Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
File:                     nxc4PrZn5Ue6AM-3-RT0KExYScw.mft (raw, json)
Hash identifier:          6Ubs9MJtTK2b3J37o2GmZq9GBftoMS4lvmI0UPHHg58=
Subject key identifier:   F0:DD:CB:12:65:F9:25:CA:90:9A:C5:A6:67:6F:77:6A:E6:32:77:26
Authority key identifier: 9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC
Certificate issuer:       /CN=F36549B1AF/serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
Certificate serial:       1027
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
Manifest number:          1010
Signing time:             Fri 21 Aug 2026 00:55:27 +0000
Manifest this update:     Fri 21 Aug 2026 00:55:26 +0000
Manifest next update:     Sun 23 Aug 2026 00:55:26 +0000
Files and hashes:         1: nxc4PrZn5Ue6AM-3-RT0KExYScw.crl (hash: aK37TEdRbkDR3eNqIwFxzM5fkpP1p0rf/eJPNLFh8Jg=)
                          2: 65B8CDA0902211F1ADB723D1CE1D38B0.roa (hash: Xim1UGEgD9YF60xXopB/o337VqTBiStau5CZPIWZdWo=)
                          3: 39A15096902411F1B016B3D9CE1D38B0.roa (hash: jJJbAx5djHh+tei5Tazc3X/5MjMzwGLT3ZzM0dUmwmE=)
                          4: 7C3E55B4902111F19C3D6FC9CE1D38B0.roa (hash: 3YAgaNCMWja+XqVqVSO6d1a05F3nuNn9YgnY9uBJFx0=)
                          5: CB802D6A9FD011F0B09E84F1DAE4EC9C.roa (hash: S80ZZFyyc08N7gI7of8t+4zntc1/6kCBNhlAw4585HY=)
                          6: 058F87F0901F11F1B4372CBDCE1D38B0.roa (hash: rPHef9QQYZd+LvUX8tkf0SC7wdAVqHDLQMDNntxfd2o=)
                          7: 63911742901F11F18E1340BDCE1D38B0.roa (hash: VoYbPhNHZSIv7q3e/cQMepOJ/LmJ7pp8vT7io8/IP9M=)
                          8: 4B47C07C902511F1855BC0E1CE1D38B0.roa (hash: LMHsEgxxHhrC80yn+QmfSbx1JlHBlW1LGksapRgWHNU=)
                          9: D050B396902011F1BEB96DC5CE1D38B0.roa (hash: DBovRPK1Tx1TXVFD1e46J7QxRI4i4W1he+qGL0PV53k=)
                          10: 94C0EE66902211F1BE0B89D1CE1D38B0.roa (hash: H2VqM3Al4tnne65f7bzWE3hlso64x9ApyHj1wPBG8sA=)
                          11: 7FA6B8DC9FD011F09FBF73EDDAE4EC9C.roa (hash: mIreRYj0MVYZW7c/XBrrdQAMZGvWksvf2R6Ym6OT8rM=)
                          12: FA54B1109FD011F08E699CF1DAE4EC9C.roa (hash: F+/CQFEGh7hy0TbdeqQH+fkZYKvk2d9fKx2iVdi2NNY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 23 Aug 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4135 (0x1027)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36549B1AF, serialNumber=9F17383EB667E547BA00CFB7F914F4284C5849CC
        Validity
            Not Before: Aug 21 00:55:26 2026 GMT
            Not After : Aug 23 00:55:26 2026 GMT
        Subject: CN=6a87a1ff-71bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5c:61:95:dc:bf:fa:d5:2d:2a:3a:32:69:72:
                    c2:01:4e:cf:5e:53:49:62:93:ec:c5:46:16:e4:27:
                    99:e9:86:de:e7:b4:5a:48:f5:4d:9a:4e:4d:24:d0:
                    a9:cd:65:71:b6:97:21:08:5f:71:b2:7a:ca:0d:9c:
                    8f:51:98:3f:2d:bb:67:91:f9:5a:d1:84:93:e4:07:
                    06:09:cc:86:76:7c:2a:91:6c:1c:36:a5:51:1d:56:
                    ab:dd:21:ca:13:7c:85:e0:eb:d4:b5:a4:43:e3:43:
                    fc:8f:cc:8a:7f:a3:ad:21:42:4d:f3:f0:66:93:16:
                    fa:9e:f9:76:e8:b6:88:66:58:40:76:24:45:b8:dd:
                    78:95:c3:65:e5:a2:13:fe:d2:2d:be:67:64:5f:ab:
                    75:1b:77:41:3b:98:4d:0f:c7:25:00:16:e7:bb:b4:
