Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
File:                     M03n0uuGIBi7lXSbZI3Lr1DRPag.mft (raw, json)
Hash identifier:          yeHl5JMOo9H7f8IZQvuX52f7eXjbNPd7N5esqXGu2hU=
Subject key identifier:   A6:8F:DB:C7:06:CC:54:26:4C:57:67:30:A5:7F:09:55:69:00:B7:7E
Authority key identifier: 33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8
Certificate issuer:       /CN=F3623CAFAF/serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
Certificate serial:       0F76
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
Manifest number:          0F70
Signing time:             Sun 25 Oct 2026 01:00:49 +0000
Manifest this update:     Sun 25 Oct 2026 01:00:49 +0000
Manifest next update:     Tue 27 Oct 2026 01:00:49 +0000
Files and hashes:         1: M03n0uuGIBi7lXSbZI3Lr1DRPag.crl (hash: OF2XQUNKg98RV3ZPR/aqnACyTCQX0n2zzLj0+C7QDIw=)
                          2: 27DC768CA2DB11F1B6223A13CF1D38B0.roa (hash: jy4r26xUOc8REFs1sp6Uhxq7c9j7wmwiV0e4g5o0vfI=)
                          3: EEDCD7B8874711F1B7959ADDCE1D38B0.roa (hash: zj+lVv65yLchsV3Pei38AK8L8pgPqkZ3OPkz3wu3q0k=)
                          4: 8EF222E0874711F19A7891D9CE1D38B0.roa (hash: PcLAG1NhERJx3czkCw2yFf0BI5X1CLRCJEac9uNxDiY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3958 (0xf76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3623CAFAF, serialNumber=334DE7D2EB862018BB95749B648DCBAF50D13DA8
        Validity
            Not Before: Oct 25 01:00:49 2026 GMT
            Not After : Oct 27 01:00:49 2026 GMT
        Subject: CN=6add54c1-697d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:e8:3e:fb:d5:10:8f:a6:9f:4a:27:f4:5e:
                    0c:35:a2:8e:50:cc:32:62:79:fd:cd:f7:71:e5:50:
                    1a:c3:dd:00:3c:c4:cd:58:b6:b3:f6:8e:e8:04:f4:
                    8b:e7:bc:3c:ff:f6:04:92:07:c7:45:20:0e:8c:22:
                    e1:1a:39:4b:52:ac:ed:8c:bd:c0:22:2f:ed:19:bc:
                    b7:b7:da:ad:f1:80:76:f4:81:98:2f:4b:02:af:a5:
                    0b:ba:8c:bd:d4:38:b6:a2:04:b1:97:27:16:23:62:
                    f4:db:50:b3:1a:1a:86:c5:43:6f:bc:f1:48:b4:45:
                    b1:6d:7f:c9:0f:4d:82:91:79:e4:28:28:2e:0e:3f:
                    ff:f5:e2:25:5a:b6:99:3d:78:5a:62:2f:74:c4:19:
                    df:02:5c:f7:94:6e:05:93:77:cd:7f:c6:b3:29:ed:
                    c5:94:a1:a0:b0:d9:6c:3a:b1:23:90:7b:d4:9d:f2:
                    d6:e0:33:b2:13:be:36:80:fa:7c:44:37:25:46:1c:
                    55:4b:ac:1d:f5:c4:e5:00:ac:42:a5:70:f1:6e:1b:
                    e1:a8:1e:85:cb:30:ae:d4:44:14:b9:4b:13:9a:f3:
                    81:d8:12:d1:dc:9f:b2:f6:de:5f:dc:36:47:49:d8:
                    97:2f:eb:35:ca:9a:a4:2c:ba:ea:2a:04:5b:f8:e3:
                    46:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8F:DB:C7:06:CC:54:26:4C:57:67:30:A5:7F:09:55:69:00:B7:7E
