Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft
File:                     2-RJMcFJNvINzlhLKrkbZfQttpY.mft (raw, json)
Hash identifier:          LuLyb653dtAwxkwlQxHWV6t5oLUk0FqihnNtE9XEbCA=
Subject key identifier:   74:63:4D:77:7E:8C:C5:EA:EE:13:15:10:48:2A:78:51:A4:14:59:B8
Authority key identifier: DB:E4:49:31:C1:49:36:F2:0D:CE:58:4B:2A:B9:1B:65:F4:2D:B6:96
Certificate issuer:       /CN=F36C06CBAF/serialNumber=DBE44931C14936F20DCE584B2AB91B65F42DB696
Certificate serial:       066B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft
Manifest number:          0667
Signing time:             Sun 20 Sep 2026 02:42:48 +0000
Manifest this update:     Sun 20 Sep 2026 02:42:47 +0000
Manifest next update:     Tue 22 Sep 2026 02:42:47 +0000
Files and hashes:         1: 2-RJMcFJNvINzlhLKrkbZfQttpY.crl (hash: Yupqe2/x7d7JgBrJhSQr/deISDs8zPZNQE1K3LWBSCU=)
                          2: 06392D96808111EFACB35A67762E951A.roa (hash: owpJQ133udBSSOce7prYm8YhowuNrXIyS2eThdaFM+Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 00:07:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1643 (0x66b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C06CBAF, serialNumber=DBE44931C14936F20DCE584B2AB91B65F42DB696
        Validity
            Not Before: Sep 20 02:42:47 2026 GMT
            Not After : Sep 22 02:42:47 2026 GMT
        Subject: CN=6aaf4828-92d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:32:35:00:87:32:39:c8:dd:f1:ee:33:e7:
                    93:aa:52:fd:08:c2:05:c7:f0:be:c6:34:2c:ea:97:
                    9d:b7:a9:99:3a:6a:c3:24:0b:a3:03:d5:2c:d3:8a:
                    cc:de:fd:9d:46:69:69:64:b7:90:19:10:63:45:57:
                    19:61:82:3c:f1:b3:10:3e:28:c4:1a:f7:2a:a4:9c:
                    be:16:79:87:54:e1:ff:1a:46:d1:d7:5e:1a:02:19:
                    84:18:e3:97:b2:a5:31:9c:d8:00:10:38:a7:20:e6:
                    cd:1f:28:75:f5:89:29:cd:ae:33:b7:20:8c:f4:cf:
                    db:5a:5f:52:84:56:a3:f3:e7:8c:d7:4b:ab:27:ba:
                    9c:ab:9b:7e:4e:a6:e9:f4:4b:16:d5:6f:f3:92:90:
                    14:bb:37:ed:e9:3b:81:1c:dc:0b:84:ee:78:a1:5d:
                    69:7c:05:5f:28:2b:bc:75:35:be:eb:69:1b:a5:6c:
                    9f:1e:42:28:e6:c4:8a:9a:67:4a:af:93:cc:f0:03:
                    7c:e0:54:f1:a3:bc:98:ff:60:d2:4a:a1:99:50:13:
                    0e:ed:e9:94:cd:8b:87:e7:4c:0f:3d:ec:d7:6a:39:
                    23:45:98:e5:d3:23:3d:d4:08:61:4f:4c:e4:c0:a5:
                    e5:81:94:b8:50:88:d5:44:46:a5:e7:cf:a3:5b:68:
                    ad:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:63:4D:77:7E:8C:C5:EA:EE:13:15:10:48:2A:78:51:A4:14:59:B8
            X509v3 Authority Key Identifier:
