Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
File:                     CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft (raw, json)
Hash identifier:          HpB+9Opx0/oX+R8kQYqE5dYfuQdrYSOtE+0+E+7C8n8=
Subject key identifier:   84:D1:7A:BB:71:FC:28:C5:8D:F2:F4:71:F5:E3:0B:12:CB:D5:E3:EF
Authority key identifier: 09:38:50:D7:F4:EA:19:74:94:49:6C:47:78:F0:42:F5:B6:7D:08:04
Certificate issuer:       /CN=F36C89CDAR/serialNumber=093850D7F4EA197494496C4778F042F5B67D0804
Certificate serial:       77
Authority info access:    rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
Manifest number:          76
Signing time:             Sun 01 Nov 2026 05:44:00 +0000
Manifest this update:     Sun 01 Nov 2026 05:44:00 +0000
Manifest next update:     Tue 03 Nov 2026 05:44:00 +0000
Files and hashes:         1: CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl (hash: ThicbfBdB991fSYDfw4EOnjdY5pdMF3bn8kptNnCvkw=)
                          2: 80B35B167DBC11F186B53FF6CE1D38B0.roa (hash: mp9WTiiEl564d5f5b3Mt3Uat+rXqCkk3Pof9oq0Krno=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
                          rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 03 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C89CDAR, serialNumber=093850D7F4EA197494496C4778F042F5B67D0804
        Validity
            Not Before: Nov  1 05:44:00 2026 GMT
            Not After : Nov  3 05:44:00 2026 GMT
        Subject: CN=6ae6d1a0-d256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:08:e8:66:aa:e1:6c:28:b5:59:92:d7:b2:5b:
                    7d:96:6e:2d:14:38:9a:78:d4:ad:3f:e1:b5:f3:5c:
                    e4:3e:1b:48:74:c3:d5:5f:66:df:89:d2:47:c2:40:
                    24:f2:5c:57:70:12:78:1e:21:59:12:03:93:64:82:
                    14:e6:d8:32:0d:3f:62:2d:8e:42:95:d5:c5:50:39:
                    d7:2a:47:70:8c:ba:46:53:4d:35:2b:09:aa:d4:89:
                    65:e5:29:93:27:56:e6:b3:b6:11:7f:91:56:5e:f3:
                    2f:42:6a:e3:57:70:cf:d6:61:25:b0:62:59:32:ce:
                    fb:10:74:94:07:3a:79:82:2e:09:44:57:37:59:4e:
                    2b:7d:55:f2:bf:d7:92:b4:01:f2:bd:cc:d4:c3:ca:
                    81:d5:a9:aa:fa:1b:f4:b9:c5:a2:9d:0c:88:60:14:
                    e0:89:1a:eb:ae:2d:39:5f:0d:67:aa:02:7c:f1:93:
                    0b:2a:d1:7e:61:70:e8:2e:dc:e5:a6:a9:3b:ea:8a:
                    b6:b3:4a:84:6e:55:af:66:04:80:97:dc:7b:36:1c:
                    82:51:91:2a:dc:d5:76:e9:9a:c2:98:e3:91:55:80:
                    e8:77:8a:42:b5:29:6e:b1:bf:bd:5f:f7:bb:b0:f3:
                    3d:e1:73:b2:a1:61:14:fa:83:cc:d3:8c:5a:3f:bf:
                    93:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D1:7A:BB:71:FC:28:C5:8D:F2:F4:71:F5:E3:0B:12:CB:D5:E3:EF
