Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
File:                     H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft (raw, json)
Hash identifier:          SUOzed6DGqJGNZeagSiMcfmJccFaNrzVxiaqEHIiMVw=
Subject key identifier:   B0:B6:B2:1B:F8:8A:FD:62:6B:E9:A9:E2:32:40:C8:E7:E7:E9:74:20
Authority key identifier: 1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20
Certificate issuer:       /CN=F3613254AF/serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
Certificate serial:       03AD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
Manifest number:          03AA
Signing time:             Sat 24 Oct 2026 04:10:46 +0000
Manifest this update:     Sat 24 Oct 2026 04:10:46 +0000
Manifest next update:     Mon 26 Oct 2026 04:10:46 +0000
Files and hashes:         1: H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl (hash: lze5LJYLHj6Uprwg+xghole0oh2BtEZa+BPFjhVNe4g=)
                          2: 9870DA98AD8511EFAF5F92BE762E951A.roa (hash: udUtVTYo1f4IoYFUNzyEYnX9Hdol3KZafB9piQO6pRw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 941 (0x3ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3613254AF, serialNumber=1F40FCC57C26A6DDB605F7798A4B53C09D2B6220
        Validity
            Not Before: Oct 24 04:10:46 2026 GMT
            Not After : Oct 26 04:10:46 2026 GMT
        Subject: CN=6adc2fc6-b99b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:df:bc:ac:69:18:93:a5:a0:d6:92:94:b4:2e:
                    53:21:d8:7d:37:c3:43:86:13:2e:0b:90:64:f4:20:
                    df:e9:e2:ff:cd:66:78:cd:1b:99:d7:92:aa:6c:40:
                    01:a3:8b:9f:10:28:0a:a6:ec:c0:9b:5a:11:e8:c1:
                    5f:1b:78:9f:8b:6e:7b:f0:cc:5c:65:39:82:cf:53:
                    37:8e:ed:91:6b:2b:09:3d:8b:33:de:61:74:08:cc:
                    75:63:12:4c:7a:bc:47:3f:fb:a6:dd:b2:61:bf:bb:
                    6a:fa:b7:ad:70:84:63:e1:9a:16:24:ed:37:d9:6f:
                    65:c2:cb:f5:bb:9a:04:8d:33:6e:74:19:fd:c4:d4:
                    5b:bb:e1:9b:86:94:f0:f8:1b:a0:34:9e:34:1d:3e:
                    d5:24:c1:3d:f5:ad:d5:3a:03:32:4d:6c:75:ec:00:
                    8d:2f:0d:14:c1:04:bd:1e:f9:39:ef:26:45:f8:fb:
                    5c:9a:45:de:6a:6f:66:e4:18:5e:87:f0:43:94:00:
                    5f:74:3d:a3:ca:0f:e0:3c:ef:db:d3:69:a6:cc:ad:
                    17:b1:56:63:16:83:82:b4:d8:b1:d2:f0:14:63:ed:
                    a5:fd:97:24:31:11:21:6a:1e:79:f0:6f:ea:dc:d9:
                    45:d7:c8:d5:b3:f4:a6:3c:a4:b3:75:fd:3c:d9:60:
                    64:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:B6:B2:1B:F8:8A:FD:62:6B:E9:A9:E2:32:40:C8:E7:E7:E9:74:20
            X509v3 Authority Key Identifier:
                keyid:1F:40:FC:C5:7C:26:A6:DD:B6:05:F7:79:8A:4B:53:C0:9D:2B:62:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/H0D8xXwmpt22Bfd5iktTwJ0rYiA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3613254/C9012ADE023411EFA096505F017001B1/H0D8xXwmpt22Bfd5iktTwJ0rYiA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:d4:2e:4d:6d:56:f8:6c:b8:b3:a8:ca:bb:3f:db:2a:55:0c:
         ca:f2:2c:d1:85:5b:fa:cf:84:ad:f9:6c:4d:98:5b:15:69:a3:
         71:40:2f:a5:14:00:75:80:a2:6c:7e:69:5d:94:75:bb:4e:6e:
         f5:7a:00:ec:aa:82:d3:af:d1:4f:33:8a:f7:7f:73:86:65:1f:
         5b:fd:59:fb:8d:b4:69:55:b6:7d:52:01:6d:ee:30:cd:d9:e1:
         b9:c5:06:04:5e:4c:71:18:cc:48:5e:b4:49:95:50:b6:92:29:
         39:bc:c2:e9:9f:7e:5c:1f:1a:84:6b:60:69:44:1c:c7:cc:59:
         e2:36:b7:ab:2a:04:f5:34:82:bd:a8:98:1a:f5:3f:9d:0c:7a:
         9f:ac:34:ea:e9:be:db:58:cc:40:3d:ad:06:f5:87:0b:9f:0c:
         8c:ca:e6:94:5b:34:20:68:b0:7e:b2:ce:1c:9c:92:02:61:bd:
         02:d1:fb:e0:48:a0:cb:27:de:b8:4d:8e:44:ba:67:31:75:e5:
         fb:27:5d:1b:62:24:4b:9d:fe:25:1e:5d:e8:e7:0a:ee:17:5d:
         32:bc:e4:68:0d:9f:ba:3b:9b:88:b2:8b:11:53:2b:6a:2d:a0:
         ec:ec:58:69:e7:cf:f3:d3:be:aa:68:ef:00:eb:b4:2b:a5:81:
         eb:d6:e8:38
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA60wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTMyNTRBRjExMC8GA1UEBRMoMUY0MEZDQzU3QzI2QTZEREI2MDVGNzc5OEE0QjUz
QzA5RDJCNjIyMDAeFw0yNjEwMjQwNDEwNDZaFw0yNjEwMjYwNDEwNDZaMBgxFjAU
BgNVBAMTDTZhZGMyZmM2LWI5OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDR37ysaRiTpaDWkpS0LlMh2H03w0OGEy4LkGT0IN/p4v/NZnjNG5nXkqps
QAGji58QKAqm7MCbWhHowV8beJ+LbnvwzFxlOYLPUzeO7ZFrKwk9izPeYXQIzHVj
Ekx6vEc/+6bdsmG/u2r6t61whGPhmhYk7TfZb2XCy/W7mgSNM250Gf3E1Fu74ZuG
lPD4G6A0njQdPtUkwT31rdU6AzJNbHXsAI0vDRTBBL0e+TnvJkX4+1yaRd5qb2bk
GF6H8EOUAF90PaPKD+A879vTaabMrRexVmMWg4K02LHS8BRj7aX9lyQxESFqHnnw
b+rc2UXXyNWz9KY8pLN1/TzZYGQ5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsLay
G/iK/WJr6aniMkDI5+fpdCAwHwYDVR0jBBgwFoAUH0D8xXwmpt22Bfd5iktTwJ0r
YiAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjEzMjU0L0M5MDEyQURFMDIzNDExRUZBMDk2NTA1RjAxNzAwMUIxL0gwRDh4
WHdtcHQyMkJmZDVpa3RUd0owcllpQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0gwRDh4WHdtcHQyMkJmZDVpa3RUd0owcllpQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTMyNTQvQzkwMTJBREUwMjM0MTFFRkEwOTY1MDVGMDE3
MDAxQjEvSDBEOHhYd21wdDIyQmZkNWlrdFR3SjByWWlBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBu1C5NbVb4bLizqMq7P9sqVQzK8izR
hVv6z4St+WxNmFsVaaNxQC+lFAB1gKJsfmldlHW7Tm71egDsqoLTr9FPM4r3f3OG
ZR9b/Vn7jbRpVbZ9UgFt7jDN2eG5xQYEXkxxGMxIXrRJlVC2kik5vMLpn35cHxqE
a2BpRBzHzFniNrerKgT1NIK9qJga9T+dDHqfrDTq6b7bWMxAPa0G9YcLnwyMyuaU
WzQgaLB+ss4cnJICYb0C0fvgSKDLJ964TY5EumcxdeX7J10bYiRLnf4lHl3o5wru
F10yvORoDZ+6O5uIsosRUytqLaDs7Fhp58/z076qaO8A67QrpYHr1ug4
-----END CERTIFICATE-----