Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
File:                     nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft (raw, json)
Hash identifier:          vg5pj2Vinmqc0RG1+QIkkndrYbgfEJk+p/AT4Qy0RVA=
Subject key identifier:   A8:58:E1:4C:B4:6E:0E:3E:D4:AA:D3:5F:50:0F:12:03:50:C7:23:A4
Authority key identifier: 9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A
Certificate issuer:       /CN=F362FF17AF/serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
Certificate serial:       089B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
Manifest number:          0894
Signing time:             Sun 11 Oct 2026 01:57:28 +0000
Manifest this update:     Sun 11 Oct 2026 01:57:27 +0000
Manifest next update:     Tue 13 Oct 2026 01:57:27 +0000
Files and hashes:         1: nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl (hash: 4r3RdB8YuKlvt45UYXUlsE1TxyRl747TIO5p03n90w4=)
                          2: 2B48BC985C0C11EB9996AA30F8AEA228.roa (hash: q6nVowz9VuDpjWX/IbvfjqSfChWzoCDvGswNPS2gk/0=)
                          3: FE6D92CA5C0B11EB95157330F8AEA228.roa (hash: BYjhKLTeS3/YMIgCsGSrv774yAnK9WPRQzbv65YQDbs=)
                          4: 336BF2CA332411EBB561BF72F8AEA228.roa (hash: z0Vqh2yhGazkcY6WrmD+gGwdIRbocCnl8S5PFmlQhf8=)
                          5: 66D788525C0C11EB89D7F330F8AEA228.roa (hash: T1mAIRrcLYmyaqd64q3hHsdJGYOwe7vCQdctkyt3sqY=)
                          6: 4D1819725C0C11EBB458D830F8AEA228.roa (hash: Y5bEDudGZy2SxFSFnv47v/c/OeLSoqXcxTY9JA/Rm5g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2203 (0x89b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362FF17AF, serialNumber=9CD41396ABCF9BB9EFF6E26855324F83C59DC69A
        Validity
            Not Before: Oct 11 01:57:27 2026 GMT
            Not After : Oct 13 01:57:27 2026 GMT
        Subject: CN=6acaed08-3a0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:56:5e:6e:a8:31:ba:90:11:29:b1:98:ab:
                    2f:9c:a5:0c:e9:88:08:63:bf:d7:4a:f5:fb:a5:a9:
                    18:50:65:27:dd:70:73:69:42:73:50:20:4f:c7:49:
                    c5:3a:d8:ed:25:45:84:27:b4:81:e3:5c:6a:a1:dd:
                    6b:b9:84:e3:67:ee:48:05:74:1f:49:8d:be:bd:e9:
                    e3:b8:b8:c2:1d:50:d9:db:04:3f:9d:75:fb:3a:07:
                    6e:f9:15:e7:1b:1c:28:1f:61:bd:df:83:04:2f:8d:
                    28:a9:cf:84:7c:f5:49:d3:3c:38:85:59:82:d1:01:
                    3a:d1:39:21:f8:3f:dc:9f:58:41:b3:94:50:18:d5:
                    36:72:b1:6d:36:99:84:6f:52:53:14:00:75:d2:9f:
                    9c:b5:45:1c:72:da:71:6c:ae:e8:9e:33:61:e7:32:
                    07:d7:57:a2:44:87:06:b0:f6:04:0c:e8:ee:34:fe:
                    0e:64:28:69:1f:d1:ec:9d:e6:13:90:3d:f0:e7:c3:
                    08:78:b8:cd:bf:26:12:3f:a6:e1:3b:84:16:bb:04:
                    1a:bc:73:87:da:b0:48:70:dc:6a:c6:4a:7f:14:2b:
                    07:c1:8e:ea:9e:a2:57:04:0c:ac:a5:a5:7a:63:cf:
                    a9:cb:62:f1:c7:55:e8:d2:2f:09:da:e4:30:41:f9:
                    ad:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:58:E1:4C:B4:6E:0E:3E:D4:AA:D3:5F:50:0F:12:03:50:C7:23:A4
            X509v3 Authority Key Identifier:
                keyid:9C:D4:13:96:AB:CF:9B:B9:EF:F6:E2:68:55:32:4F:83:C5:9D:C6:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362FF17/A44CBC7E332211EB93A21571F8AEA228/nNQTlqvPm7nv9uJoVTJPg8Wdxpo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fc:49:08:79:51:03:af:8f:49:8b:4e:57:33:54:f0:ad:33:
         41:c6:21:06:a5:16:77:6a:85:91:03:8c:1e:92:79:4b:b2:0c:
         37:d1:91:0b:45:28:ce:f8:1c:68:f4:b6:40:e7:04:fc:6c:be:
         72:ce:58:31:85:14:5a:6c:26:0d:c8:49:41:22:5a:58:6c:8e:
         cc:81:d4:3d:73:33:81:26:2c:f2:13:73:1c:92:6e:34:8b:78:
         3f:1e:f3:96:04:85:59:04:a0:95:05:c8:17:ad:58:88:29:ca:
         b3:95:1e:26:4f:e9:83:46:21:df:de:be:97:e3:96:cb:04:53:
         ed:4e:61:41:b6:3d:f7:28:d3:02:09:a8:5b:c0:c0:b8:24:30:
         42:b4:b5:a2:86:81:e3:a8:7a:89:26:cf:e8:c1:7a:64:07:1b:
         9f:3c:1c:4b:64:08:eb:e2:4c:b4:36:51:8d:ca:fe:c5:50:9e:
         f6:29:65:48:5b:e7:d7:bf:20:72:50:8a:b4:9f:5e:b8:b2:54:
         25:3f:ab:59:99:4b:43:3c:af:3d:be:a7:a1:03:2b:c3:2a:c2:
         a8:cb:f6:62:7e:4e:01:22:f6:df:76:dd:0e:97:52:ac:6b:54:
         54:9b:85:fe:74:2d:4f:65:3a:21:f2:ee:43:fd:51:01:46:21:
         f0:db:da:73
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCJswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkZGMTdBRjExMC8GA1UEBRMoOUNENDEzOTZBQkNGOUJCOUVGRjZFMjY4NTUzMjRG
ODNDNTlEQzY5QTAeFw0yNjEwMTEwMTU3MjdaFw0yNjEwMTMwMTU3MjdaMBgxFjAU
BgNVBAMTDTZhY2FlZDA4LTNhMGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDz1ZebqgxupARKbGYqy+cpQzpiAhjv9dK9fulqRhQZSfdcHNpQnNQIE/H
ScU62O0lRYQntIHjXGqh3Wu5hONn7kgFdB9Jjb696eO4uMIdUNnbBD+ddfs6B275
FecbHCgfYb3fgwQvjSipz4R89UnTPDiFWYLRATrROSH4P9yfWEGzlFAY1TZysW02
mYRvUlMUAHXSn5y1RRxy2nFsruieM2HnMgfXV6JEhwaw9gQM6O40/g5kKGkf0eyd
5hOQPfDnwwh4uM2/JhI/puE7hBa7BBq8c4fasEhw3GrGSn8UKwfBjuqeolcEDKyl
pXpjz6nLYvHHVejSLwna5DBB+a2HAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqFjh
TLRuDj7UqtNfUA8SA1DHI6QwHwYDVR0jBBgwFoAUnNQTlqvPm7nv9uJoVTJPg8Wd
xpowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJGRjE3L0E0NENCQzdFMzMyMjExRUI5M0EyMTU3MUY4QUVBMjI4L25OUVRs
cXZQbTdudjl1Sm9WVEpQZzhXZHhwby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL25OUVRscXZQbTdudjl1Sm9WVEpQZzhXZHhwby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MkZGMTcvQTQ0Q0JDN0UzMzIyMTFFQjkzQTIxNTcxRjhB
RUEyMjgvbk5RVGxxdlBtN252OXVKb1ZUSlBnOFdkeHBvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAB/EkIeVEDr49Ji05XM1TwrTNBxiEG
pRZ3aoWRA4weknlLsgw30ZELRSjO+Bxo9LZA5wT8bL5yzlgxhRRabCYNyElBIlpY
bI7MgdQ9czOBJizyE3Mckm40i3g/HvOWBIVZBKCVBcgXrViIKcqzlR4mT+mDRiHf
3r6X45bLBFPtTmFBtj33KNMCCahbwMC4JDBCtLWihoHjqHqJJs/owXpkBxufPBxL
ZAjr4ky0NlGNyv7FUJ72KWVIW+fXvyByUIq0n164slQlP6tZmUtDPK89vqehAyvD
KsKoy/Zifk4BIvbfdt0Ol1Ksa1RUm4X+dC1PZToh8u5D/VEBRiHw29pz
-----END CERTIFICATE-----