            X509v3 Authority Key Identifier:
                keyid:09:38:50:D7:F4:EA:19:74:94:49:6C:47:78:F0:42:F5:B6:7D:08:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C89CD/D2FBF8D67B9311F190EC9ACBCE1D38B0/CThQ1_TqGXSUSWxHePBC9bZ9CAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ee:2e:06:48:b3:6f:5c:66:87:ff:9f:74:51:3e:10:d3:33:
         2a:ce:63:8a:b9:e1:0e:03:7e:f3:d2:11:ff:88:86:48:14:38:
         f2:f1:6f:38:1b:dc:bc:97:88:71:90:11:01:05:11:fe:4e:23:
         39:b5:22:fa:36:73:b7:4b:6c:8a:91:93:77:bb:a9:0d:93:3e:
         6f:b9:74:e6:eb:60:06:a5:14:16:d5:59:90:92:01:4e:ba:1a:
         95:22:79:49:0e:f0:4a:9c:ba:29:5e:91:5a:a3:0e:b5:8a:d5:
         54:0e:85:20:c7:bf:6f:b5:82:1e:ac:f4:c3:c2:a3:77:b7:60:
         d8:a7:62:b9:bd:d5:15:ad:5e:fc:ef:1a:5b:45:21:c5:b9:03:
         80:92:e9:f1:76:10:9c:89:ef:e7:45:13:00:6e:1f:ac:9f:cf:
         6d:ca:5b:a9:71:3e:27:15:06:cd:36:4a:ff:74:95:3a:fd:1b:
         80:4b:8b:fc:f5:c5:ba:4b:51:8f:ad:f1:77:b4:19:d7:23:f8:
         85:d8:f5:74:a3:56:3d:50:8f:c4:99:cf:bc:1e:41:37:d0:a9:
         03:d1:42:e8:c0:62:10:e4:0c:11:35:ce:55:ba:9c:aa:3d:d0:
         3c:33:3e:59:b3:ae:a5:23:76:b4:59:65:27:81:2b:03:0c:3c:
         2c:8c:2f:e7
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBdzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZD
ODlDREFSMTEwLwYDVQQFEygwOTM4NTBEN0Y0RUExOTc0OTQ0OTZDNDc3OEYwNDJG
NUI2N0QwODA0MB4XDTI2MTEwMTA1NDQwMFoXDTI2MTEwMzA1NDQwMFowGDEWMBQG
A1UEAxMNNmFlNmQxYTAtZDI1NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANkI6Gaq4WwotVmS17JbfZZuLRQ4mnjUrT/htfNc5D4bSHTD1V9m34nSR8JA
JPJcV3ASeB4hWRIDk2SCFObYMg0/Yi2OQpXVxVA51ypHcIy6RlNNNSsJqtSJZeUp
kydW5rO2EX+RVl7zL0Jq41dwz9ZhJbBiWTLO+xB0lAc6eYIuCURXN1lOK31V8r/X
krQB8r3M1MPKgdWpqvob9LnFop0MiGAU4Ika664tOV8NZ6oCfPGTCyrRfmFw6C7c
5aapO+qKtrNKhG5Vr2YEgJfcezYcglGRKtzVdumawpjjkVWA6HeKQrUpbrG/vV/3
u7DzPeFzsqFhFPqDzNOMWj+/k58CAwEAAaOCArUwggKxMB0GA1UdDgQWBBSE0Xq7
cfwoxY3y9HH14wsSy9Xj7zAfBgNVHSMEGDAWgBQJOFDX9OoZdJRJbEd48EL1tn0I
BDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2Qzg5Q0QvRDJGQkY4RDY3QjkzMTFGMTkwRUM5QUNCQ0UxRDM4QjAvQ1RoUTFf
VHFHWFNVU1d4SGVQQkM5Ylo5Q0FRLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
Q1RoUTFfVHFHWFNVU1d4SGVQQkM5Ylo5Q0FRLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZDODlDRC9EMkZCRjhENjdCOTMxMUYxOTBFQzlBQ0JDRTFEMzhC
MC9DVGhRMV9UcUdYU1VTV3hIZVBCQzliWjlDQVEubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBACTuLgZIs29cZof/n3RRPhDTMyrOY4q54Q4D
fvPSEf+IhkgUOPLxbzgb3LyXiHGQEQEFEf5OIzm1Ivo2c7dLbIqRk3e7qQ2TPm+5
dObrYAalFBbVWZCSAU66GpUieUkO8EqcuilekVqjDrWK1VQOhSDHv2+1gh6s9MPC
o3e3YNinYrm91RWtXvzvGltFIcW5A4CS6fF2EJyJ7+dFEwBuH6yfz23KW6lxPicV
Bs02Sv90lTr9G4BLi/z1xbpLUY+t8Xe0Gdcj+IXY9XSjVj1Qj8SZz7weQTfQqQPR
QujAYhDkDBE1zlW6nKo90DwzPlmzrqUjdrRZZSeBKwMMPCyML+c=
-----END CERTIFICATE-----