Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
File:                     ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft (raw, json)
Hash identifier:          wdA0SQHlNbMVjykoeRZDqfnwykJ0Bvt3nwpOwN4H+vM=
Subject key identifier:   9B:0D:6C:33:29:7A:8B:23:64:82:C1:26:F8:8F:A2:10:7E:1C:EF:0A
Authority key identifier: 01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40
Certificate issuer:       /CN=F36C4E2CAF/serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
Certificate serial:       062B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
Manifest number:          062A
Signing time:             Mon 21 Sep 2026 02:49:13 +0000
Manifest this update:     Mon 21 Sep 2026 02:49:12 +0000
Manifest next update:     Wed 23 Sep 2026 02:49:12 +0000
Files and hashes:         1: ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl (hash: PsFNkkQVtSiyzBmZhigiiCdrcALDnvLE+9ckTR/Jeik=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1579 (0x62b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4E2CAF, serialNumber=013A38C39CCB64D8FEE8CDE6BF368F46DA738C40
        Validity
            Not Before: Sep 21 02:49:12 2026 GMT
            Not After : Sep 23 02:49:12 2026 GMT
        Subject: CN=6ab09b29-d5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:15:00:13:d7:e0:e8:3b:81:9a:15:d0:26:
                    60:74:c7:36:4f:73:25:64:9f:d4:1a:a5:d1:99:8f:
                    9f:e1:7e:6a:57:65:b2:84:e6:aa:bc:6d:15:1f:da:
                    35:2d:92:0b:68:a7:f9:09:59:5a:4c:73:70:38:71:
                    38:3b:17:c8:22:ff:e5:b9:9e:a6:ce:42:57:d1:4a:
                    88:2f:44:d4:b4:7a:58:db:af:d3:ff:42:da:58:51:
                    a7:a4:79:99:91:2a:33:8e:11:38:b9:32:e7:e7:87:
                    fc:e4:15:2f:48:ae:83:fa:aa:ca:9a:aa:d7:86:1a:
                    11:c4:7d:92:b6:f8:be:16:9a:3f:bc:07:92:fb:79:
                    38:fb:25:28:82:20:de:e3:81:ee:58:cf:04:74:f5:
                    51:31:e7:b6:de:9f:c3:04:2a:02:60:bb:28:5a:6e:
                    c8:20:f4:21:ad:ef:45:a8:07:a3:24:8d:dc:3c:3a:
                    d2:ba:52:11:a0:ce:4e:30:a6:bb:a9:8a:92:6d:5d:
                    98:1e:13:ec:62:f6:2a:e7:f3:da:17:d5:26:b6:06:
                    46:69:7a:bc:28:c5:6e:09:fe:8b:7c:3a:0d:84:e3:
                    33:36:e7:e9:02:a1:77:3f:11:3b:46:61:1d:99:7d:
                    1e:3e:03:97:ea:cb:b9:1d:e7:4e:44:d2:b6:c0:b7:
                    59:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0D:6C:33:29:7A:8B:23:64:82:C1:26:F8:8F:A2:10:7E:1C:EF:0A
            X509v3 Authority Key Identifier:
                keyid:01:3A:38:C3:9C:CB:64:D8:FE:E8:CD:E6:BF:36:8F:46:DA:73:8C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ATo4w5zLZNj-6M3mvzaPRtpzjEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4E2C/E0F97572FD6511ECA2EAAFE1F1222468/ATo4w5zLZNj-6M3mvzaPRtpzjEA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:cf:ca:0a:1f:3a:6e:15:7b:02:fe:32:75:47:24:83:0d:8a:
         91:21:aa:33:fb:d4:d9:84:c0:5c:fe:77:52:2a:d0:0e:34:5f:
         0e:64:90:47:b8:3b:ee:3e:11:18:8b:b6:9a:0b:ba:f1:3a:ba:
         4a:2e:10:0f:83:db:98:be:3b:06:c7:35:a6:b0:56:8d:b1:c6:
         52:95:88:c8:cc:6d:e5:7f:a3:b9:88:33:48:2b:e2:c5:d0:13:
         a3:a7:8a:98:d8:8e:9a:6c:c1:01:86:02:d9:0e:ec:87:9f:20:
         bb:45:cc:06:b7:cb:06:47:ea:ea:91:3b:ed:0c:cf:e9:e6:23:
         40:4e:7c:9b:e6:e0:b7:4e:a2:77:8e:b3:85:16:3a:41:30:71:
         39:9b:db:a6:7f:7c:ac:69:cb:35:6a:9d:9d:59:85:ec:cb:93:
         a7:a2:9f:6b:19:d4:9e:ee:62:5b:29:84:e7:72:91:e5:ff:75:
         95:1d:58:d8:28:f6:b2:d3:88:9d:ed:bf:c7:6b:c3:b0:97:e1:
         93:95:a8:5f:19:c6:d8:02:78:d3:b0:8b:a4:5c:be:96:a1:71:
         34:e2:fa:6d:f4:a6:db:d9:77:0d:89:d2:a8:5d:6c:68:63:2b:
         ed:8e:0e:cc:21:ee:29:96:39:0e:b4:e8:24:d5:f3:6e:f6:c1:
         a7:92:aa:4f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBiswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzRFMkNBRjExMC8GA1UEBRMoMDEzQTM4QzM5Q0NCNjREOEZFRThDREU2QkYzNjhG
NDZEQTczOEM0MDAeFw0yNjA5MjEwMjQ5MTJaFw0yNjA5MjMwMjQ5MTJaMBgxFjAU
BgNVBAMTDTZhYjA5YjI5LWQ1ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+yRUAE9fg6DuBmhXQJmB0xzZPcyVkn9QapdGZj5/hfmpXZbKE5qq8bRUf
2jUtkgtop/kJWVpMc3A4cTg7F8gi/+W5nqbOQlfRSogvRNS0eljbr9P/QtpYUaek
eZmRKjOOETi5Mufnh/zkFS9IroP6qsqaqteGGhHEfZK2+L4Wmj+8B5L7eTj7JSiC
IN7jge5YzwR09VEx57ben8MEKgJguyhabsgg9CGt70WoB6Mkjdw8OtK6UhGgzk4w
prupipJtXZgeE+xi9irn89oX1Sa2BkZperwoxW4J/ot8Og2E4zM25+kCoXc/ETtG
YR2ZfR4+A5fqy7kd505E0rbAt1nfAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUmw1s
Myl6iyNkgsEm+I+iEH4c7wowHwYDVR0jBBgwFoAUATo4w5zLZNj+6M3mvzaPRtpz
jEAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM0RTJDL0UwRjk3NTcyRkQ2NTExRUNBMkVBQUZFMUYxMjIyNDY4L0FUbzR3
NXpMWk5qLTZNM212emFQUnRwempFQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0FUbzR3NXpMWk5qLTZNM212emFQUnRwempFQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzRFMkMvRTBGOTc1NzJGRDY1MTFFQ0EyRUFBRkUxRjEy
MjI0NjgvQVRvNHc1ekxaTmotNk0zbXZ6YVBSdHB6akVBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfz8oKHzpuFXsC/jJ1RySDDYqRIaoz
+9TZhMBc/ndSKtAONF8OZJBHuDvuPhEYi7aaC7rxOrpKLhAPg9uYvjsGxzWmsFaN
scZSlYjIzG3lf6O5iDNIK+LF0BOjp4qY2I6abMEBhgLZDuyHnyC7RcwGt8sGR+rq
kTvtDM/p5iNATnyb5uC3TqJ3jrOFFjpBMHE5m9umf3ysacs1ap2dWYXsy5Onop9r
GdSe7mJbKYTncpHl/3WVHVjYKPay04id7b/Ha8Owl+GTlahfGcbYAnjTsIukXL6W
oXE04vpt9Kbb2XcNidKoXWxoYyvtjg7MIe4pljkOtOgk1fNu9sGnkqpP
-----END CERTIFICATE-----