Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
File:                     NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft (raw, json)
Hash identifier:          UR+HSsIPjYYDxFT9SDEshBrZ/YLN3j73W5thoVDk2b4=
Subject key identifier:   C7:C5:73:BE:92:75:F2:6A:9A:D3:D6:49:50:34:40:FC:C1:59:47:7E
Authority key identifier: 35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72
Certificate issuer:       /CN=F36C67A4AF/serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
Certificate serial:       BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
Manifest number:          BC
Signing time:             Tue 22 Sep 2026 05:31:01 +0000
Manifest this update:     Tue 22 Sep 2026 05:31:00 +0000
Manifest next update:     Thu 24 Sep 2026 05:31:00 +0000
Files and hashes:         1: NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl (hash: 29xW0UTG2DUiIqFN6kW54uTgarT9h7gQKMvaEF8+IAM=)
                          2: 924CE9226B0C11F1BDC870D7CE1D38B0.roa (hash: XU+yo9KfYUkFLBQDwyQRQQAYJyKWLNTrj3wgPnpGVIY=)
                          3: 3100489627B211F18A08A3B6DAE4EC9C.roa (hash: KxXVh/K4PRDNOgb6lGt6sWf5pvipfL5DWCni74reBi0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 190 (0xbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C67A4AF, serialNumber=35F1275B287E9C0F8EA3A84B8B354AB024B76972
        Validity
            Not Before: Sep 22 05:31:00 2026 GMT
            Not After : Sep 24 05:31:00 2026 GMT
        Subject: CN=6ab21295-65b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ed:41:6b:3a:c8:d6:5d:59:f8:0c:03:87:0f:
                    c2:a6:7d:a3:d4:51:55:2b:a3:1c:6f:82:79:6c:04:
                    2a:b4:e2:07:d7:d8:91:f1:e1:51:72:25:c8:e1:2b:
                    68:7a:af:2f:0a:f7:5b:6c:b0:6e:96:90:18:98:29:
                    ef:88:ae:c1:d7:1a:82:17:2b:ce:ea:d0:e4:f7:2a:
                    2b:cf:d6:af:02:0f:d6:ac:eb:dd:dc:9f:e9:a8:d0:
                    a3:4c:d3:e5:fd:73:6d:92:2c:2e:01:03:a0:1a:28:
                    f7:22:53:99:7c:c3:6a:ac:b5:25:68:73:0b:ac:0f:
                    5b:4e:60:36:50:d0:a0:da:94:f1:19:f5:c1:e3:59:
                    49:48:03:4a:9a:a6:da:92:22:54:2a:ab:09:35:7a:
                    8e:f1:20:1f:c5:1e:d3:46:42:46:82:ba:69:e0:2f:
                    0f:57:2e:41:e5:16:41:c6:32:4e:c1:a8:32:0b:c9:
                    14:08:67:a9:75:45:69:54:a6:e6:27:cf:83:cb:40:
                    08:75:b4:68:75:61:d1:da:f1:11:f7:ed:63:e4:21:
                    b6:32:41:20:b8:f2:a4:d4:d6:74:ff:8e:09:a4:16:
                    8b:76:e7:6d:c1:6f:af:9d:e0:eb:4f:cf:c8:28:e8:
                    fc:14:ad:95:5e:0e:c6:b0:1b:36:ba:68:b6:ba:d0:
                    0e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:C5:73:BE:92:75:F2:6A:9A:D3:D6:49:50:34:40:FC:C1:59:47:7E
            X509v3 Authority Key Identifier:
