Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
File:                     HIATGRbyhVyxdDXLrvJmjeFVlsE.mft (raw, json)
Hash identifier:          JETgqHSETgr0flrwvBoFHalzr/S7hyYu6b8MT2MgGbU=
Subject key identifier:   5E:82:7E:D2:0D:4B:0E:88:72:AC:65:38:C6:F1:EB:05:16:CB:DA:53
Authority key identifier: 1C:80:13:19:16:F2:85:5C:B1:74:35:CB:AE:F2:66:8D:E1:55:96:C1
Certificate issuer:       /CN=F36CB8DFAF/serialNumber=1C80131916F2855CB17435CBAEF2668DE15596C1
Certificate serial:       0421
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
Manifest number:          0420
Signing time:             Mon 21 Sep 2026 03:51:07 +0000
Manifest this update:     Mon 21 Sep 2026 03:51:06 +0000
Manifest next update:     Wed 23 Sep 2026 03:51:06 +0000
Files and hashes:         1: HIATGRbyhVyxdDXLrvJmjeFVlsE.crl (hash: gqDBQ1JeBJO5udVCdA5o1nWviPDkTPWB5wVGy3K7QO8=)
                          2: 27E171828AA611EEAADC55514AD9E6FC.roa (hash: 09dXVAcpXBeumVd3ejmIXPVt6jsUIfxATFT48+wvgGE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:51:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1057 (0x421)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36CB8DFAF, serialNumber=1C80131916F2855CB17435CBAEF2668DE15596C1
        Validity
            Not Before: Sep 21 03:51:06 2026 GMT
            Not After : Sep 23 03:51:06 2026 GMT
        Subject: CN=6ab0a9ab-84ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:64:ed:0b:0f:1b:f5:bd:a5:2f:7b:3c:bb:41:
                    3d:f9:99:79:8f:10:73:6b:50:cb:6c:57:dd:02:8b:
                    b7:22:fe:a0:57:e5:af:7f:e1:dc:d6:cb:41:af:8e:
                    0e:d3:50:1f:0d:8f:67:7c:5c:c7:03:9c:ef:0b:51:
                    e6:ee:f9:47:fc:55:49:50:e9:de:81:6b:92:1e:6c:
                    29:6b:2a:89:8d:0b:06:26:16:ce:ea:ce:38:0d:c4:
                    94:c5:89:9c:33:ac:fd:06:3a:11:2a:79:db:fb:7b:
                    6f:76:60:fc:9f:32:85:36:16:ad:89:88:2b:19:a4:
                    3c:07:ed:43:aa:8f:4d:89:26:8a:43:a2:f3:79:85:
                    d8:96:ac:b7:33:42:d0:15:ab:21:50:77:b8:bf:c7:
                    d1:b0:00:26:18:f8:44:e4:81:05:50:9b:75:6a:9e:
                    39:16:da:30:70:20:4a:23:21:54:8b:e6:80:61:00:
                    f2:b0:97:41:c0:c5:aa:5d:75:30:07:c1:53:fc:a1:
                    d9:56:5c:55:03:ee:d0:4b:2a:38:f6:20:b8:fe:01:
                    02:d6:b3:7f:09:a4:69:25:3f:6e:e6:03:66:d3:dd:
                    4d:42:d5:37:62:fd:54:66:bd:22:9a:21:de:e8:f3:
                    81:84:53:31:a8:fc:21:7b:16:d4:be:17:bb:14:19:
                    1f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:82:7E:D2:0D:4B:0E:88:72:AC:65:38:C6:F1:EB:05:16:CB:DA:53
            X509v3 Authority Key Identifier:
                keyid:1C:80:13:19:16:F2:85:5C:B1:74:35:CB:AE:F2:66:8D:E1:55:96:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HIATGRbyhVyxdDXLrvJmjeFVlsE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36CB8DF/54C57C588A4611EE8FFA9F0E4AD9E6FC/HIATGRbyhVyxdDXLrvJmjeFVlsE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:2c:14:3e:4f:87:ae:45:72:f6:a3:08:a7:10:4a:cc:f6:26:
         0a:d1:04:d3:33:82:c6:f3:0b:9b:30:2c:f8:48:02:e2:bf:71:
         f4:a9:10:dd:66:ee:f4:5e:7d:33:fb:e1:f7:59:81:ed:da:7c:
         db:21:57:c4:16:0a:83:e0:1c:28:75:90:e6:54:6e:0d:a6:f6:
         49:a2:7c:86:bb:4b:01:75:8a:42:a4:9f:07:39:7a:54:8a:df:
         21:44:41:17:2c:c0:46:de:b6:85:34:86:9d:a6:a1:24:07:25:
         87:2d:6c:6d:e5:e9:f7:f9:2d:c6:41:1c:b1:9f:b7:60:8e:a8:
         05:8c:19:e2:95:03:64:f0:34:02:07:d3:47:ec:14:85:d4:39:
         23:dd:40:94:44:17:c2:b5:f2:79:f9:3a:83:6e:70:3e:a3:6f:
         b6:17:16:9c:fd:91:69:e9:a0:68:67:2b:47:b8:c9:c2:47:dc:
         74:4b:24:52:e1:e8:1a:6e:aa:b8:68:2d:27:3e:d7:31:0d:ad:
         3c:ff:c3:8d:18:fd:60:ec:42:19:fc:c6:0f:b4:89:31:67:fb:
         96:b3:5b:09:10:05:f5:d5:0c:ea:8e:38:73:e9:7f:14:f2:39:
         ef:43:7d:8f:8e:f1:0e:30:94:95:93:49:04:5b:d2:85:88:c6:
         9d:b6:72:23
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBCEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Q0I4REZBRjExMC8GA1UEBRMoMUM4MDEzMTkxNkYyODU1Q0IxNzQzNUNCQUVGMjY2
OERFMTU1OTZDMTAeFw0yNjA5MjEwMzUxMDZaFw0yNjA5MjMwMzUxMDZaMBgxFjAU
BgNVBAMTDTZhYjBhOWFiLTg0ZmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0ZO0LDxv1vaUvezy7QT35mXmPEHNrUMtsV90Ci7ci/qBX5a9/4dzWy0Gv
jg7TUB8Nj2d8XMcDnO8LUebu+Uf8VUlQ6d6Ba5IebClrKomNCwYmFs7qzjgNxJTF
iZwzrP0GOhEqedv7e292YPyfMoU2Fq2JiCsZpDwH7UOqj02JJopDovN5hdiWrLcz
QtAVqyFQd7i/x9GwACYY+ETkgQVQm3VqnjkW2jBwIEojIVSL5oBhAPKwl0HAxapd
dTAHwVP8odlWXFUD7tBLKjj2ILj+AQLWs38JpGklP27mA2bT3U1C1Tdi/VRmvSKa
Id7o84GEUzGo/CF7FtS+F7sUGR8JAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUXoJ+
0g1LDohyrGU4xvHrBRbL2lMwHwYDVR0jBBgwFoAUHIATGRbyhVyxdDXLrvJmjeFV
lsEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkNCOERGLzU0QzU3QzU4OEE0NjExRUU4RkZBOUYwRTRBRDlFNkZDL0hJQVRH
UmJ5aFZ5eGREWExydkptamVGVmxzRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hJQVRHUmJ5aFZ5eGREWExydkptamVGVmxzRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Q0I4REYvNTRDNTdDNTg4QTQ2MTFFRThGRkE5RjBFNEFE
OUU2RkMvSElBVEdSYnloVnl4ZERYTHJ2Sm1qZUZWbHNFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCALBQ+T4euRXL2owinEErM9iYK0QTT
M4LG8wubMCz4SALiv3H0qRDdZu70Xn0z++H3WYHt2nzbIVfEFgqD4BwodZDmVG4N
pvZJonyGu0sBdYpCpJ8HOXpUit8hREEXLMBG3raFNIadpqEkByWHLWxt5en3+S3G
QRyxn7dgjqgFjBnilQNk8DQCB9NH7BSF1Dkj3UCURBfCtfJ5+TqDbnA+o2+2Fxac
/ZFp6aBoZytHuMnCR9x0SyRS4egabqq4aC0nPtcxDa08/8ONGP1g7EIZ/MYPtIkx
Z/uWs1sJEAX11Qzqjjhz6X8U8jnvQ32PjvEOMJSVk0kEW9KFiMadtnIj
-----END CERTIFICATE-----