Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
File:                     TNw7PW0GCBEg29bsI2NRx172TMw.mft (raw, json)
Hash identifier:          2AHbqkMqrKFoqJsDClcICku7ULmYUtgVK4+Bo0YQZE0=
Subject key identifier:   3D:C3:FC:3D:F2:5D:49:BE:12:77:8A:5E:61:D2:8B:15:55:28:3B:F0
Authority key identifier: 4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC
Certificate issuer:       /CN=F36DA6FBAF/serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
Certificate serial:       0253
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
Manifest number:          024D
Signing time:             Sun 04 Oct 2026 04:47:44 +0000
Manifest this update:     Sun 04 Oct 2026 04:47:43 +0000
Manifest next update:     Tue 06 Oct 2026 04:47:43 +0000
Files and hashes:         1: TNw7PW0GCBEg29bsI2NRx172TMw.crl (hash: MtWDmzcnwuEz5JHLBUt/c4IuCLq0ouAZZjGpUaoJdm4=)
                          2: BFA5C1B46EE511F182B2B000CF1D38B0.roa (hash: RHRxsNRvUbA0pfWNBDtdMx+zqQGU1sO3I81rRWeYWoQ=)
                          3: 186A261E6EE611F19A57FD00CF1D38B0.roa (hash: xAWYoSxpWYZMxcb1kJT35Bivi41+IMGlrVrYofRUoZM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 04:47:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 595 (0x253)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DA6FBAF, serialNumber=4CDC3B3D6D06081120DBD6EC236351C75EF64CCC
        Validity
            Not Before: Oct  4 04:47:43 2026 GMT
            Not After : Oct  6 04:47:43 2026 GMT
        Subject: CN=6ac1da70-0ed4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:88:93:67:e4:7f:40:7c:87:4d:76:8c:0a:b5:
                    bb:6e:39:c6:9b:eb:e7:fa:8e:3b:c5:90:b1:01:39:
                    7f:d9:48:ee:f7:85:be:2d:f0:16:2c:1a:80:27:12:
                    61:94:f3:3e:b5:79:34:a4:fd:d2:36:ab:a6:8e:1d:
                    ba:dd:d2:41:3e:db:d8:ca:72:fa:4d:e6:73:9e:fe:
                    c1:fb:78:f2:90:33:86:69:8b:d8:43:bb:bc:9f:8b:
                    70:a0:5a:b2:ea:4a:db:8c:e7:f2:80:91:ab:80:44:
                    89:2e:31:2d:e9:2d:1f:2e:22:a6:65:23:67:ea:2a:
                    ee:7b:4a:1b:b6:2e:86:f4:d3:de:0e:34:93:76:11:
                    26:9d:b3:7d:27:1a:5b:01:03:ea:01:bb:2e:5a:77:
                    88:2c:71:fa:e9:bc:1b:fa:4b:3d:3f:70:25:e3:72:
                    7a:ff:9e:17:d3:1b:b1:c9:60:97:c5:66:21:0e:d0:
                    55:61:de:d2:ba:e9:21:74:6f:c7:08:ac:bb:5d:22:
                    a6:49:31:b8:40:b4:8b:97:d4:97:c4:83:b2:53:c5:
                    8e:fa:d4:d8:f5:9b:97:34:82:bb:64:62:2d:a1:81:
                    12:4e:cb:f7:f2:3c:3b:8b:3d:12:ff:2a:ed:7a:3f:
                    70:72:56:4c:1b:1d:25:9c:af:43:bb:54:d8:37:9d:
                    69:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C3:FC:3D:F2:5D:49:BE:12:77:8A:5E:61:D2:8B:15:55:28:3B:F0
            X509v3 Authority Key Identifier:
                keyid:4C:DC:3B:3D:6D:06:08:11:20:DB:D6:EC:23:63:51:C7:5E:F6:4C:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/TNw7PW0GCBEg29bsI2NRx172TMw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DA6FB/42AEAED8FE6011EF8424817E762E951A/TNw7PW0GCBEg29bsI2NRx172TMw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:26:ef:03:99:a5:54:2a:4a:35:01:7f:cb:22:4e:a9:90:7b:
         db:d1:e7:c2:94:be:45:f5:b6:f1:c5:29:95:66:01:d0:be:6d:
         72:96:bb:b1:da:a0:6f:fb:b6:0a:4a:e0:e3:bc:88:02:c0:7f:
         b3:5f:bd:d1:3d:f6:2f:91:69:f9:0a:6b:38:e1:c5:61:e2:b7:
         49:5d:fc:65:4f:2e:3c:a4:7a:35:fe:ca:42:8f:6b:d4:d2:25:
         36:4f:da:ea:17:63:9a:f4:d3:26:ab:38:79:19:bd:83:19:4e:
         2a:53:35:f0:2d:5d:58:db:62:16:36:02:74:7c:d8:10:03:0a:
         13:14:53:b0:f3:55:3d:0a:73:cf:92:0b:5e:f2:bb:53:50:80:
         39:06:30:c8:aa:6d:45:30:67:5d:6a:c0:4e:ce:e2:11:6e:61:
         81:a5:2d:c8:ab:f5:12:44:70:93:2b:f4:d4:83:71:31:fd:42:
         31:ac:7b:64:b3:b6:92:ba:7a:52:43:9e:ba:e2:a1:4f:3b:59:
         1e:fb:7f:66:73:ac:a2:fe:d6:b6:30:d9:e8:29:1a:3f:3d:a6:
         95:34:71:a4:1a:d9:9d:22:09:d0:e1:65:c1:50:25:0d:b6:37:
         18:5c:f6:e4:55:a4:cb:f4:93:df:57:c9:12:a8:ed:a4:84:2e:
         21:d2:55:6f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAlMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REE2RkJBRjExMC8GA1UEBRMoNENEQzNCM0Q2RDA2MDgxMTIwREJENkVDMjM2MzUx
Qzc1RUY2NENDQzAeFw0yNjEwMDQwNDQ3NDNaFw0yNjEwMDYwNDQ3NDNaMBgxFjAU
BgNVBAMTDTZhYzFkYTcwLTBlZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCniJNn5H9AfIdNdowKtbtuOcab6+f6jjvFkLEBOX/ZSO73hb4t8BYsGoAn
EmGU8z61eTSk/dI2q6aOHbrd0kE+29jKcvpN5nOe/sH7ePKQM4Zpi9hDu7yfi3Cg
WrLqStuM5/KAkauARIkuMS3pLR8uIqZlI2fqKu57Shu2Lob0094ONJN2ESads30n
GlsBA+oBuy5ad4gscfrpvBv6Sz0/cCXjcnr/nhfTG7HJYJfFZiEO0FVh3tK66SF0
b8cIrLtdIqZJMbhAtIuX1JfEg7JTxY761Nj1m5c0grtkYi2hgRJOy/fyPDuLPRL/
Ku16P3ByVkwbHSWcr0O7VNg3nWmLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPcP8
PfJdSb4Sd4peYdKLFVUoO/AwHwYDVR0jBBgwFoAUTNw7PW0GCBEg29bsI2NRx172
TMwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRBNkZCLzQyQUVBRUQ4RkU2MDExRUY4NDI0ODE3RTc2MkU5NTFBL1ROdzdQ
VzBHQ0JFZzI5YnNJMk5SeDE3MlRNdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1ROdzdQVzBHQ0JFZzI5YnNJMk5SeDE3MlRNdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REE2RkIvNDJBRUFFRDhGRTYwMTFFRjg0MjQ4MTdFNzYy
RTk1MUEvVE53N1BXMEdDQkVnMjlic0kyTlJ4MTcyVE13Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLJu8DmaVUKko1AX/LIk6pkHvb0efC
lL5F9bbxxSmVZgHQvm1ylrux2qBv+7YKSuDjvIgCwH+zX73RPfYvkWn5Cms44cVh
4rdJXfxlTy48pHo1/spCj2vU0iU2T9rqF2Oa9NMmqzh5Gb2DGU4qUzXwLV1Y22IW
NgJ0fNgQAwoTFFOw81U9CnPPkgte8rtTUIA5BjDIqm1FMGddasBOzuIRbmGBpS3I
q/USRHCTK/TUg3Ex/UIxrHtks7aSunpSQ5664qFPO1ke+39mc6yi/ta2MNnoKRo/
PaaVNHGkGtmdIgnQ4WXBUCUNtjcYXPbkVaTL9JPfV8kSqO2khC4h0lVv
-----END CERTIFICATE-----