            X509v3 Authority Key Identifier:
                keyid:33:4D:E7:D2:EB:86:20:18:BB:95:74:9B:64:8D:CB:AF:50:D1:3D:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M03n0uuGIBi7lXSbZI3Lr1DRPag.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3623CAF/D13F9DB0F4F111E5BE8A634CF8AEA228/M03n0uuGIBi7lXSbZI3Lr1DRPag.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:6b:c8:5b:7c:e4:78:54:83:b3:fd:a5:b3:3d:7c:8f:1a:84:
         33:a9:b9:40:a1:e7:c8:f5:7b:f5:4d:5e:4a:e2:29:e8:89:7d:
         a4:46:fc:39:66:54:b1:42:c3:1a:68:00:16:46:1d:f4:58:75:
         33:b6:64:54:b4:af:c5:7c:7a:b5:16:b7:7d:50:df:ed:c1:55:
         1d:a8:8f:0e:1a:c5:af:2f:a8:fd:9f:0d:73:80:e4:f0:5a:38:
         4c:71:b1:cf:58:1b:fc:70:46:b3:f3:b4:fb:02:15:4d:b1:3b:
         42:f9:52:fc:87:96:5f:75:dc:71:b2:d1:a6:c1:50:c8:92:85:
         f1:00:b1:fb:40:20:b6:b3:6b:82:1d:a9:74:7d:1c:18:25:62:
         1e:5e:2e:af:cd:a5:06:0e:51:d0:d3:de:84:19:f7:33:ba:58:
         4c:48:e6:32:2b:28:1a:0b:4d:a0:f4:af:64:b1:ed:e6:2c:96:
         21:a2:dd:c1:22:9d:2d:9c:b7:5d:76:59:bf:8c:ce:5c:a4:ff:
         22:fd:10:13:09:2e:ee:7a:48:7c:c5:c4:f3:84:9c:14:4b:9a:
         92:a7:19:0c:03:05:5c:69:2a:10:46:5f:75:c9:67:93:67:11:
         d1:df:5f:78:67:ff:ef:17:41:2c:f9:59:26:55:ce:e1:ee:1c:
         0f:cf:22:5b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD3YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjNDQUZBRjExMC8GA1UEBRMoMzM0REU3RDJFQjg2MjAxOEJCOTU3NDlCNjQ4RENC
QUY1MEQxM0RBODAeFw0yNjEwMjUwMTAwNDlaFw0yNjEwMjcwMTAwNDlaMBgxFjAU
BgNVBAMTDTZhZGQ1NGMxLTY5N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8jeg++9UQj6afSif0Xgw1oo5QzDJief3N93HlUBrD3QA8xM1YtrP2jugE
9IvnvDz/9gSSB8dFIA6MIuEaOUtSrO2MvcAiL+0ZvLe32q3xgHb0gZgvSwKvpQu6
jL3UOLaiBLGXJxYjYvTbULMaGobFQ2+88Ui0RbFtf8kPTYKReeQoKC4OP//14iVa
tpk9eFpiL3TEGd8CXPeUbgWTd81/xrMp7cWUoaCw2Ww6sSOQe9Sd8tbgM7ITvjaA
+nxENyVGHFVLrB31xOUArEKlcPFuG+GoHoXLMK7URBS5SxOa84HYEtHcn7L23l/c
NkdJ2Jcv6zXKmqQsuuoqBFv440aTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUpo/b
xwbMVCZMV2cwpX8JVWkAt34wHwYDVR0jBBgwFoAUM03n0uuGIBi7lXSbZI3Lr1DR
PagwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIzQ0FGL0QxM0Y5REIwRjRGMTExRTVCRThBNjM0Q0Y4QUVBMjI4L00wM24w
dXVHSUJpN2xYU2JaSTNMcjFEUlBhZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL00wM24wdXVHSUJpN2xYU2JaSTNMcjFEUlBhZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjNDQUYvRDEzRjlEQjBGNEYxMTFFNUJFOEE2MzRDRjhB
RUEyMjgvTTAzbjB1dUdJQmk3bFhTYlpJM0xyMURSUGFnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfa8hbfOR4VIOz/aWzPXyPGoQzqblA
oefI9Xv1TV5K4inoiX2kRvw5ZlSxQsMaaAAWRh30WHUztmRUtK/FfHq1Frd9UN/t
wVUdqI8OGsWvL6j9nw1zgOTwWjhMcbHPWBv8cEaz87T7AhVNsTtC+VL8h5Zfddxx
stGmwVDIkoXxALH7QCC2s2uCHal0fRwYJWIeXi6vzaUGDlHQ096EGfczulhMSOYy
KygaC02g9K9kse3mLJYhot3BIp0tnLdddlm/jM5cpP8i/RATCS7uekh8xcTzhJwU
S5qSpxkMAwVcaSoQRl91yWeTZxHR3194Z//vF0Es+VkmVc7h7hwPzyJb
-----END CERTIFICATE-----