Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
File:                     hPAfwzjdLBQepF0xeyEfds9dABU.mft (raw, json)
Hash identifier:          a7uhonaSXWvpkb594M+NwP1+7M/wZdOx0z7B2Df2N4w=
Subject key identifier:   40:C6:58:BB:0B:EB:AD:71:A5:FE:A0:AD:0B:09:ED:B3:B9:47:1E:C6
Authority key identifier: 84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15
Certificate issuer:       /CN=F368F4A1AF/serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
Certificate serial:       0323
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
Manifest number:          0321
Signing time:             Fri 04 Sep 2026 04:24:21 +0000
Manifest this update:     Fri 04 Sep 2026 04:24:20 +0000
Manifest next update:     Sun 06 Sep 2026 04:24:20 +0000
Files and hashes:         1: hPAfwzjdLBQepF0xeyEfds9dABU.crl (hash: Ij803PUW0Rs7EaTuHvN4xrlAY3o9y585DgWFPhNZuKw=)
                          2: D2DEEBB23F6111EF86F2D8A2762E951A.roa (hash: AlCe+r5bA6wxPrWSPJ60MOFRAHZSRAZJTKh0IUzq6Is=)
                          3: A69C50CE3F5E11EF9DDD6C8C762E951A.roa (hash: 80ny1NpqsV9rSVRUHTW3nCJZGXl2CugmUA2kHB+WbzU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Sep 2026 04:24:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 803 (0x323)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F4A1AF, serialNumber=84F01FC338DD2C141EA45D317B211F76CF5D0015
        Validity
            Not Before: Sep  4 04:24:20 2026 GMT
            Not After : Sep  6 04:24:20 2026 GMT
        Subject: CN=6a9a47f5-bfa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:a9:6b:62:85:8e:e6:eb:eb:61:a9:cb:4b:
                    76:66:a6:d2:f4:3e:a8:d8:d9:da:68:3f:d0:73:f5:
                    11:20:4d:91:4d:21:9d:39:9e:62:30:3a:89:b0:31:
                    90:85:32:c4:2b:bb:9a:06:ea:f5:ac:5e:9a:89:e0:
                    c1:2f:50:f7:c3:55:68:28:60:fd:3c:7c:e5:f9:61:
                    d7:d0:8f:c4:a2:a9:a5:85:49:18:24:89:bd:f5:e0:
                    b0:4c:55:76:13:bf:91:35:10:17:75:cf:3e:be:75:
                    87:4f:e3:d9:d0:0f:2b:54:7b:68:b1:59:af:42:f2:
                    81:69:93:46:f3:c6:76:45:7b:6c:80:10:2d:7e:3e:
                    b4:e6:80:74:36:cb:08:20:2d:3f:de:7b:11:76:e6:
                    b4:0d:45:07:5f:9f:e8:26:e8:f5:f7:56:ed:8c:4d:
                    c5:7c:64:39:2c:22:ca:30:1d:99:4a:4f:c9:90:d0:
                    75:5d:4d:a5:e3:4b:aa:d8:ab:54:4f:74:1d:41:94:
                    fc:c0:ec:01:a5:37:de:c5:13:ce:ca:42:0b:44:8d:
                    91:00:7b:8d:ac:35:34:f5:f6:20:34:03:23:e6:ba:
                    f8:26:5a:4a:ad:5b:ec:8f:40:03:29:c7:d9:f7:d5:
                    46:34:9b:c5:1c:a7:30:5a:eb:73:cf:77:fa:48:9a:
                    48:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:C6:58:BB:0B:EB:AD:71:A5:FE:A0:AD:0B:09:ED:B3:B9:47:1E:C6
            X509v3 Authority Key Identifier:
                keyid:84:F0:1F:C3:38:DD:2C:14:1E:A4:5D:31:7B:21:1F:76:CF:5D:00:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hPAfwzjdLBQepF0xeyEfds9dABU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F4A1/798026D03F5C11EFB83C797E762E951A/hPAfwzjdLBQepF0xeyEfds9dABU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:f7:1e:86:de:ae:7c:d2:96:d6:fc:3d:1b:e3:c8:f3:fb:d9:
         45:00:7e:a2:68:db:c1:2a:78:59:4d:61:c9:2a:51:bc:b2:c1:
         0c:d2:6a:9b:15:ea:27:77:8b:38:6a:ce:67:01:71:67:09:7f:
         82:5a:b0:e7:66:c0:e0:6a:5d:74:68:85:0e:aa:e8:bb:b9:38:
         1a:9d:2d:d0:55:f4:30:bc:e9:80:2a:54:4e:e0:04:56:78:3a:
         b0:96:23:b4:da:af:15:1a:a3:50:a1:6d:26:0d:7b:7d:7d:d0:
         c7:10:40:ce:0a:25:9d:58:31:21:4a:05:f0:17:66:da:3d:50:
         75:36:22:77:3f:46:7e:27:36:9e:1c:cd:d3:a8:b1:83:f3:e1:
         35:af:1a:21:30:f9:e8:85:34:ff:c2:fa:ff:55:5a:03:cb:24:
         1f:ed:8c:2f:c9:7e:99:15:b8:cc:cb:2d:48:05:c7:06:da:46:
         7b:86:bc:51:66:80:0f:4f:3d:4a:77:52:79:36:b3:f1:14:66:
         8e:27:2b:6d:c8:b8:d8:c7:a7:82:3f:5d:6a:7a:e5:cf:a5:8b:
         d4:00:65:b4:bc:0c:0b:46:00:91:d0:52:7a:2d:12:20:ff:fc:
         a8:72:44:48:fd:b4:f6:43:c5:ac:65:d5:87:2f:ed:e7:69:12:
         4d:c3:b8:1d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAyMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEY0QTFBRjExMC8GA1UEBRMoODRGMDFGQzMzOEREMkMxNDFFQTQ1RDMxN0IyMTFG
NzZDRjVEMDAxNTAeFw0yNjA5MDQwNDI0MjBaFw0yNjA5MDYwNDI0MjBaMBgxFjAU
BgNVBAMTDTZhOWE0N2Y1LWJmYTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDialrYoWO5uvrYanLS3ZmptL0PqjY2dpoP9Bz9REgTZFNIZ05nmIwOomw
MZCFMsQru5oG6vWsXpqJ4MEvUPfDVWgoYP08fOX5YdfQj8SiqaWFSRgkib314LBM
VXYTv5E1EBd1zz6+dYdP49nQDytUe2ixWa9C8oFpk0bzxnZFe2yAEC1+PrTmgHQ2
ywggLT/eexF25rQNRQdfn+gm6PX3Vu2MTcV8ZDksIsowHZlKT8mQ0HVdTaXjS6rY
q1RPdB1BlPzA7AGlN97FE87KQgtEjZEAe42sNTT19iA0AyPmuvgmWkqtW+yPQAMp
x9n31UY0m8UcpzBa63PPd/pImkiDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQMZY
uwvrrXGl/qCtCwnts7lHHsYwHwYDVR0jBBgwFoAUhPAfwzjdLBQepF0xeyEfds9d
ABUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhGNEExLzc5ODAyNkQwM0Y1QzExRUZCODNDNzk3RTc2MkU5NTFBL2hQQWZ3
empkTEJRZXBGMHhleUVmZHM5ZEFCVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hQQWZ3empkTEJRZXBGMHhleUVmZHM5ZEFCVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OEY0QTEvNzk4MDI2RDAzRjVDMTFFRkI4M0M3OTdFNzYy
RTk1MUEvaFBBZnd6amRMQlFlcEYweGV5RWZkczlkQUJVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA/9x6G3q580pbW/D0b48jz+9lFAH6i
aNvBKnhZTWHJKlG8ssEM0mqbFeond4s4as5nAXFnCX+CWrDnZsDgal10aIUOqui7
uTganS3QVfQwvOmAKlRO4ARWeDqwliO02q8VGqNQoW0mDXt9fdDHEEDOCiWdWDEh
SgXwF2baPVB1NiJ3P0Z+JzaeHM3TqLGD8+E1rxohMPnohTT/wvr/VVoDyyQf7Ywv
yX6ZFbjMyy1IBccG2kZ7hrxRZoAPTz1Kd1J5NrPxFGaOJyttyLjYx6eCP11qeuXP
pYvUAGW0vAwLRgCR0FJ6LRIg//yockRI/bT2Q8WsZdWHL+3naRJNw7gd
-----END CERTIFICATE-----