Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
File:                     HJG1r5tg6j8cHbh-rsbafC6gqHc.mft (raw, json)
Hash identifier:          kew98Sy6XLRG4a47Et8BWCcR30hvAIv/wqyBIjPIJ0E=
Subject key identifier:   BD:87:EF:2F:83:62:43:AB:98:71:06:86:E3:B3:A2:56:D8:2C:36:03
Authority key identifier: 1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77
Certificate issuer:       /CN=F36432B6AF/serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
Certificate serial:       0539
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
Manifest number:          0535
Signing time:             Thu 10 Sep 2026 03:15:23 +0000
Manifest this update:     Thu 10 Sep 2026 03:15:23 +0000
Manifest next update:     Sat 12 Sep 2026 03:15:23 +0000
Files and hashes:         1: HJG1r5tg6j8cHbh-rsbafC6gqHc.crl (hash: DgULpg6xkHVS5TdeuCbT7Egd22vnmdxJyyyurWPx4WA=)
                          2: A2CB9DA88AA511F1875D4CE2CE1D38B0.roa (hash: 37pJQBHBvY5YoMd8VQVHX5sLOFC0Hze+E4R/+cVDN9s=)
                          3: A9F6AB448AA611F1AB08A6E8CE1D38B0.roa (hash: 1HF94d7nJvg5x8i0KXil+/R/nuN02veH03L12eIYLRo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 03:15:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1337 (0x539)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36432B6AF, serialNumber=1C91B5AF9B60EA3F1C1DB87EAEC6DA7C2EA0A877
        Validity
            Not Before: Sep 10 03:15:23 2026 GMT
            Not After : Sep 12 03:15:23 2026 GMT
        Subject: CN=6aa220cb-93b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:60:ce:07:c6:e1:85:5b:a9:d5:4c:bc:11:63:
                    d0:7e:34:e5:b8:90:91:cc:4c:d4:8e:97:5b:f4:29:
                    99:d8:94:12:64:ee:74:9b:c7:10:8f:0c:ab:5d:a1:
                    3a:cb:a7:b8:40:1e:a0:68:4f:f0:09:f6:b8:98:5c:
                    9b:e2:55:f7:ea:f0:17:6e:7a:29:dc:3d:0d:05:8b:
                    4d:a5:db:61:d5:bb:19:f2:87:53:b4:ba:2e:6e:5c:
                    a5:57:65:6c:73:d1:c2:77:ba:25:af:4f:d8:a3:19:
                    50:10:27:31:87:b8:0f:19:eb:f0:ae:da:bf:55:73:
                    2f:d2:f4:0c:c1:09:4f:57:9a:ca:92:4a:ec:08:97:
                    10:d8:63:4f:ce:88:fd:03:b5:e6:55:48:7a:d4:c6:
                    8a:f2:d6:97:ef:8d:16:e9:46:24:8c:59:55:32:e8:
                    fd:2c:7e:97:21:f6:38:98:5b:8e:64:42:03:6e:73:
                    d9:12:be:6d:dc:5e:41:38:17:e6:3a:ec:63:be:35:
                    f3:cf:4b:32:d7:1f:bd:60:58:f2:31:60:f8:f6:9d:
                    c5:0a:22:42:9c:82:31:a0:20:58:25:80:7d:db:f2:
                    8b:2a:c5:4f:1e:55:28:33:7c:b1:3e:59:11:e5:c3:
                    fa:ce:d5:7d:39:01:25:8b:d4:72:a4:36:9d:3b:a7:
                    0e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:87:EF:2F:83:62:43:AB:98:71:06:86:E3:B3:A2:56:D8:2C:36:03
            X509v3 Authority Key Identifier:
                keyid:1C:91:B5:AF:9B:60:EA:3F:1C:1D:B8:7E:AE:C6:DA:7C:2E:A0:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/HJG1r5tg6j8cHbh-rsbafC6gqHc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36432B6/F3AB7302B75811ED8B42AC8FF1222468/HJG1r5tg6j8cHbh-rsbafC6gqHc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:4b:3c:bd:1c:54:3b:ba:f3:5d:1f:cb:a9:68:f5:ae:3c:73:
         d2:27:d5:da:4d:17:86:31:c3:b4:c8:db:c1:f6:21:f4:3f:be:
         a8:be:68:b7:ed:c6:9e:9f:3c:e6:50:ff:ba:97:58:f3:70:10:
         99:18:82:de:e3:27:9c:0b:b2:e7:e8:93:f0:6e:a6:16:5e:5d:
         eb:6a:97:2e:dc:4e:91:27:ac:07:f2:d7:9c:1c:d1:65:76:2a:
         07:5d:5f:e1:7f:62:57:4c:52:bd:13:ed:61:10:58:ff:3b:4f:
         8c:e7:f1:a9:c9:16:0c:ae:4c:0f:85:07:53:bb:5f:c2:96:ea:
         e5:82:b7:1d:94:a7:9e:7b:16:d7:b3:63:6f:32:bd:70:af:86:
         72:0f:06:8b:90:4c:56:30:ea:2c:33:df:9e:19:3c:8f:98:fa:
         20:24:4c:e2:17:c3:37:87:b3:87:72:3c:1d:1c:dc:62:91:d0:
         5d:63:17:07:87:ef:91:3a:63:f7:a0:79:dd:e2:88:31:27:1b:
         8d:29:1e:fa:33:cb:dc:c0:51:d4:8f:3f:3a:57:79:46:f2:c1:
         f8:93:60:42:51:1d:07:d8:c2:d8:9f:f5:50:b3:72:89:c4:21:
         e8:e3:f2:81:ab:9b:b9:13:93:9f:79:f4:d6:07:80:52:99:58:
         1a:3d:a7:2a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBTkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDMyQjZBRjExMC8GA1UEBRMoMUM5MUI1QUY5QjYwRUEzRjFDMURCODdFQUVDNkRB
N0MyRUEwQTg3NzAeFw0yNjA5MTAwMzE1MjNaFw0yNjA5MTIwMzE1MjNaMBgxFjAU
BgNVBAMTDTZhYTIyMGNiLTkzYjYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCyYM4HxuGFW6nVTLwRY9B+NOW4kJHMTNSOl1v0KZnYlBJk7nSbxxCPDKtd
oTrLp7hAHqBoT/AJ9riYXJviVffq8BdueincPQ0Fi02l22HVuxnyh1O0ui5uXKVX
ZWxz0cJ3uiWvT9ijGVAQJzGHuA8Z6/Cu2r9Vcy/S9AzBCU9XmsqSSuwIlxDYY0/O
iP0DteZVSHrUxory1pfvjRbpRiSMWVUy6P0sfpch9jiYW45kQgNuc9kSvm3cXkE4
F+Y67GO+NfPPSzLXH71gWPIxYPj2ncUKIkKcgjGgIFglgH3b8osqxU8eVSgzfLE+
WRHlw/rO1X05ASWL1HKkNp07pw5DAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUvYfv
L4NiQ6uYcQaG47OiVtgsNgMwHwYDVR0jBBgwFoAUHJG1r5tg6j8cHbh+rsbafC6g
qHcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQzMkI2L0YzQUI3MzAyQjc1ODExRUQ4QjQyQUM4RkYxMjIyNDY4L0hKRzFy
NXRnNmo4Y0hiaC1yc2JhZkM2Z3FIYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0hKRzFyNXRnNmo4Y0hiaC1yc2JhZkM2Z3FIYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDMyQjYvRjNBQjczMDJCNzU4MTFFRDhCNDJBQzhGRjEy
MjI0NjgvSEpHMXI1dGc2ajhjSGJoLXJzYmFmQzZncUhjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBjSzy9HFQ7uvNdH8upaPWuPHPSJ9Xa
TReGMcO0yNvB9iH0P76ovmi37caenzzmUP+6l1jzcBCZGILe4yecC7Ln6JPwbqYW
Xl3rapcu3E6RJ6wH8tecHNFldioHXV/hf2JXTFK9E+1hEFj/O0+M5/GpyRYMrkwP
hQdTu1/ClurlgrcdlKeeexbXs2NvMr1wr4ZyDwaLkExWMOosM9+eGTyPmPogJEzi
F8M3h7OHcjwdHNxikdBdYxcHh++ROmP3oHnd4ogxJxuNKR76M8vcwFHUjz86V3lG
8sH4k2BCUR0H2MLYn/VQs3KJxCHo4/KBq5u5E5OfefTWB4BSmVgaPacq
-----END CERTIFICATE-----