Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
File:                     cJAIrccXkY_f_PFnQftbEwunxDA.mft (raw, json)
Hash identifier:          VuU1DiRDVJ0/oxfIiMMMKKRfMBlkH6onUtZ4dZ9f5DI=
Subject key identifier:   65:51:DC:6E:FA:B6:AC:F7:6A:F8:88:B1:56:40:AF:67:60:47:09:39
Authority key identifier: 70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30
Certificate issuer:       /CN=F36111C6AF/serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
Certificate serial:       03E2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
Manifest number:          03E1
Signing time:             Sat 24 Oct 2026 04:04:18 +0000
Manifest this update:     Sat 24 Oct 2026 04:04:17 +0000
Manifest next update:     Mon 26 Oct 2026 04:04:17 +0000
Files and hashes:         1: cJAIrccXkY_f_PFnQftbEwunxDA.crl (hash: acnH1Vh+9WkcuEks1o6d0qI/QU1Ky5hbDpa7ixXLlF4=)
                          2: 698B22BAB0E011F098883C87DAE4EC9C.roa (hash: 5UZtU7DBbaKMgey3XqLzKXM826/jRqDSRDPI7cDwmOY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 994 (0x3e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36111C6AF, serialNumber=709008ADC717918FDFFCF16741FB5B130BA7C430
        Validity
            Not Before: Oct 24 04:04:17 2026 GMT
            Not After : Oct 26 04:04:17 2026 GMT
        Subject: CN=6adc2e42-c43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:4c:8c:11:37:77:d8:97:84:29:36:74:24:
                    39:4e:78:e7:ee:bb:22:3a:a9:b4:4a:64:f2:70:1f:
                    f6:3b:25:ee:86:23:81:53:a8:19:96:a5:35:74:67:
                    0a:9d:ea:e9:77:9d:2b:a5:03:06:22:80:5b:34:c1:
                    63:15:20:e8:44:07:84:9d:63:98:df:b8:95:f4:8f:
                    ec:bc:26:0c:63:0f:dc:0d:d7:3e:d9:5a:17:91:86:
                    1f:62:7b:bb:e7:60:e7:68:6c:ca:04:9f:16:53:89:
                    61:c1:c8:7e:4b:f4:d8:99:56:ef:55:9b:33:ab:b4:
                    34:f3:97:69:4f:8c:7a:58:99:50:02:4f:a1:a5:47:
                    7c:de:d2:8a:c2:97:87:44:94:bc:13:1e:bc:1c:2f:
                    5f:80:07:2d:fa:72:a1:84:6b:a2:73:c4:29:84:49:
                    2d:13:9a:4b:22:c6:80:89:7b:f6:48:99:0e:ca:fb:
                    6b:0e:11:a2:65:ef:ec:c4:d7:42:f4:17:3d:73:a6:
                    44:bf:c8:95:8a:90:e8:be:6e:85:7c:aa:58:48:8c:
                    a2:43:47:cf:58:c4:bd:5b:1d:a5:33:dc:c1:1f:2a:
                    55:3f:9c:ee:67:10:13:ef:c2:bd:e1:62:be:aa:66:
                    2b:91:fa:8e:cb:10:0d:b5:61:bc:9b:f6:5a:c4:b9:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:51:DC:6E:FA:B6:AC:F7:6A:F8:88:B1:56:40:AF:67:60:47:09:39
            X509v3 Authority Key Identifier:
