2a:72:46:db:40:da:68:82:ea:58:bf:ed:88:
                    a7:dc:05:6c:49:87:a2:6b:00:c5:99:69:71:19:55:
                    7b:ae:15:21:33:ac:c1:69:f7:a9:5d:30:36:10:6d:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:33:02:EF:4F:96:61:FB:15:16:BA:AD:E0:86:12:E0:DD:12:FF:A7
            X509v3 Authority Key Identifier:
                keyid:BE:A5:42:F0:8B:88:1B:98:E1:8A:0A:8B:F2:B1:66:AA:DD:F5:40:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9BEB/6DBCE3E4707C11F1BB2BA3A8CE1D38B0/vqVC8IuIG5jhigqL8rFmqt31QPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vqVC8IuIG5jhigqL8rFmqt31QPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A9BEB/6DBCE3E4707C11F1BB2BA3A8CE1D38B0/vqVC8IuIG5jhigqL8rFmqt31QPk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:bd:88:be:e3:ef:f2:d6:d8:b2:36:a0:46:d6:36:77:e3:df:
         cc:d6:93:73:a3:f3:03:91:20:82:65:ea:06:c7:75:de:bb:d2:
         cf:70:3f:b3:27:b7:5f:a6:91:bd:81:b6:25:e2:61:74:e4:67:
         d5:99:d4:34:ba:9d:eb:e3:60:03:ad:eb:76:0f:55:8f:f7:ac:
         31:4c:90:2a:27:7c:99:9a:ff:52:27:7f:cd:4f:ca:53:de:0a:
         9c:29:b1:2f:20:01:a1:c0:f7:12:4f:a9:6b:46:ec:2b:67:f6:
         17:b5:1a:73:33:e8:90:ec:cf:c9:e7:14:29:37:3e:a3:e3:ec:
         c5:5c:bb:b5:33:0a:c9:c8:cd:57:78:f2:f2:61:5b:ce:0e:c6:
         bf:25:23:d0:c2:ab:85:37:06:78:58:64:d8:d5:f4:c4:c2:ba:
         12:b0:cb:9b:f2:1e:1a:b2:41:85:33:fc:24:e4:92:50:da:60:
         75:01:dc:1b:60:4a:ed:f4:12:4a:83:12:3a:c4:d8:9d:6e:15:
         97:b7:0e:02:56:12:9c:e3:e1:06:d2:b3:2e:86:30:2d:96:2b:
         e6:15:68:57:a5:9c:ac:b3:2f:35:39:05:b5:a3:16:10:8d:9c:
         64:bb:f0:9d:38:bf:a5:6b:65:aa:3a:dd:74:1a:c2:96:5d:4c:
         93:7e:f5:d3
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBdjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZB
OUJFQkFGMTEwLwYDVQQFEyhCRUE1NDJGMDhCODgxQjk4RTE4QTBBOEJGMkIxNjZB
QURERjU0MEY5MB4XDTI2MTAxMTA1NDMyNFoXDTI2MTAxMzA1NDMyNFowGDEWMBQG
A1UEAxMNNmFjYjIxZmMtNDg5YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKp4O8e3NEmibPRCmk+16dtOc9ra2mjDBbESN9VlQv7zF0N21PdZaRhF0jXQ
MS4C5njFc1Rcn8aJwTXWfl7KIpAr0i/8dho9Pop9LE26skz/O8udWXqzH8J9e6Ev
cvAEAyekSIWcKVXfPMnQehGN0Q93VboWqcXyj4c2JJzDq7qD2smKpVqO96c8Abdh
84wp/fP446opavHe7qjNnQ+SN40y9D/qQPpV/fzCniCxJAFoKKEcQtP32XlJoSEY
sZNdFUlzHMf5RcujGDJLuedap8r+V34qckbbQNpogupYv+2Ip9wFbEmHomsAxZlp
cRlVe64VITOswWn3qV0wNhBtXi8CAwEAAaOCArgwggK0MB0GA1UdDgQWBBTNMwLv
T5Zh+xUWuq3ghhLg3RL/pzAfBgNVHSMEGDAWgBS+pULwi4gbmOGKCovysWaq3fVA
+TAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QTlCRUIvNkRCQ0UzRTQ3MDdDMTFGMUJCMkJBM0E4Q0UxRDM4QjAvdnFWQzhJ
dUlHNWpoaWdxTDhyRm1xdDMxUVBrLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvdnFWQzhJdUlHNWpoaWdxTDhyRm1xdDMxUVBrLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZBOUJFQi82REJDRTNFNDcwN0MxMUYxQkIyQkEzQThDRTFE
MzhCMC92cVZDOEl1SUc1amhpZ3FMOHJGbXF0MzFRUGsubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBACq9iL7j7/LW2LI2oEbWNnfj38zWk3Oj
8wORIIJl6gbHdd670s9wP7Mnt1+mkb2BtiXiYXTkZ9WZ1DS6nevjYAOt63YPVY/3
rDFMkConfJma/1Inf81PylPeCpwpsS8gAaHA9xJPqWtG7Ctn9he1GnMz6JDsz8nn
FCk3PqPj7MVcu7UzCsnIzVd48vJhW84Oxr8lI9DCq4U3BnhYZNjV9MTCuhKwy5vy
HhqyQYUz/CTkklDaYHUB3BtgSu30EkqDEjrE2J1uFZe3DgJWEpzj4QbSsy6GMC2W
K+YVaFelnKyzLzU5BbWjFhCNnGS78J04v6VrZao63XQawpZdTJN+9dM=
-----END CERTIFICATE-----