Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
File:                     QiUOABGQATIiltvNEo4jCi0GSmM.mft (raw, json)
Hash identifier:          GNuxwWxDM1gi40HsiIg1Ds5cuMA2qNXbHeFeQydqbqo=
Subject key identifier:   E7:42:DF:A2:91:71:7F:57:E6:B5:73:67:5C:E7:F7:92:C2:1E:26:BE
Authority key identifier: 42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63
Certificate issuer:       /CN=F36D8020AF/serialNumber=42250E00119001322296DBCD128E230A2D064A63
Certificate serial:       0138
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
Manifest number:          0138
Signing time:             Tue 22 Sep 2026 05:15:23 +0000
Manifest this update:     Tue 22 Sep 2026 05:15:22 +0000
Manifest next update:     Thu 24 Sep 2026 05:15:22 +0000
Files and hashes:         1: QiUOABGQATIiltvNEo4jCi0GSmM.crl (hash: dqUwGZr2Rl2/80q/M+PZImQTahKgVsp9yvyEK59fVXw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 312 (0x138)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D8020AF, serialNumber=42250E00119001322296DBCD128E230A2D064A63
        Validity
            Not Before: Sep 22 05:15:22 2026 GMT
            Not After : Sep 24 05:15:22 2026 GMT
        Subject: CN=6ab20eeb-6236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:91:4c:d0:0c:05:33:77:df:04:93:a1:3a:09:
                    f5:ab:e7:2e:81:09:0d:37:6f:c2:d5:0f:25:53:9d:
                    24:d7:95:99:ab:f4:a5:69:e2:a6:91:a6:1d:ef:78:
                    c6:31:05:93:c3:3f:c6:5c:9b:de:eb:bd:02:17:78:
                    cb:8d:56:a4:7e:c3:5e:b1:9a:8a:07:9e:68:05:d3:
                    e6:c4:9d:31:06:56:99:1d:f0:9a:1e:3e:ae:b7:dd:
                    7a:2f:c2:01:f2:cb:8e:0e:73:29:46:3e:d7:f4:d1:
                    d1:00:7c:81:7e:d3:90:c9:5a:dd:a4:bb:39:8f:e2:
                    8f:1b:a3:a2:0d:b2:2c:35:46:a2:a4:00:4a:52:55:
                    e2:29:26:89:83:e9:a2:57:4c:20:a7:13:54:ec:c8:
                    23:8d:97:46:65:25:e1:3a:48:e9:7f:df:0e:79:0d:
                    16:80:4a:a9:32:09:6c:b9:d2:ad:00:3c:f8:fc:4e:
                    fa:ae:42:b0:f7:c7:99:32:36:aa:59:ab:f0:21:4d:
                    a6:f4:39:02:4e:0e:82:b6:b2:aa:b4:0e:67:37:9c:
                    44:cd:08:bf:17:26:00:5b:5f:b9:89:dd:08:e8:21:
                    16:5d:85:3d:fe:c0:9e:0f:ad:90:30:a8:6b:3e:4c:
                    8e:72:b7:9d:09:c7:ae:ec:c5:6f:1f:17:14:6a:a1:
                    ed:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:42:DF:A2:91:71:7F:57:E6:B5:73:67:5C:E7:F7:92:C2:1E:26:BE
            X509v3 Authority Key Identifier:
                keyid:42:25:0E:00:11:90:01:32:22:96:DB:CD:12:8E:23:0A:2D:06:4A:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QiUOABGQATIiltvNEo4jCi0GSmM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D8020/0AF51ABEC39911F0BBCE1889DAE4EC9C/QiUOABGQATIiltvNEo4jCi0GSmM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:92:ca:54:b1:e3:44:33:d8:0c:61:3a:e8:be:6d:b2:c1:27:
         cb:33:0b:fb:1a:f8:24:f6:a2:e9:07:60:50:ed:40:9f:4f:6e:
         e6:87:38:49:ab:9e:eb:c1:19:76:97:06:47:17:ab:72:36:52:
         0c:02:cd:ee:25:d7:0d:72:c6:86:cf:dd:db:7d:31:a0:9f:ce:
         37:ef:7f:8b:df:b9:e2:d6:3d:c3:2a:5e:47:b6:60:3f:98:d3:
         ee:9a:d2:7b:76:c7:9c:cd:42:66:3d:dd:32:77:ec:a1:63:58:
         1a:2e:1a:05:65:4d:7b:ee:d0:39:8d:97:b9:73:99:d6:50:e1:
         12:1f:05:89:3f:77:b1:f8:95:b4:f8:f6:61:85:f4:63:ba:26:
         1f:ed:c2:05:34:40:58:44:ef:81:0c:f1:6b:81:ee:27:52:ac:
         bc:5a:50:a8:b5:36:9d:f6:99:91:ff:6c:83:29:b0:7e:8f:62:
         20:ac:59:dd:aa:db:9b:b3:09:ea:a3:5a:ac:3a:f5:b2:e3:b6:
         58:bd:9a:95:0c:ca:9a:72:22:58:68:92:70:fd:36:22:47:c5:
         73:a0:18:aa:9f:f7:ab:05:a0:88:19:03:66:39:66:af:04:1f:
         85:46:bb:f1:35:56:06:98:d9:3d:4a:75:69:ab:d2:e7:2f:bc:
         21:3d:6b:19
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICATgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDgwMjBBRjExMC8GA1UEBRMoNDIyNTBFMDAxMTkwMDEzMjIyOTZEQkNEMTI4RTIz
MEEyRDA2NEE2MzAeFw0yNjA5MjIwNTE1MjJaFw0yNjA5MjQwNTE1MjJaMBgxFjAU
BgNVBAMTDTZhYjIwZWViLTYyMzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCqkUzQDAUzd98Ek6E6CfWr5y6BCQ03b8LVDyVTnSTXlZmr9KVp4qaRph3v
eMYxBZPDP8Zcm97rvQIXeMuNVqR+w16xmooHnmgF0+bEnTEGVpkd8JoePq633Xov
wgHyy44OcylGPtf00dEAfIF+05DJWt2kuzmP4o8bo6INsiw1RqKkAEpSVeIpJomD
6aJXTCCnE1TsyCONl0ZlJeE6SOl/3w55DRaASqkyCWy50q0APPj8TvquQrD3x5ky
NqpZq/AhTab0OQJODoK2sqq0Dmc3nETNCL8XJgBbX7mJ3QjoIRZdhT3+wJ4PrZAw
qGs+TI5yt50Jx67sxW8fFxRqoe35AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU50Lf
opFxf1fmtXNnXOf3ksIeJr4wHwYDVR0jBBgwFoAUQiUOABGQATIiltvNEo4jCi0G
SmMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQ4MDIwLzBBRjUxQUJFQzM5OTExRjBCQkNFMTg4OURBRTRFQzlDL1FpVU9B
QkdRQVRJaWx0dk5FbzRqQ2kwR1NtTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FpVU9BQkdRQVRJaWx0dk5FbzRqQ2kwR1NtTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDgwMjAvMEFGNTFBQkVDMzk5MTFGMEJCQ0UxODg5REFF
NEVDOUMvUWlVT0FCR1FBVElpbHR2TkVvNGpDaTBHU21NLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7kspUseNEM9gMYTrovm2ywSfLMwv7
Gvgk9qLpB2BQ7UCfT27mhzhJq57rwRl2lwZHF6tyNlIMAs3uJdcNcsaGz93bfTGg
n84373+L37ni1j3DKl5HtmA/mNPumtJ7dseczUJmPd0yd+yhY1gaLhoFZU177tA5
jZe5c5nWUOESHwWJP3ex+JW0+PZhhfRjuiYf7cIFNEBYRO+BDPFrge4nUqy8WlCo
tTad9pmR/2yDKbB+j2IgrFndqtubswnqo1qsOvWy47ZYvZqVDMqaciJYaJJw/TYi
R8VzoBiqn/erBaCIGQNmOWavBB+FRrvxNVYGmNk9SnVpq9LnL7whPWsZ
-----END CERTIFICATE-----