Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
File:                     2S3BlA86xFACYfqliK5STwS9244.mft (raw, json)
Hash identifier:          lJkncCLOuiFBa971sARgcodWpbHGwWac8OtwyApCDRM=
Subject key identifier:   F0:31:FD:66:A6:EE:53:71:2A:E6:3A:DB:FF:2C:FE:1D:A2:DD:63:B9
Authority key identifier: D9:2D:C1:94:0F:3A:C4:50:02:61:FA:A5:88:AE:52:4F:04:BD:DB:8E
Certificate issuer:       /CN=F363FC87AF/serialNumber=D92DC1940F3AC4500261FAA588AE524F04BDDB8E
Certificate serial:       24
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
Manifest number:          23
Signing time:             Sun 20 Sep 2026 05:49:46 +0000
Manifest this update:     Sun 20 Sep 2026 05:49:45 +0000
Manifest next update:     Tue 22 Sep 2026 05:49:45 +0000
Files and hashes:         1: 2S3BlA86xFACYfqliK5STwS9244.crl (hash: /U+pigjRH8wVmSb4qL0gCbhM1bltNjpKzAlwUyeMevg=)
                          2: 05A0B69E9B0811F1A0808FE3CE1D38B0.roa (hash: pasTsat2fXh6YiGvMvYT8AvkfmPYbd9JwrzF0OlGv9U=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 22 Sep 2026 05:49:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FC87AF, serialNumber=D92DC1940F3AC4500261FAA588AE524F04BDDB8E
        Validity
            Not Before: Sep 20 05:49:45 2026 GMT
            Not After : Sep 22 05:49:45 2026 GMT
        Subject: CN=6aaf73fa-b966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:76:62:53:89:1e:b5:ef:53:44:d9:3d:f6:f5:
                    c1:cc:f1:9e:90:9e:08:c3:70:bf:d4:3e:d8:55:6d:
                    d1:1a:70:22:81:8f:4a:60:da:ea:15:2b:c0:d8:24:
                    93:05:ca:14:db:b3:a8:90:ca:30:5f:e9:97:a8:63:
                    45:55:8e:23:35:c7:9a:89:b2:c9:96:a1:3c:95:11:
                    cd:f2:57:ce:26:0a:3c:bd:43:58:78:ca:95:ff:a1:
                    f6:e1:a5:97:a6:61:79:55:5c:99:76:1a:f2:93:3d:
                    96:ed:d8:b8:bd:88:90:fb:38:70:7e:8c:1a:80:86:
                    56:11:9c:86:5c:65:4f:fc:b3:a4:56:8f:fc:13:42:
                    d2:81:d2:dd:2b:a0:f5:19:d2:8c:05:4e:37:5f:80:
                    67:0e:79:b1:27:30:a3:2c:08:96:50:b2:d8:ef:6c:
                    53:72:5b:93:a4:fb:5f:08:26:1d:da:2b:fc:04:95:
                    7f:c2:26:ff:42:69:8d:4e:09:01:3f:ae:2b:71:af:
                    71:c8:d9:8c:89:07:24:ba:70:83:c2:e1:90:c7:2d:
                    3d:6d:b5:59:20:73:15:0f:96:ab:37:5f:11:5f:3d:
                    22:e4:f8:3e:18:b8:67:54:c0:c8:83:72:6f:0a:a5:
                    c7:76:4e:e4:ae:44:ce:1a:c1:ae:b3:a0:0c:b7:d0:
                    c1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:31:FD:66:A6:EE:53:71:2A:E6:3A:DB:FF:2C:FE:1D:A2:DD:63:B9
            X509v3 Authority Key Identifier:
                keyid:D9:2D:C1:94:0F:3A:C4:50:02:61:FA:A5:88:AE:52:4F:04:BD:DB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2S3BlA86xFACYfqliK5STwS9244.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FC87/DEFC83209B0611F1B94272DCCE1D38B0/2S3BlA86xFACYfqliK5STwS9244.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:93:82:99:ba:9b:31:d2:52:c4:21:b4:a7:4c:c8:33:7c:b2:
         d0:2c:cb:ee:01:1a:1b:08:4a:de:9f:f5:71:55:29:2e:3e:56:
         96:c1:ec:81:bd:59:df:75:79:da:c9:7b:da:83:e4:1f:fa:ca:
         28:e0:fa:87:79:cd:a0:a8:91:25:0d:20:72:7e:f8:19:b0:05:
         5a:c1:ad:34:fe:bd:66:33:89:80:48:86:a4:d5:73:e8:38:9f:
         f6:b2:98:ad:8d:95:70:7f:b0:ed:b0:20:a5:3f:0c:0c:02:8a:
         a5:df:06:1d:e3:54:e1:4f:4c:93:ee:02:ab:5f:cc:21:d0:99:
         90:08:a7:61:76:7c:f3:f2:db:9b:ea:f2:12:f8:ec:a3:a2:9c:
         44:61:9c:b1:b8:fd:de:08:17:20:14:b5:46:7c:b7:f2:46:58:
         39:a1:3f:21:85:9a:c6:c0:9a:48:5e:39:b1:c1:96:ab:df:71:
         62:7b:0f:b1:73:70:9f:f3:0c:0e:76:a4:a1:ed:6e:f1:58:9c:
         a4:0c:1d:5d:41:4f:e5:1d:46:db:99:b8:a2:e2:ce:26:19:da:
         7d:1f:f2:d7:36:7d:07:7f:35:cd:31:05:2b:8e:53:80:ca:f7:
         1c:fa:37:cf:39:a6:60:28:4b:35:2a:1b:3d:e8:90:fc:b2:51:
         81:c5:a9:6b
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBJDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
RkM4N0FGMTEwLwYDVQQFEyhEOTJEQzE5NDBGM0FDNDUwMDI2MUZBQTU4OEFFNTI0
RjA0QkREQjhFMB4XDTI2MDkyMDA1NDk0NVoXDTI2MDkyMjA1NDk0NVowGDEWMBQG
A1UEAxMNNmFhZjczZmEtYjk2NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMV2YlOJHrXvU0TZPfb1wczxnpCeCMNwv9Q+2FVt0RpwIoGPSmDa6hUrwNgk
kwXKFNuzqJDKMF/pl6hjRVWOIzXHmomyyZahPJURzfJXziYKPL1DWHjKlf+h9uGl
l6ZheVVcmXYa8pM9lu3YuL2IkPs4cH6MGoCGVhGchlxlT/yzpFaP/BNC0oHS3Sug
9RnSjAVON1+AZw55sScwoywIllCy2O9sU3Jbk6T7XwgmHdor/ASVf8Im/0JpjU4J
AT+uK3GvccjZjIkHJLpwg8LhkMctPW21WSBzFQ+WqzdfEV89IuT4Phi4Z1TAyINy
bwqlx3ZO5K5EzhrBrrOgDLfQwecCAwEAAaOCArgwggK0MB0GA1UdDgQWBBTwMf1m
pu5TcSrmOtv/LP4dot1juTAfBgNVHSMEGDAWgBTZLcGUDzrEUAJh+qWIrlJPBL3b
jjAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0ZDODcvREVGQzgzMjA5QjA2MTFGMUI5NDI3MkRDQ0UxRDM4QjAvMlMzQmxB
ODZ4RkFDWWZxbGlLNVNUd1M5MjQ0LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvMlMzQmxBODZ4RkFDWWZxbGlLNVNUd1M5MjQ0LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYzRkM4Ny9ERUZDODMyMDlCMDYxMUYxQjk0MjcyRENDRTFE
MzhCMC8yUzNCbEE4NnhGQUNZZnFsaUs1U1R3UzkyNDQubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAC+Tgpm6mzHSUsQhtKdMyDN8stAsy+4B
GhsISt6f9XFVKS4+VpbB7IG9Wd91edrJe9qD5B/6yijg+od5zaCokSUNIHJ++Bmw
BVrBrTT+vWYziYBIhqTVc+g4n/aymK2NlXB/sO2wIKU/DAwCiqXfBh3jVOFPTJPu
AqtfzCHQmZAIp2F2fPPy25vq8hL47KOinERhnLG4/d4IFyAUtUZ8t/JGWDmhPyGF
msbAmkheObHBlqvfcWJ7D7FzcJ/zDA52pKHtbvFYnKQMHV1BT+UdRtuZuKLiziYZ
2n0f8tc2fQd/Nc0xBSuOU4DK9xz6N885pmAoSzUqGz3okPyyUYHFqWs=
-----END CERTIFICATE-----