Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
File:                     Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft (raw, json)
Hash identifier:          Omgj0NSr83Z0i3Gp2rdRXJZvfTyRs+2KsRDsl6DEAvs=
Subject key identifier:   66:FD:D7:5F:05:2C:BB:BF:1D:53:4E:B8:44:8F:8B:33:9F:D4:F3:7B
Authority key identifier: 0A:DC:3C:FB:B7:DD:03:2D:A9:9F:48:C7:A4:0D:86:F0:F9:1C:FE:1A
Certificate issuer:       /CN=F36B222DAF/serialNumber=0ADC3CFBB7DD032DA99F48C7A40D86F0F91CFE1A
Certificate serial:       014D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
Manifest number:          014C
Signing time:             Tue 22 Sep 2026 05:12:13 +0000
Manifest this update:     Tue 22 Sep 2026 05:12:13 +0000
Manifest next update:     Thu 24 Sep 2026 05:12:13 +0000
Files and hashes:         1: Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl (hash: bp2NYr2eVXwlBvc20qo4g+iJiW42ysi5SfQc6llVXEM=)
                          2: C4BDCF3CB82B11F0B7DB80E1DAE4EC9C.roa (hash: tOfIeOAf4uXl6pOeSJ1Xju9VQWrYerPezpD2f2dwyfA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 333 (0x14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B222DAF, serialNumber=0ADC3CFBB7DD032DA99F48C7A40D86F0F91CFE1A
        Validity
            Not Before: Sep 22 05:12:13 2026 GMT
            Not After : Sep 24 05:12:13 2026 GMT
        Subject: CN=6ab20e2d-ff55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:78:f0:a2:0e:42:39:6b:04:ca:3f:c9:7f:bc:
                    c4:1f:c6:f2:e8:41:5e:9b:d7:fa:ca:ac:fe:3b:2a:
                    3e:29:29:ff:ed:02:57:8b:9f:7e:76:7a:ed:3a:c3:
                    19:15:a0:7e:a7:a1:84:b4:f1:f6:c3:6c:68:24:00:
                    34:42:5a:7d:69:b7:92:80:5c:36:8e:cd:3c:87:ea:
                    af:b0:2a:42:c6:3c:be:61:f2:94:af:a2:b5:0f:89:
                    6a:70:c2:89:af:c6:8a:0f:4f:bc:d1:a1:47:d7:ae:
                    ea:67:0d:83:cc:56:ec:69:96:4f:15:d2:c5:9d:e7:
                    51:7b:52:a8:b7:78:c3:28:c3:f3:47:42:8f:c6:b8:
                    b6:8b:7b:89:5d:7b:de:6d:26:4e:18:c9:a2:cd:d9:
                    a0:d0:55:28:5b:7c:cb:e3:62:33:7d:7f:06:ae:1c:
                    97:09:d7:f3:a3:53:d9:ee:ea:57:cc:a4:9e:97:17:
                    64:0b:85:49:86:3f:bf:e0:8f:d4:d0:ca:a5:f8:7b:
                    0c:b6:d6:8c:b7:28:e7:8c:5f:98:bb:5b:4e:06:23:
                    0c:ba:4b:49:42:5f:11:cf:3b:fb:dc:48:fe:62:95:
                    86:e9:7a:a0:d2:ef:79:37:33:a2:4d:01:dc:04:30:
                    dd:bc:e8:d9:1d:45:e8:a1:4b:6e:ee:88:ad:07:85:
                    d7:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:FD:D7:5F:05:2C:BB:BF:1D:53:4E:B8:44:8F:8B:33:9F:D4:F3:7B
            X509v3 Authority Key Identifier:
                keyid:0A:DC:3C:FB:B7:DD:03:2D:A9:9F:48:C7:A4:0D:86:F0:F9:1C:FE:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B222D/452A30E0B5E111F0B13E07F6DAE4EC9C/Ctw8-7fdAy2pn0jHpA2G8Pkc_ho.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c5:fc:85:77:84:3c:c9:68:f2:01:cf:ce:4e:d8:ab:93:eb:23:
         70:34:2c:13:79:3d:a5:66:8e:28:d1:58:e7:ee:19:a9:1c:59:
         02:83:af:d6:0f:d5:e6:c9:d2:13:02:a4:dd:f4:0c:82:73:ad:
         bd:e5:ce:87:02:5b:56:0b:7e:ec:c4:c5:10:50:9e:17:27:56:
         c9:09:0a:b3:32:d0:e1:49:23:81:43:6b:6a:61:05:52:7a:a3:
         94:41:03:6a:15:0c:e7:ce:06:68:d2:dc:c4:12:7f:60:e0:df:
         76:65:0c:24:4a:04:75:63:48:5a:10:64:0e:12:94:3c:f0:58:
         40:f6:0c:25:e3:e5:13:3e:0d:33:c9:0a:f7:6f:b4:f7:d3:d3:
         67:19:0d:b2:70:6e:3b:6b:87:b1:35:0d:dd:3d:05:23:9c:61:
         7a:f4:0a:1f:54:35:03:2b:bc:75:26:1f:b1:43:4d:71:6b:fd:
         80:13:a8:23:6d:f9:81:66:0b:9e:4a:df:37:6e:f1:03:7e:f0:
         c4:f8:63:1f:46:c1:06:81:6b:88:b0:f3:87:47:b2:d2:8e:9b:
         67:f4:62:04:fd:2e:69:84:4a:89:7f:c8:03:c0:b3:87:74:6e:
         f5:e6:ae:a4:57:31:96:5e:e3:0b:0c:4f:ad:11:dd:46:9b:eb:
         57:20:38:cb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAU0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjIyMkRBRjExMC8GA1UEBRMoMEFEQzNDRkJCN0REMDMyREE5OUY0OEM3QTQwRDg2
RjBGOTFDRkUxQTAeFw0yNjA5MjIwNTEyMTNaFw0yNjA5MjQwNTEyMTNaMBgxFjAU
BgNVBAMTDTZhYjIwZTJkLWZmNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6ePCiDkI5awTKP8l/vMQfxvLoQV6b1/rKrP47Kj4pKf/tAleLn352eu06
wxkVoH6noYS08fbDbGgkADRCWn1pt5KAXDaOzTyH6q+wKkLGPL5h8pSvorUPiWpw
womvxooPT7zRoUfXrupnDYPMVuxplk8V0sWd51F7Uqi3eMMow/NHQo/GuLaLe4ld
e95tJk4YyaLN2aDQVShbfMvjYjN9fwauHJcJ1/OjU9nu6lfMpJ6XF2QLhUmGP7/g
j9TQyqX4ewy21oy3KOeMX5i7W04GIwy6S0lCXxHPO/vcSP5ilYbpeqDS73k3M6JN
AdwEMN286NkdReihS27uiK0HhddNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZv3X
XwUsu78dU064RI+LM5/U83swHwYDVR0jBBgwFoAUCtw8+7fdAy2pn0jHpA2G8Pkc
/howDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkIyMjJELzQ1MkEzMEUwQjVFMTExRjBCMTNFMDdGNkRBRTRFQzlDL0N0dzgt
N2ZkQXkycG4wakhwQTJHOFBrY19oby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0N0dzgtN2ZkQXkycG4wakhwQTJHOFBrY19oby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjIyMkQvNDUyQTMwRTBCNUUxMTFGMEIxM0UwN0Y2REFF
NEVDOUMvQ3R3OC03ZmRBeTJwbjBqSHBBMkc4UGtjX2hvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDF/IV3hDzJaPIBz85O2KuT6yNwNCwT
eT2lZo4o0Vjn7hmpHFkCg6/WD9XmydITAqTd9AyCc6295c6HAltWC37sxMUQUJ4X
J1bJCQqzMtDhSSOBQ2tqYQVSeqOUQQNqFQznzgZo0tzEEn9g4N92ZQwkSgR1Y0ha
EGQOEpQ88FhA9gwl4+UTPg0zyQr3b7T309NnGQ2ycG47a4exNQ3dPQUjnGF69Aof
VDUDK7x1Jh+xQ01xa/2AE6gjbfmBZgueSt83bvEDfvDE+GMfRsEGgWuIsPOHR7LS
jptn9GIE/S5phEqJf8gDwLOHdG715q6kVzGWXuMLDE+tEd1Gm+tXIDjL
-----END CERTIFICATE-----