                keyid:35:F1:27:5B:28:7E:9C:0F:8E:A3:A8:4B:8B:35:4A:B0:24:B7:69:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/NfEnWyh-nA-Oo6hLizVKsCS3aXI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C67A4/AD38F85627B011F19CC9CBAEDAE4EC9C/NfEnWyh-nA-Oo6hLizVKsCS3aXI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:13:29:fc:6d:05:76:41:72:b0:7f:60:46:48:a4:e7:77:5b:
         7a:64:0e:3e:99:49:67:55:5a:3d:55:8e:29:39:7b:26:61:cc:
         4f:ae:9c:52:2e:ba:33:e7:4c:12:a7:48:3c:4f:3c:1e:90:f1:
         0f:02:7e:9f:fc:8c:24:cc:42:c5:57:c4:51:8f:55:a4:b6:57:
         fe:a5:2c:fe:05:87:55:4b:80:6b:e7:22:dd:2f:f1:0b:6a:1e:
         a6:70:fd:46:ca:67:50:db:a1:fe:22:6d:61:18:f2:50:c4:0e:
         a0:cf:77:2e:ad:67:4c:bc:cb:cb:05:64:1d:13:bd:48:0e:94:
         aa:54:65:8c:65:34:0a:09:16:41:51:b5:ec:98:a7:59:e0:5a:
         76:73:2d:7e:b5:07:6f:e5:1c:c7:0b:96:5a:03:de:51:ae:bd:
         8e:51:da:bf:1b:b9:0e:ba:87:b6:9b:c9:5e:ed:da:22:a1:af:
         0f:67:58:5e:6d:06:fb:4c:82:8f:90:76:1e:4b:fa:80:6d:b8:
         de:f2:5a:1b:df:51:1d:40:74:fb:c9:86:be:d5:97:49:43:b0:
         64:af:4c:5a:2c:22:fe:57:06:2f:ec:59:db:d3:81:3c:d4:ed:
         32:df:5c:44:5c:30:e4:06:6d:6f:bc:59:f3:6e:04:2a:da:29:
         a1:d8:96:fd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzY3QTRBRjExMC8GA1UEBRMoMzVGMTI3NUIyODdFOUMwRjhFQTNBODRCOEIzNTRB
QjAyNEI3Njk3MjAeFw0yNjA5MjIwNTMxMDBaFw0yNjA5MjQwNTMxMDBaMBgxFjAU
BgNVBAMTDTZhYjIxMjk1LTY1YjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDU7UFrOsjWXVn4DAOHD8KmfaPUUVUroxxvgnlsBCq04gfX2JHx4VFyJcjh
K2h6ry8K91tssG6WkBiYKe+IrsHXGoIXK87q0OT3KivP1q8CD9as693cn+mo0KNM
0+X9c22SLC4BA6AaKPciU5l8w2qstSVocwusD1tOYDZQ0KDalPEZ9cHjWUlIA0qa
ptqSIlQqqwk1eo7xIB/FHtNGQkaCumngLw9XLkHlFkHGMk7BqDILyRQIZ6l1RWlU
puYnz4PLQAh1tGh1YdHa8RH37WPkIbYyQSC48qTU1nT/jgmkFot2523Bb6+d4OtP
z8go6PwUrZVeDsawGza6aLa60A7jAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUx8Vz
vpJ18mqa09ZJUDRA/MFZR34wHwYDVR0jBBgwFoAUNfEnWyh+nA+Oo6hLizVKsCS3
aXIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2N0E0L0FEMzhGODU2MjdCMDExRjE5Q0M5Q0JBRURBRTRFQzlDL05mRW5X
eWgtbkEtT282aExpelZLc0NTM2FYSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL05mRW5XeWgtbkEtT282aExpelZLc0NTM2FYSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzY3QTQvQUQzOEY4NTYyN0IwMTFGMTlDQzlDQkFFREFF
NEVDOUMvTmZFbld5aC1uQS1PbzZoTGl6VktzQ1MzYVhJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBsEyn8bQV2QXKwf2BGSKTnd1t6ZA4+
mUlnVVo9VY4pOXsmYcxPrpxSLroz50wSp0g8TzwekPEPAn6f/IwkzELFV8RRj1Wk
tlf+pSz+BYdVS4Br5yLdL/ELah6mcP1GymdQ26H+Im1hGPJQxA6gz3curWdMvMvL
BWQdE71IDpSqVGWMZTQKCRZBUbXsmKdZ4Fp2cy1+tQdv5RzHC5ZaA95Rrr2OUdq/
G7kOuoe2m8le7doioa8PZ1hebQb7TIKPkHYeS/qAbbje8lob31EdQHT7yYa+1ZdJ
Q7Bkr0xaLCL+VwYv7Fnb04E81O0y31xEXDDkBm1vvFnzbgQq2imh2Jb9
-----END CERTIFICATE-----