                keyid:DB:E4:49:31:C1:49:36:F2:0D:CE:58:4B:2A:B9:1B:65:F4:2D:B6:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2-RJMcFJNvINzlhLKrkbZfQttpY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C06CB/D8FF6538D4F311ECB3714BD3F1222468/2-RJMcFJNvINzlhLKrkbZfQttpY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:bc:d5:9b:d3:dc:43:49:6d:46:e2:70:e8:5a:d9:af:8a:f3:
         e1:a1:fa:c6:e9:37:ed:81:14:8b:5d:a0:11:aa:95:3c:bf:f5:
         95:61:0c:92:36:b0:05:60:83:4e:1c:45:66:d6:1b:05:02:30:
         f5:eb:47:a1:59:4b:44:f5:76:ec:6d:5b:8a:b2:e7:e5:92:b3:
         90:24:6b:57:d0:25:8d:e2:7b:93:ea:b5:b4:98:12:b4:ea:c1:
         69:71:93:44:fb:09:54:06:ef:d6:c1:7f:15:36:c5:2a:11:c8:
         a9:68:51:69:14:a7:b1:b8:d9:c7:92:7e:60:ba:aa:ca:59:17:
         90:09:bd:a5:52:22:7c:6f:76:c2:b6:7c:57:46:a2:82:6a:2a:
         7c:7d:57:3d:44:66:ba:5b:88:05:f9:87:63:70:e2:10:9e:c6:
         c1:9a:75:2e:84:40:0e:f0:9d:a4:82:a3:79:dc:25:34:6b:2a:
         ac:01:6f:c1:40:bd:bc:21:3b:0b:7b:b1:32:e0:bb:0d:1a:26:
         2b:8e:f4:70:45:54:ce:ac:a7:dc:4f:7c:83:d8:a8:c0:11:c6:
         1e:0c:c5:6b:03:e7:dd:e2:7c:19:f2:97:9c:9a:86:cb:c7:64:
         bd:b7:b3:6a:8f:92:86:1b:20:b1:d9:c3:f0:7c:86:75:9a:46:
         e5:50:40:8a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBmswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzA2Q0JBRjExMC8GA1UEBRMoREJFNDQ5MzFDMTQ5MzZGMjBEQ0U1ODRCMkFCOTFC
NjVGNDJEQjY5NjAeFw0yNjA5MjAwMjQyNDdaFw0yNjA5MjIwMjQyNDdaMBgxFjAU
BgNVBAMTDTZhYWY0ODI4LTkyZDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC2SzI1AIcyOcjd8e4z55OqUv0IwgXH8L7GNCzql523qZk6asMkC6MD1SzT
isze/Z1GaWlkt5AZEGNFVxlhgjzxsxA+KMQa9yqknL4WeYdU4f8aRtHXXhoCGYQY
45eypTGc2AAQOKcg5s0fKHX1iSnNrjO3IIz0z9taX1KEVqPz54zXS6snupyrm35O
pun0SxbVb/OSkBS7N+3pO4Ec3AuE7nihXWl8BV8oK7x1Nb7raRulbJ8eQijmxIqa
Z0qvk8zwA3zgVPGjvJj/YNJKoZlQEw7t6ZTNi4fnTA897NdqOSNFmOXTIz3UCGFP
TOTApeWBlLhQiNVERqXnz6NbaK37AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdGNN
d36MxeruExUQSCp4UaQUWbgwHwYDVR0jBBgwFoAU2+RJMcFJNvINzlhLKrkbZfQt
tpYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMwNkNCL0Q4RkY2NTM4RDRGMzExRUNCMzcxNEJEM0YxMjIyNDY4LzItUkpN
Y0ZKTnZJTnpsaExLcmtiWmZRdHRwWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzItUkpNY0ZKTnZJTnpsaExLcmtiWmZRdHRwWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzA2Q0IvRDhGRjY1MzhENEYzMTFFQ0IzNzE0QkQzRjEy
MjI0NjgvMi1SSk1jRkpOdklOemxoTEtya2JaZlF0dHBZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAyvNWb09xDSW1G4nDoWtmvivPhofrG
6TftgRSLXaARqpU8v/WVYQySNrAFYINOHEVm1hsFAjD160ehWUtE9XbsbVuKsufl
krOQJGtX0CWN4nuT6rW0mBK06sFpcZNE+wlUBu/WwX8VNsUqEcipaFFpFKexuNnH
kn5guqrKWReQCb2lUiJ8b3bCtnxXRqKCaip8fVc9RGa6W4gF+YdjcOIQnsbBmnUu
hEAO8J2kgqN53CU0ayqsAW/BQL28ITsLe7Ey4LsNGiYrjvRwRVTOrKfcT3yD2KjA
EcYeDMVrA+fd4nwZ8pecmobLx2S9t7Nqj5KGGyCx2cPwfIZ1mkblUECK
-----END CERTIFICATE-----