Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
File:                     HNlmJ3URky060f0tMBT24WjMSOU.mft (raw, json)
Hash identifier:          dIEBqwLVZWH516Ra2/bHdcGN6+LLaMBbBHZQwmY5JJM=
Subject key identifier:   84:4C:F2:E4:2E:4E:BD:C1:3A:20:8E:60:8B:0A:2D:96:45:0F:0A:02
Authority key identifier: 1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5
Certificate issuer:       /CN=F36E2B69AF/serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
Certificate serial:       04E4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
Manifest number:          04E3
Signing time:             Mon 21 Sep 2026 03:25:52 +0000
Manifest this update:     Mon 21 Sep 2026 03:25:52 +0000
Manifest next update:     Wed 23 Sep 2026 03:25:52 +0000
Files and hashes:         1: HNlmJ3URky060f0tMBT24WjMSOU.crl (hash: dBTAYjuq41UgvuFA/19C5A0l1COsRZMctOlAGqAb87M=)
                          2: 14217AF4FD4611EDACE0A4484AD9E6FC.roa (hash: scusLfpX0zDQtYPg/Gz0vTNJwugRyOQOlFnS4UEvDsE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 03:25:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1252 (0x4e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E2B69AF, serialNumber=1CD966277511932D3AD1FD2D3014F6E168CC48E5
        Validity
            Not Before: Sep 21 03:25:52 2026 GMT
            Not After : Sep 23 03:25:52 2026 GMT
        Subject: CN=6ab0a3c0-8c8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:77:38:af:87:ba:ab:7a:67:e0:9c:17:ee:8b:
                    e2:86:3f:1f:96:96:eb:7f:24:b8:f6:46:7c:25:04:
                    19:34:8d:42:dd:94:96:62:9c:ce:7d:2d:6d:18:01:
                    e1:55:5a:7d:f6:9f:ce:5a:6b:a4:31:27:d7:7f:4c:
                    4d:33:62:2e:22:9b:ea:5f:24:93:72:90:93:9d:ae:
                    52:b1:bb:57:25:4b:b6:63:d9:03:1c:4f:b4:1a:33:
                    a2:a2:83:d7:ec:8a:02:1c:c3:f3:76:d6:c2:32:7c:
                    fa:05:96:c4:69:f7:22:6f:ee:e0:2c:3a:3f:03:af:
                    82:d9:08:0f:0b:f1:5a:db:87:e5:a0:c3:e7:e2:27:
                    a2:46:8c:52:5b:2d:56:f2:36:f4:f5:ae:8a:14:1d:
                    13:fd:21:dd:68:dd:fb:fe:4b:fe:38:46:1a:e7:1b:
                    e2:e7:ab:f6:29:be:09:79:81:fd:58:d7:99:56:61:
                    b0:d1:82:7e:71:c4:e4:16:66:22:de:76:e8:b3:c4:
                    80:51:c2:eb:ba:14:e2:88:1a:82:7f:57:7f:3b:ce:
                    3d:a6:6c:ce:ea:71:b2:03:e3:2c:d0:d8:5f:33:24:
                    21:9c:59:51:50:ff:2d:f1:9a:e2:88:97:7c:8c:31:
                    58:49:5b:6d:a1:9c:0d:30:29:aa:9d:1d:92:be:c9:
                    c5:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4C:F2:E4:2E:4E:BD:C1:3A:20:8E:60:8B:0A:2D:96:45:0F:0A:02
            X509v3 Authority Key Identifier:
                keyid:1C:D9:66:27:75:11:93:2D:3A:D1:FD:2D:30:14:F6:E1:68:CC:48:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HNlmJ3URky060f0tMBT24WjMSOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E2B69/1B6AC538F67811EDA33672194AD9E6FC/HNlmJ3URky060f0tMBT24WjMSOU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:49:e6:d1:82:8e:6d:b0:22:7e:a8:18:d4:a8:98:2b:dc:93:
         88:07:1b:fd:19:79:3f:d2:bd:bf:cc:02:0e:77:06:cf:62:2d:
         81:a6:40:fc:15:f8:9f:83:22:6c:ec:84:23:ca:af:3a:34:d8:
         9c:f8:89:fb:16:d1:cf:37:e8:3f:46:df:58:0a:d9:3e:1e:57:
         b4:b7:10:38:15:45:6e:55:cd:45:bf:6a:df:0c:90:a3:1c:11:
         b1:5d:c0:86:82:15:2f:e7:75:d8:9e:e9:75:83:50:c6:96:e3:
         1c:fa:bf:90:05:50:5d:52:40:7a:20:87:e9:11:e3:66:ca:a2:
         df:31:e7:ed:ae:9c:12:28:51:22:dd:d9:09:cb:98:7b:07:da:
         21:96:ed:b4:d4:f4:9e:4f:5d:90:0e:f8:2d:6f:e8:82:37:7f:
         a8:d1:51:76:1e:35:12:a0:a8:71:ef:10:97:91:fb:88:43:31:
         34:21:9c:bc:f6:19:a1:c3:16:19:d0:69:bb:a7:a3:79:73:1d:
         e0:0f:f2:3e:31:55:f5:2c:e4:20:15:32:c3:03:34:19:5a:41:
         e4:35:2c:d5:4a:68:9a:f9:58:fb:16:59:0c:17:59:be:e0:fd:
         17:78:7b:77:c9:de:a9:65:ff:41:07:34:f2:19:af:56:4b:6a:
         32:d9:e8:9e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBOQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTJCNjlBRjExMC8GA1UEBRMoMUNEOTY2Mjc3NTExOTMyRDNBRDFGRDJEMzAxNEY2
RTE2OENDNDhFNTAeFw0yNjA5MjEwMzI1NTJaFw0yNjA5MjMwMzI1NTJaMBgxFjAU
BgNVBAMTDTZhYjBhM2MwLThjOGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrdzivh7qremfgnBfui+KGPx+Wlut/JLj2RnwlBBk0jULdlJZinM59LW0Y
AeFVWn32n85aa6QxJ9d/TE0zYi4im+pfJJNykJOdrlKxu1clS7Zj2QMcT7QaM6Ki
g9fsigIcw/N21sIyfPoFlsRp9yJv7uAsOj8Dr4LZCA8L8Vrbh+Wgw+fiJ6JGjFJb
LVbyNvT1rooUHRP9Id1o3fv+S/44RhrnG+Lnq/Ypvgl5gf1Y15lWYbDRgn5xxOQW
ZiLeduizxIBRwuu6FOKIGoJ/V387zj2mbM7qcbID4yzQ2F8zJCGcWVFQ/y3xmuKI
l3yMMVhJW22hnA0wKaqdHZK+ycU5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhEzy
5C5OvcE6II5giwotlkUPCgIwHwYDVR0jBBgwFoAUHNlmJ3URky060f0tMBT24WjM
SOUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUyQjY5LzFCNkFDNTM4RjY3ODExRURBMzM2NzIxOTRBRDlFNkZDL0hObG1K
M1VSa3kwNjBmMHRNQlQyNFdqTVNPVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hObG1KM1VSa3kwNjBmMHRNQlQyNFdqTVNPVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTJCNjkvMUI2QUM1MzhGNjc4MTFFREEzMzY3MjE5NEFE
OUU2RkMvSE5sbUozVVJreTA2MGYwdE1CVDI0V2pNU09VLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAGSebRgo5tsCJ+qBjUqJgr3JOIBxv9
GXk/0r2/zAIOdwbPYi2BpkD8FfifgyJs7IQjyq86NNic+In7FtHPN+g/Rt9YCtk+
Hle0txA4FUVuVc1Fv2rfDJCjHBGxXcCGghUv53XYnul1g1DGluMc+r+QBVBdUkB6
IIfpEeNmyqLfMeftrpwSKFEi3dkJy5h7B9ohlu201PSeT12QDvgtb+iCN3+o0VF2
HjUSoKhx7xCXkfuIQzE0IZy89hmhwxYZ0Gm7p6N5cx3gD/I+MVX1LOQgFTLDAzQZ
WkHkNSzVSmia+Vj7FlkMF1m+4P0XeHt3yd6pZf9BBzTyGa9WS2oy2eie
-----END CERTIFICATE-----