Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
File:                     wzA4fNIYxMz6UivFNddwdVvPe28.mft (raw, json)
Hash identifier:          ykw4VTNKiZsxhJcj+Zt1LCVtdJkxL1QXwSE8FKWq1FA=
Subject key identifier:   7E:8D:75:F6:9D:8D:72:53:C6:29:87:0D:81:14:45:61:23:2C:15:E9
Authority key identifier: C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F
Certificate issuer:       /CN=F36D591BAF/serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
Certificate serial:       03CC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
Manifest number:          03CB
Signing time:             Sat 10 Oct 2026 04:03:51 +0000
Manifest this update:     Sat 10 Oct 2026 04:03:50 +0000
Manifest next update:     Mon 12 Oct 2026 04:03:50 +0000
Files and hashes:         1: wzA4fNIYxMz6UivFNddwdVvPe28.crl (hash: xQ7QkjAAkq0smgbPl5B3KpJS2uUvUh58W3pHG4B6+JM=)
                          2: D27A6A28D7C111EE8A342CA3775412E6.roa (hash: peA4+LIUnTnNHVNJXvAgPW0H2f9Uqrwu8nzHISX24Zo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D591BAF, serialNumber=C330387CD218C4CCFA522BC535D770755BCF7B6F
        Validity
            Not Before: Oct 10 04:03:50 2026 GMT
            Not After : Oct 12 04:03:50 2026 GMT
        Subject: CN=6ac9b926-fd5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bc:33:cc:c7:97:ba:81:9f:6b:67:83:9b:b6:
                    32:67:ee:85:80:bb:ae:d7:35:82:fb:8c:b3:c8:67:
                    34:6b:15:cc:68:7d:f0:74:2c:81:cd:27:07:a2:8a:
                    15:66:d5:2f:40:54:cc:07:1d:8a:69:99:4f:9d:59:
                    05:2d:01:67:75:c1:d8:85:00:b1:e1:57:d7:93:5f:
                    08:24:03:76:db:4f:aa:0f:56:b4:3e:14:3f:88:f0:
                    e4:58:0f:12:71:f1:6a:eb:ae:22:3a:e4:b1:49:3c:
                    36:a4:19:1c:e1:ec:ac:11:2b:14:04:f9:1e:58:26:
                    64:ba:d1:e9:fa:73:90:fd:d6:9b:43:e3:d8:40:60:
                    b6:be:51:6d:ec:80:e6:72:32:b4:c4:3f:33:c4:9b:
                    a4:12:24:eb:6b:e5:7d:4f:f7:b9:b7:af:5b:b8:86:
                    02:4d:c7:b2:02:68:ff:0c:4d:4c:1f:91:6a:6d:53:
                    79:41:97:cc:99:fa:92:29:aa:ae:a1:89:33:c1:7f:
                    c2:f4:2e:e3:98:c7:73:33:60:f0:0e:d5:5d:4b:ba:
                    f9:7d:fd:92:1d:7d:3c:07:78:db:8d:fa:72:7e:66:
                    1b:31:b4:c5:54:a5:5c:dd:d5:32:b8:51:d1:c7:b3:
                    05:02:e2:63:69:27:ef:43:ac:b3:8a:9d:8c:e8:5c:
                    1e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8D:75:F6:9D:8D:72:53:C6:29:87:0D:81:14:45:61:23:2C:15:E9
            X509v3 Authority Key Identifier:
                keyid:C3:30:38:7C:D2:18:C4:CC:FA:52:2B:C5:35:D7:70:75:5B:CF:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wzA4fNIYxMz6UivFNddwdVvPe28.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D591B/1F6B567CD7C111EE8F2917A2775412E6/wzA4fNIYxMz6UivFNddwdVvPe28.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:5a:b4:25:31:e3:ff:36:a6:d0:a3:29:54:20:cf:53:3d:66:
         46:6d:93:88:8c:b3:2a:3c:53:8b:9d:db:5e:2a:67:cd:e5:27:
         94:2e:50:16:0d:d2:54:ae:0d:73:f6:84:0c:86:a3:e3:43:cb:
         49:0c:55:3a:3a:27:41:75:5a:a9:79:01:3f:c2:73:e6:a5:32:
         b9:86:9b:eb:a6:5b:50:fc:c5:a3:ab:11:6c:a7:97:5d:c7:3d:
         af:ce:ef:cd:21:c2:4e:cf:ea:06:63:0b:11:7b:6c:95:af:d3:
         f9:59:80:67:98:3a:b1:94:f2:30:a4:6c:b7:3f:7a:d3:02:a7:
         de:75:6b:e8:3a:ba:92:5c:2d:59:60:84:a6:f5:b2:5b:a2:55:
         33:9b:20:f1:95:9f:e2:57:92:9b:4b:5c:7f:8a:9b:8d:76:af:
         a5:31:3c:9b:24:c1:0d:49:31:7f:59:92:8e:e7:92:fa:be:75:
         3e:ed:62:4d:ae:37:7f:fa:94:1a:e4:a6:ae:0c:50:c1:c2:6d:
         10:14:e2:28:29:e1:c2:ad:fd:c7:54:94:35:4f:67:2e:ae:d6:
         4e:40:8c:d2:24:f1:7e:4e:90:b1:5c:cd:77:ff:61:5d:5b:35:
         67:ba:a5:cb:a2:c8:3f:c6:79:de:7d:6e:33:dd:59:87:95:8c:
         eb:9b:4c:e3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA8wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDU5MUJBRjExMC8GA1UEBRMoQzMzMDM4N0NEMjE4QzRDQ0ZBNTIyQkM1MzVENzcw
NzU1QkNGN0I2RjAeFw0yNjEwMTAwNDAzNTBaFw0yNjEwMTIwNDAzNTBaMBgxFjAU
BgNVBAMTDTZhYzliOTI2LWZkNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDRvDPMx5e6gZ9rZ4ObtjJn7oWAu67XNYL7jLPIZzRrFcxoffB0LIHNJwei
ihVm1S9AVMwHHYppmU+dWQUtAWd1wdiFALHhV9eTXwgkA3bbT6oPVrQ+FD+I8ORY
DxJx8WrrriI65LFJPDakGRzh7KwRKxQE+R5YJmS60en6c5D91ptD49hAYLa+UW3s
gOZyMrTEPzPEm6QSJOtr5X1P97m3r1u4hgJNx7ICaP8MTUwfkWptU3lBl8yZ+pIp
qq6hiTPBf8L0LuOYx3MzYPAO1V1Luvl9/ZIdfTwHeNuN+nJ+ZhsxtMVUpVzd1TK4
UdHHswUC4mNpJ+9DrLOKnYzoXB4JAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfo11
9p2NclPGKYcNgRRFYSMsFekwHwYDVR0jBBgwFoAUwzA4fNIYxMz6UivFNddwdVvP
e28wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ1OTFCLzFGNkI1NjdDRDdDMTExRUU4RjI5MTdBMjc3NTQxMkU2L3d6QTRm
TklZeE16NlVpdkZOZGR3ZFZ2UGUyOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3d6QTRmTklZeE16NlVpdkZOZGR3ZFZ2UGUyOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDU5MUIvMUY2QjU2N0NEN0MxMTFFRThGMjkxN0EyNzc1
NDEyRTYvd3pBNGZOSVl4TXo2VWl2Rk5kZHdkVnZQZTI4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/WrQlMeP/NqbQoylUIM9TPWZGbZOI
jLMqPFOLndteKmfN5SeULlAWDdJUrg1z9oQMhqPjQ8tJDFU6OidBdVqpeQE/wnPm
pTK5hpvrpltQ/MWjqxFsp5ddxz2vzu/NIcJOz+oGYwsRe2yVr9P5WYBnmDqxlPIw
pGy3P3rTAqfedWvoOrqSXC1ZYISm9bJbolUzmyDxlZ/iV5KbS1x/ipuNdq+lMTyb
JMENSTF/WZKO55L6vnU+7WJNrjd/+pQa5KauDFDBwm0QFOIoKeHCrf3HVJQ1T2cu
rtZOQIzSJPF+TpCxXM13/2FdWzVnuqXLosg/xnnefW4z3VmHlYzrm0zj
-----END CERTIFICATE-----