Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
File:                     yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft (raw, json)
Hash identifier:          DHZfeBZU7DoIn9D9W8MX61Uk6hzOVKBDo21Vn9wOhz8=
Subject key identifier:   78:03:0A:F2:66:14:CA:57:CA:EF:36:A7:58:E8:2B:6B:14:89:B1:13
Authority key identifier: C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF
Certificate issuer:       /CN=F36C38D9AF/serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
Certificate serial:       0486
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
Manifest number:          0483
Signing time:             Thu 05 Nov 2026 03:44:54 +0000
Manifest this update:     Thu 05 Nov 2026 03:44:54 +0000
Manifest next update:     Sat 07 Nov 2026 03:44:54 +0000
Files and hashes:         1: yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl (hash: /VKfZ4X8QuWxOSSOJPu0BjhkTB3SUeI8ClTxsLmHT9o=)
                          2: 04EB056A6ABE11EE9E4243804AD9E6FC.roa (hash: EyVlkSGybf5bnAy71sGPmJ47rqIPQfEXtljbaai4c88=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 07 Nov 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1158 (0x486)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C38D9AF, serialNumber=C993D0F14F35B14961B453097CC3D22FA790DECF
        Validity
            Not Before: Nov  5 03:44:54 2026 GMT
            Not After : Nov  7 03:44:54 2026 GMT
        Subject: CN=6aebfbb6-fe37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:48:63:d0:5e:4e:69:5e:6e:1d:7c:e1:ec:
                    7c:8e:98:4b:92:d3:6b:87:ff:57:46:2e:20:c5:b0:
                    72:7f:48:f1:70:0e:92:2f:c4:46:f2:a7:fb:1a:ed:
                    42:71:c8:46:d8:a1:37:24:b0:28:13:b0:87:ca:93:
                    3d:75:ee:a3:43:c8:47:ae:d8:a1:41:b0:fa:d0:8c:
                    0a:d4:80:5f:47:73:ad:33:d6:d3:1f:8b:b2:ca:ee:
                    0c:15:71:df:11:eb:75:3a:4d:34:d6:39:83:3e:fb:
                    d0:46:5d:53:ba:f6:ce:cc:60:90:fb:d3:42:95:f5:
                    db:a9:fb:57:be:d9:42:ac:ee:c0:3e:84:7e:f0:cc:
                    5c:e8:6b:b2:e4:9c:a3:82:41:20:a8:e0:32:ea:87:
                    00:5f:9e:ed:24:9b:a0:7e:0a:05:1a:48:80:fb:59:
                    c9:48:a0:b2:77:a2:12:b1:54:b1:ea:91:2f:35:17:
                    15:e9:c5:54:5e:23:9a:24:d3:5f:03:f0:6c:d0:89:
                    41:ee:e2:bd:b0:fc:23:4a:57:e1:37:58:06:4d:ad:
                    4e:ac:e9:89:40:67:9a:ba:58:fd:91:c3:b1:7e:96:
                    4c:a0:6f:61:37:20:4b:92:01:6d:c8:32:e7:19:ec:
                    88:9e:80:b6:01:23:6e:d0:4f:94:01:22:f5:5f:cc:
                    5f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:03:0A:F2:66:14:CA:57:CA:EF:36:A7:58:E8:2B:6B:14:89:B1:13
            X509v3 Authority Key Identifier:
                keyid:C9:93:D0:F1:4F:35:B1:49:61:B4:53:09:7C:C3:D2:2F:A7:90:DE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C38D9/74EBC17E66D111EE9135F77D4AD9E6FC/yZPQ8U81sUlhtFMJfMPSL6eQ3s8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:b2:65:75:37:68:8a:c0:62:0d:79:bc:e1:05:b1:ed:1f:f8:
         9d:1a:b9:41:4b:f3:29:5a:ea:69:a3:d4:89:1d:9c:b0:75:d9:
         71:8e:fb:58:86:d9:11:f0:14:aa:b2:8b:9f:04:f5:fd:e4:c2:
         09:5f:ba:de:cc:fc:69:65:9c:ae:3a:58:f5:9e:ba:b0:2f:9f:
         ce:dc:8f:b1:9f:8c:d7:27:09:28:d0:d1:62:a2:95:87:62:e5:
         97:5e:ee:53:52:32:cb:e0:a2:8d:76:2e:09:f0:3b:7d:6f:80:
         3c:eb:6f:40:59:84:ea:b0:93:e7:96:1c:e7:2f:61:3f:2b:3a:
         f5:22:d5:ac:2c:03:4d:4e:92:fd:86:61:8c:2a:24:bc:90:74:
         f6:db:40:be:90:f9:26:88:31:6c:b5:11:12:bc:13:fe:c5:74:
         16:0e:e3:af:07:22:4f:e6:e8:e5:80:45:0a:0e:18:5b:8c:5e:
         86:59:b1:79:42:6f:aa:56:60:a1:ee:7e:a3:05:80:ae:62:4f:
         97:bd:61:98:ec:ac:33:e5:79:1d:c7:dd:2e:89:f3:c1:94:37:
         25:0c:dc:c4:26:f4:02:45:02:d0:ff:4c:61:f7:d1:4e:6d:3d:
         54:33:4e:19:75:44:8c:1c:2c:c1:a1:c4:75:8a:31:da:c3:20:
         65:16:89:8e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBIYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzM4RDlBRjExMC8GA1UEBRMoQzk5M0QwRjE0RjM1QjE0OTYxQjQ1MzA5N0NDM0Qy
MkZBNzkwREVDRjAeFw0yNjExMDUwMzQ0NTRaFw0yNjExMDcwMzQ0NTRaMBgxFjAU
BgNVBAMTDTZhZWJmYmI2LWZlMzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCvZkhj0F5OaV5uHXzh7HyOmEuS02uH/1dGLiDFsHJ/SPFwDpIvxEbyp/sa
7UJxyEbYoTcksCgTsIfKkz117qNDyEeu2KFBsPrQjArUgF9Hc60z1tMfi7LK7gwV
cd8R63U6TTTWOYM++9BGXVO69s7MYJD700KV9dup+1e+2UKs7sA+hH7wzFzoa7Lk
nKOCQSCo4DLqhwBfnu0km6B+CgUaSID7WclIoLJ3ohKxVLHqkS81FxXpxVReI5ok
018D8GzQiUHu4r2w/CNKV+E3WAZNrU6s6YlAZ5q6WP2Rw7F+lkygb2E3IEuSAW3I
MucZ7IiegLYBI27QT5QBIvVfzF/fAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeAMK
8mYUylfK7zanWOgraxSJsRMwHwYDVR0jBBgwFoAUyZPQ8U81sUlhtFMJfMPSL6eQ
3s8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMzOEQ5Lzc0RUJDMTdFNjZEMTExRUU5MTM1Rjc3RDRBRDlFNkZDL3laUFE4
VTgxc1VsaHRGTUpmTVBTTDZlUTNzOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3laUFE4VTgxc1VsaHRGTUpmTVBTTDZlUTNzOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzM4RDkvNzRFQkMxN0U2NkQxMTFFRTkxMzVGNzdENEFE
OUU2RkMveVpQUThVODFzVWxodEZNSmZNUFNMNmVRM3M4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAYsmV1N2iKwGINebzhBbHtH/idGrlB
S/MpWuppo9SJHZywddlxjvtYhtkR8BSqsoufBPX95MIJX7rezPxpZZyuOlj1nrqw
L5/O3I+xn4zXJwko0NFiopWHYuWXXu5TUjLL4KKNdi4J8Dt9b4A8629AWYTqsJPn
lhznL2E/Kzr1ItWsLANNTpL9hmGMKiS8kHT220C+kPkmiDFstRESvBP+xXQWDuOv
ByJP5ujlgEUKDhhbjF6GWbF5Qm+qVmCh7n6jBYCuYk+XvWGY7Kwz5Xkdx90uifPB
lDclDNzEJvQCRQLQ/0xh99FObT1UM04ZdUSMHCzBocR1ijHawyBlFomO
-----END CERTIFICATE-----