                keyid:70:90:08:AD:C7:17:91:8F:DF:FC:F1:67:41:FB:5B:13:0B:A7:C4:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cJAIrccXkY_f_PFnQftbEwunxDA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36111C6/86ADA898D22C11EE8972136A775412E6/cJAIrccXkY_f_PFnQftbEwunxDA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:12:63:b3:0a:48:6d:6f:15:01:58:a2:11:01:7b:94:ac:9c:
         d4:2c:d8:b8:4a:25:52:0c:6b:ef:63:ae:ac:15:70:65:9a:32:
         dd:49:9f:bc:3e:55:eb:1f:af:b1:ef:23:4f:29:f3:c6:f2:b2:
         34:82:13:b1:9b:60:11:90:cd:85:eb:aa:cf:92:28:16:65:8f:
         5c:47:34:95:e9:df:d0:d7:a1:53:4a:59:ea:59:01:91:f0:8a:
         e6:23:5a:90:0a:e7:e3:6b:11:64:7c:d4:4a:df:fa:98:58:1c:
         aa:79:be:1d:dc:74:93:08:dc:f1:68:f7:a4:25:28:d6:ed:39:
         4b:56:9e:6e:a3:07:50:6a:e6:4f:72:d1:8b:cd:16:41:fd:f5:
         80:f3:93:f1:1b:61:a0:6e:52:5a:33:19:89:b0:be:9c:1a:1e:
         8a:1b:29:a4:b0:13:45:56:80:cd:fd:a4:91:13:dd:33:5a:6a:
         c3:23:2a:b7:66:2b:82:45:31:ab:7e:5d:2c:7b:6f:db:76:44:
         25:f2:66:bd:6f:2b:91:b8:14:81:17:ae:90:d1:8a:5b:69:24:
         88:5d:43:38:96:92:da:ff:15:08:41:3d:81:8f:61:d5:6e:a6:
         b0:9b:61:09:06:35:58:e8:8a:cc:78:08:f8:38:4d:cf:3e:43:
         06:08:7a:36
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA+IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTExQzZBRjExMC8GA1UEBRMoNzA5MDA4QURDNzE3OTE4RkRGRkNGMTY3NDFGQjVC
MTMwQkE3QzQzMDAeFw0yNjEwMjQwNDA0MTdaFw0yNjEwMjYwNDA0MTdaMBgxFjAU
BgNVBAMTDTZhZGMyZTQyLWM0M2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDE00yMETd32JeEKTZ0JDlOeOfuuyI6qbRKZPJwH/Y7Je6GI4FTqBmWpTV0
Zwqd6ul3nSulAwYigFs0wWMVIOhEB4SdY5jfuJX0j+y8JgxjD9wN1z7ZWheRhh9i
e7vnYOdobMoEnxZTiWHByH5L9NiZVu9VmzOrtDTzl2lPjHpYmVACT6GlR3ze0orC
l4dElLwTHrwcL1+ABy36cqGEa6JzxCmESS0TmksixoCJe/ZImQ7K+2sOEaJl7+zE
10L0Fz1zpkS/yJWKkOi+boV8qlhIjKJDR89YxL1bHaUz3MEfKlU/nO5nEBPvwr3h
Yr6qZiuR+o7LEA21Ybyb9lrEuevlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZVHc
bvq2rPdq+IixVkCvZ2BHCTkwHwYDVR0jBBgwFoAUcJAIrccXkY/f/PFnQftbEwun
xDAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjExMUM2Lzg2QURBODk4RDIyQzExRUU4OTcyMTM2QTc3NTQxMkU2L2NKQUly
Y2NYa1lfZl9QRm5RZnRiRXd1bnhEQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NKQUlyY2NYa1lfZl9QRm5RZnRiRXd1bnhEQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTExQzYvODZBREE4OThEMjJDMTFFRTg5NzIxMzZBNzc1
NDEyRTYvY0pBSXJjY1hrWV9mX1BGblFmdGJFd3VueERBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCkEmOzCkhtbxUBWKIRAXuUrJzULNi4
SiVSDGvvY66sFXBlmjLdSZ+8PlXrH6+x7yNPKfPG8rI0ghOxm2ARkM2F66rPkigW
ZY9cRzSV6d/Q16FTSlnqWQGR8IrmI1qQCufjaxFkfNRK3/qYWByqeb4d3HSTCNzx
aPekJSjW7TlLVp5uowdQauZPctGLzRZB/fWA85PxG2GgblJaMxmJsL6cGh6KGymk
sBNFVoDN/aSRE90zWmrDIyq3ZiuCRTGrfl0se2/bdkQl8ma9byuRuBSBF66Q0Ypb
aSSIXUM4lpLa/xUIQT2Bj2HVbqawm2EJBjVY6IrMeAj4OE3PPkMGCHo2
-----END CERTIFICATE-----