                    14:e6:26:7d:1f:98:48:b1:4c:18:b5:7c:3a:e8:a0:
                    b6:5b:3a:5e:0d:df:66:ef:ec:cb:5e:6c:3c:9a:3b:
                    db:2e:16:71:e2:db:5b:1f:b5:d6:99:52:63:fa:57:
                    63:2d:65:ad:71:d2:ba:4b:02:c3:3c:28:96:32:3f:
                    92:e2:ef:a2:60:94:5e:1b:10:d7:93:6e:4e:8b:dd:
                    0e:12:88:3a:7b:9f:f0:f2:9f:1c:05:f7:b1:35:54:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:DD:CB:12:65:F9:25:CA:90:9A:C5:A6:67:6F:77:6A:E6:32:77:26
            X509v3 Authority Key Identifier:
                keyid:9F:17:38:3E:B6:67:E5:47:BA:00:CF:B7:F9:14:F4:28:4C:58:49:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/nxc4PrZn5Ue6AM-3-RT0KExYScw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36549B1/DF788C98561311E5B1A0E360F8AEA228/nxc4PrZn5Ue6AM-3-RT0KExYScw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:73:66:7a:8a:0a:e2:77:a8:b3:5a:0b:e4:74:82:f1:d8:dd:
         aa:f6:c7:e0:ec:ee:71:6e:2c:43:95:cf:65:bc:b9:91:d7:d1:
         0e:19:e3:8d:63:e2:b9:df:58:61:05:ea:a6:fd:1f:fa:77:16:
         e5:42:db:6b:84:19:3e:ab:74:3f:0d:2b:91:a7:f8:0c:33:d7:
         2e:52:71:f8:b3:d6:e2:7e:51:ff:6d:8c:d1:37:df:52:67:89:
         ef:dd:f7:3e:84:cb:20:ef:f7:9b:56:19:27:85:e7:b9:8b:5e:
         55:4d:0d:41:6a:c2:bd:60:fa:76:1d:b0:eb:89:ab:de:f8:f0:
         07:eb:4c:25:45:f8:33:53:0c:68:c4:28:c1:7f:21:da:b0:61:
         e8:5d:52:f7:ae:b1:5e:48:b2:e8:f8:50:55:eb:a0:fd:f7:28:
         c9:22:b5:17:47:16:61:a4:8b:de:ee:35:8c:88:7d:96:86:a5:
         51:bd:99:09:4b:02:ed:b0:a6:6e:0e:4c:3f:fb:f8:c2:9e:cf:
         2f:7e:7b:cc:5b:14:91:45:67:e2:42:6c:99:66:21:5f:0a:48:
         38:8d:8d:0f:c2:04:3a:35:d4:7e:9a:50:50:ae:67:4a:e3:fc:
         cb:bd:da:07:7c:07:cf:3c:81:be:52:83:5a:26:16:36:1a:5a:
         eb:dc:17:83
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICECcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTQ5QjFBRjExMC8GA1UEBRMoOUYxNzM4M0VCNjY3RTU0N0JBMDBDRkI3RjkxNEY0
Mjg0QzU4NDlDQzAeFw0yNjA4MjEwMDU1MjZaFw0yNjA4MjMwMDU1MjZaMBgxFjAU
BgNVBAMTDTZhODdhMWZmLTcxYmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDdXGGV3L/61S0qOjJpcsIBTs9eU0lik+zFRhbkJ5npht7ntFpI9U2aTk0k
0KnNZXG2lyEIX3GyesoNnI9RmD8tu2eR+VrRhJPkBwYJzIZ2fCqRbBw2pVEdVqvd
IcoTfIXg69S1pEPjQ/yPzIp/o60hQk3z8GaTFvqe+XbotohmWEB2JEW43XiVw2Xl
ohP+0i2+Z2Rfq3Ubd0E7mE0PxyUAFue7tBTmJn0fmEixTBi1fDrooLZbOl4N32bv
7MtebDyaO9suFnHi21sftdaZUmP6V2MtZa1x0rpLAsM8KJYyP5Li76JglF4bENeT
bk6L3Q4SiDp7n/DynxwF97E1VJ8nAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU8N3L
EmX5JcqQmsWmZ293auYydyYwHwYDVR0jBBgwFoAUnxc4PrZn5Ue6AM+3+RT0KExY
ScwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0OUIxL0RGNzg4Qzk4NTYxMzExRTVCMUEwRTM2MEY4QUVBMjI4L254YzRQ
clpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL254YzRQclpuNVVlNkFNLTMtUlQwS0V4WVNjdy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTQ5QjEvREY3ODhDOTg1NjEzMTFFNUIxQTBFMzYwRjhB
RUEyMjgvbnhjNFByWm41VWU2QU0tMy1SVDBLRXhZU2N3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAnc2Z6igrid6izWgvkdILx2N2q9sfg
7O5xbixDlc9lvLmR19EOGeONY+K531hhBeqm/R/6dxblQttrhBk+q3Q/DSuRp/gM
M9cuUnH4s9biflH/bYzRN99SZ4nv3fc+hMsg7/ebVhknhee5i15VTQ1BasK9YPp2
HbDriave+PAH60wlRfgzUwxoxCjBfyHasGHoXVL3rrFeSLLo+FBV66D99yjJIrUX
RxZhpIve7jWMiH2WhqVRvZkJSwLtsKZuDkw/+/jCns8vfnvMWxSRRWfiQmyZZiFf
Ckg4jY0PwgQ6NdR+mlBQrmdK4/zLvdoHfAfPPIG+UoNaJhY2Glrr3BeD
-----END CERTIFICATE-----