Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
File:                     UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft (raw, json)
Hash identifier:          /vBgBGlmGH6KyHIe0CB+MGt5F7D2J0kp644tpcwvjGM=
Subject key identifier:   06:5E:EF:7F:13:70:76:89:65:15:D4:7C:DC:D7:83:D2:65:CD:A2:7F
Authority key identifier: 52:30:7E:40:B6:BD:C4:C4:C9:AD:DE:8C:5A:39:3F:77:C6:CA:4A:71
Certificate issuer:       /CN=F3656325AF/serialNumber=52307E40B6BDC4C4C9ADDE8C5A393F77C6CA4A71
Certificate serial:       3F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UjB-QLa9xMTJrd6MWjk_d8bKSnE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
Manifest number:          3E
Signing time:             Tue 03 Nov 2026 05:53:37 +0000
Manifest this update:     Tue 03 Nov 2026 05:53:37 +0000
Manifest next update:     Thu 05 Nov 2026 05:53:37 +0000
Files and hashes:         1: UjB-QLa9xMTJrd6MWjk_d8bKSnE.crl (hash: 2gs7XvR2ELC9LtKMcOLLo1ipc4x4lVWayVsH+XIklzY=)
                          2: 79C18868A86011F19F3763F9CE1D38B0.roa (hash: vaoELsOFVOg4HJw3Qs5sWp61mQ8soCkWjOfsBwURWO4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UjB-QLa9xMTJrd6MWjk_d8bKSnE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 05 Nov 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656325AF, serialNumber=52307E40B6BDC4C4C9ADDE8C5A393F77C6CA4A71
        Validity
            Not Before: Nov  3 05:53:37 2026 GMT
            Not After : Nov  5 05:53:37 2026 GMT
        Subject: CN=6ae976e1-ed65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:a1:2f:23:f0:5d:21:8a:3c:8a:43:b4:ed:25:
                    12:d3:1a:70:04:e0:26:f1:25:6c:05:ad:e8:2d:91:
                    d6:e9:18:94:a6:f1:72:d2:44:ac:4d:d7:9f:66:fc:
                    09:6a:ff:67:e9:5b:70:34:7e:e0:31:59:d7:7c:66:
                    05:5e:f9:b4:ab:ce:16:4f:07:cb:1d:07:38:73:03:
                    77:7c:54:c1:c5:95:bd:6e:e1:bc:7c:e2:cf:8f:7f:
                    8d:d6:e0:27:e6:20:44:89:bd:83:61:9d:56:65:35:
                    3e:4e:09:e6:e5:26:c4:ae:23:bf:6d:d9:2b:31:52:
                    41:9e:90:b5:7d:31:9b:46:e4:0a:30:da:8b:86:42:
                    46:d9:40:0f:77:d5:bb:45:0b:1e:3d:dd:3a:b3:e5:
                    da:df:ba:64:71:e1:fd:ff:2d:33:ce:e4:4a:2f:08:
                    ea:e5:a3:1c:a8:40:1e:24:5c:30:e0:b0:f6:ab:bb:
                    07:b0:d1:b5:4b:c6:7c:ae:42:55:ac:38:3d:fa:83:
                    95:7b:e9:98:7b:1a:14:2d:44:e3:92:95:c2:b8:fc:
                    ac:10:6c:7a:6e:6d:38:08:33:f3:07:4a:b1:0b:0a:
                    8c:a8:55:08:40:c6:7d:fa:85:cb:66:69:2d:18:1f:
                    1a:94:86:05:fe:08:76:24:8a:ec:50:0d:84:ba:01:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:5E:EF:7F:13:70:76:89:65:15:D4:7C:DC:D7:83:D2:65:CD:A2:7F
            X509v3 Authority Key Identifier:
                keyid:52:30:7E:40:B6:BD:C4:C4:C9:AD:DE:8C:5A:39:3F:77:C6:CA:4A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UjB-QLa9xMTJrd6MWjk_d8bKSnE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656325/2D68D3A4A86011F1A75746F9CE1D38B0/UjB-QLa9xMTJrd6MWjk_d8bKSnE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:92:21:4d:0a:06:31:2f:d8:5d:c6:d2:6d:c8:cf:ac:e9:40:
         5e:70:18:26:d8:8b:df:94:54:62:d7:ce:26:6c:b4:b7:93:b1:
         17:3c:8e:63:ac:c1:cf:c7:34:d5:dc:08:17:ec:b5:94:9e:e4:
         8b:e9:9d:5e:ea:a9:f0:51:be:ff:6a:be:f4:b9:0d:18:dd:47:
         fe:7b:1f:a1:a7:82:d8:dd:0e:22:bf:c5:c2:da:ae:a2:1d:15:
         39:84:00:06:1a:22:45:e7:0a:8a:e7:24:bc:0a:db:d9:a3:7b:
         f8:8f:34:92:e7:c8:44:22:d2:c9:85:8b:f8:e2:8d:b4:ed:e5:
         b0:24:ae:eb:2c:05:fd:33:67:70:26:29:35:95:99:d7:30:9a:
         4d:03:48:d5:0f:04:b8:7e:d0:f7:d9:64:92:c5:8e:ea:39:8d:
         a4:0b:b1:1d:15:58:8d:3c:17:d1:37:89:ef:d9:ea:62:38:d7:
         97:5c:0c:3d:70:4b:d9:81:21:b3:e9:69:e4:ce:04:10:25:21:
         25:43:87:99:ae:e3:11:50:87:ce:5d:e5:f5:05:5b:3f:bf:c9:
         2e:5d:ad:65:db:20:62:c8:fd:f3:3a:dd:31:f0:0f:b7:33:55:
         51:5f:1f:84:06:23:86:0b:6a:a8:2d:78:42:5f:45:1f:32:bc:
         d7:9a:20:d6
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBPzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY1
NjMyNUFGMTEwLwYDVQQFEyg1MjMwN0U0MEI2QkRDNEM0QzlBRERFOEM1QTM5M0Y3
N0M2Q0E0QTcxMB4XDTI2MTEwMzA1NTMzN1oXDTI2MTEwNTA1NTMzN1owGDEWMBQG
A1UEAxMNNmFlOTc2ZTEtZWQ2NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANShLyPwXSGKPIpDtO0lEtMacATgJvElbAWt6C2R1ukYlKbxctJErE3Xn2b8
CWr/Z+lbcDR+4DFZ13xmBV75tKvOFk8Hyx0HOHMDd3xUwcWVvW7hvHziz49/jdbg
J+YgRIm9g2GdVmU1Pk4J5uUmxK4jv23ZKzFSQZ6QtX0xm0bkCjDai4ZCRtlAD3fV
u0ULHj3dOrPl2t+6ZHHh/f8tM87kSi8I6uWjHKhAHiRcMOCw9qu7B7DRtUvGfK5C
Vaw4PfqDlXvpmHsaFC1E45KVwrj8rBBsem5tOAgz8wdKsQsKjKhVCEDGffqFy2Zp
LRgfGpSGBf4IdiSK7FANhLoB04MCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQGXu9/
E3B2iWUV1Hzc14PSZc2ifzAfBgNVHSMEGDAWgBRSMH5Atr3ExMmt3oxaOT93xspK
cTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NTYzMjUvMkQ2OEQzQTRBODYwMTFGMUE3NTc0NkY5Q0UxRDM4QjAvVWpCLVFM
YTl4TVRKcmQ2TVdqa19kOGJLU25FLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvVWpCLVFMYTl4TVRKcmQ2TVdqa19kOGJLU25FLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY1NjMyNS8yRDY4RDNBNEE4NjAxMUYxQTc1NzQ2RjlDRTFE
MzhCMC9VakItUUxhOXhNVEpyZDZNV2prX2Q4YktTbkUubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAHWSIU0KBjEv2F3G0m3Iz6zpQF5wGCbY
i9+UVGLXziZstLeTsRc8jmOswc/HNNXcCBfstZSe5IvpnV7qqfBRvv9qvvS5DRjd
R/57H6GngtjdDiK/xcLarqIdFTmEAAYaIkXnCornJLwK29mje/iPNJLnyEQi0smF
i/jijbTt5bAkrussBf0zZ3AmKTWVmdcwmk0DSNUPBLh+0PfZZJLFjuo5jaQLsR0V
WI08F9E3ie/Z6mI415dcDD1wS9mBIbPpaeTOBBAlISVDh5mu4xFQh85d5fUFWz+/
yS5drWXbIGLI/fM63THwD7czVVFfH4QGI4YLaqgteEJfRR8yvNeaINY=
-----END CERTIFICATE-----