Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.mft
File:                     8RynOfh_E2iVt2T04GlkdyAJ0yI.mft (raw, json)
Hash identifier:          Az7gLsZpiGVJAY0KezpuGQ60vqw+p3NXLPsQ/cjRQYA=
Subject key identifier:   3A:83:F3:09:78:40:95:E0:3D:9C:7D:7E:69:AC:92:21:7E:57:41:73
Authority key identifier: F1:1C:A7:39:F8:7F:13:68:95:B7:64:F4:E0:69:64:77:20:09:D3:22
Certificate issuer:       /CN=F36F4B39AF/serialNumber=F11CA739F87F136895B764F4E06964772009D322
Certificate serial:       34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/8RynOfh_E2iVt2T04GlkdyAJ0yI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.mft
Manifest number:          33
Signing time:             Wed 04 Nov 2026 05:56:13 +0000
Manifest this update:     Wed 04 Nov 2026 05:56:12 +0000
Manifest next update:     Fri 06 Nov 2026 05:56:12 +0000
Files and hashes:         1: 8RynOfh_E2iVt2T04GlkdyAJ0yI.crl (hash: Fi4EpTMavlxmIoR9hsyPNe7JOjtjyF1v8rDs4mGvEMw=)
                          2: D2F1E6F0B1E611F181FE93A7CE1D38B0.roa (hash: OsghJqJfIP3Ve0QJBY/T1ISmWblug/Nf14aLrATEI8Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/8RynOfh_E2iVt2T04GlkdyAJ0yI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 05:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F4B39AF, serialNumber=F11CA739F87F136895B764F4E06964772009D322
        Validity
            Not Before: Nov  4 05:56:12 2026 GMT
            Not After : Nov  6 05:56:12 2026 GMT
        Subject: CN=6aeac8fd-8743
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:51:46:ef:29:e0:9f:fb:7a:05:ca:a7:ab:
                    f4:94:19:32:5b:54:a2:36:91:7d:aa:20:12:b4:2d:
                    5f:4b:3c:3a:d1:07:32:54:a5:b6:eb:4f:70:86:18:
                    b9:0e:12:1f:f4:2f:19:3e:b7:3c:45:af:2e:89:31:
                    9e:e8:3f:79:5f:c8:ab:ee:d4:43:dd:57:36:1d:95:
                    23:46:3f:8b:76:93:03:08:5c:9f:5a:f3:c2:5e:8a:
                    7d:2c:af:7f:af:45:11:22:f7:02:13:ee:9c:11:8e:
                    d2:6c:7c:bc:70:63:96:c6:95:ae:39:98:40:6f:f8:
                    d4:71:bf:af:7f:26:58:ef:2a:96:aa:3b:7e:7d:57:
                    14:d0:43:03:e9:5b:82:a4:e1:b0:0c:ea:c8:4a:83:
                    74:0a:b8:fa:91:f3:56:4a:ba:97:fd:de:a1:ed:61:
                    9d:25:38:c9:53:39:a9:00:2e:c2:e5:dd:19:fa:ce:
                    86:df:d0:42:0c:1c:f7:52:4a:58:ce:e4:7c:7c:e0:
                    4b:af:1e:db:5e:4b:f7:13:ea:0e:39:55:0a:e2:68:
                    cf:3b:c7:fc:5b:53:12:b3:39:b8:44:69:85:2d:b9:
                    9c:8c:33:4b:69:06:ab:2b:32:33:f9:0f:24:22:6a:
                    a8:3d:37:10:5b:05:33:c8:aa:70:85:e2:06:c8:d5:
                    b3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:83:F3:09:78:40:95:E0:3D:9C:7D:7E:69:AC:92:21:7E:57:41:73
            X509v3 Authority Key Identifier:
                keyid:F1:1C:A7:39:F8:7F:13:68:95:B7:64:F4:E0:69:64:77:20:09:D3:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/8RynOfh_E2iVt2T04GlkdyAJ0yI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F4B39/7C8716F2B1E411F187E2EE17CF1D38B0/8RynOfh_E2iVt2T04GlkdyAJ0yI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:e3:27:62:61:94:ab:7f:4f:af:16:6b:6d:48:5a:9b:c8:30:
         10:37:6b:22:d3:47:ea:5d:b5:09:4c:78:9e:a9:ea:84:5e:4e:
         89:9c:bb:04:f5:48:67:78:db:b5:ba:c4:df:64:ad:53:07:45:
         8d:2d:26:9d:7f:72:3d:ee:0f:23:68:43:dd:19:11:eb:28:9b:
         81:9e:09:9b:15:0c:38:f4:f4:fb:c8:6e:18:29:7b:8e:da:89:
         40:b0:76:6b:50:cf:9e:2b:92:8a:d8:99:df:a3:d6:29:5d:e5:
         71:bd:b4:17:c1:2e:09:0f:6a:b2:93:4f:24:b0:de:4a:6a:f8:
         49:6a:cb:44:e9:4a:79:ac:17:22:6d:9a:1b:af:cf:9c:5b:dc:
         42:22:f3:0f:1e:1e:56:f4:e4:af:52:f2:03:54:00:c2:7c:00:
         0d:ce:73:aa:17:86:2a:3f:45:cc:ad:fd:2e:07:c4:23:73:e9:
         3f:0e:fe:a6:b1:41:e2:14:e2:58:00:b0:cb:a4:d6:e8:27:6a:
         35:27:3a:a9:cb:e9:b1:e4:91:2e:2a:3a:de:f3:ea:f5:9c:fb:
         33:aa:68:c5:9f:af:ad:53:de:b1:a0:c9:96:10:d9:dd:ea:23:
         30:5b:9f:24:7d:ef:eb:ad:b1:3f:63:e3:3e:65:10:87:73:b7:
         46:0d:3b:ab
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBNDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZG
NEIzOUFGMTEwLwYDVQQFEyhGMTFDQTczOUY4N0YxMzY4OTVCNzY0RjRFMDY5NjQ3
NzIwMDlEMzIyMB4XDTI2MTEwNDA1NTYxMloXDTI2MTEwNjA1NTYxMlowGDEWMBQG
A1UEAxMNNmFlYWM4ZmQtODc0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMR0UUbvKeCf+3oFyqer9JQZMltUojaRfaogErQtX0s8OtEHMlSltutPcIYY
uQ4SH/QvGT63PEWvLokxnug/eV/Iq+7UQ91XNh2VI0Y/i3aTAwhcn1rzwl6KfSyv
f69FESL3AhPunBGO0mx8vHBjlsaVrjmYQG/41HG/r38mWO8qlqo7fn1XFNBDA+lb
gqThsAzqyEqDdAq4+pHzVkq6l/3eoe1hnSU4yVM5qQAuwuXdGfrOht/QQgwc91JK
WM7kfHzgS68e215L9xPqDjlVCuJozzvH/FtTErM5uERphS25nIwzS2kGqysyM/kP
JCJqqD03EFsFM8iqcIXiBsjVs8MCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQ6g/MJ
eECV4D2cfX5prJIhfldBczAfBgNVHSMEGDAWgBTxHKc5+H8TaJW3ZPTgaWR3IAnT
IjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RjRCMzkvN0M4NzE2RjJCMUU0MTFGMTg3RTJFRTE3Q0YxRDM4QjAvOFJ5bk9m
aF9FMmlWdDJUMDRHbGtkeUFKMHlJLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvOFJ5bk9maF9FMmlWdDJUMDRHbGtkeUFKMHlJLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZGNEIzOS83Qzg3MTZGMkIxRTQxMUYxODdFMkVFMTdDRjFE
MzhCMC84UnluT2ZoX0UyaVZ0MlQwNEdsa2R5QUoweUkubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAE3jJ2JhlKt/T68Wa21IWpvIMBA3ayLT
R+pdtQlMeJ6p6oReTomcuwT1SGd427W6xN9krVMHRY0tJp1/cj3uDyNoQ90ZEeso
m4GeCZsVDDj09PvIbhgpe47aiUCwdmtQz54rkorYmd+j1ild5XG9tBfBLgkParKT
TySw3kpq+Elqy0TpSnmsFyJtmhuvz5xb3EIi8w8eHlb05K9S8gNUAMJ8AA3Oc6oX
hio/Rcyt/S4HxCNz6T8O/qaxQeIU4lgAsMuk1ugnajUnOqnL6bHkkS4qOt7z6vWc
+zOqaMWfr61T3rGgyZYQ2d3qIzBbnyR97+utsT9j4z5lEIdzt0YNO6s=
-----END CERTIFICATE-----