Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
File:                     gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft (raw, json)
Hash identifier:          jVy66b0ayqED2w2iULYC1V9PXJ8sKLsqsTFtrMTmDg0=
Subject key identifier:   C0:F7:D5:D2:18:F3:7E:33:0A:14:C3:3C:6A:E6:E2:F1:6C:0F:B5:F2
Authority key identifier: 80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E
Certificate issuer:       /CN=F3654AD1AF/serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
Certificate serial:       03FA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
Manifest number:          03F1
Signing time:             Sun 25 Oct 2026 04:02:55 +0000
Manifest this update:     Sun 25 Oct 2026 04:02:54 +0000
Manifest next update:     Tue 27 Oct 2026 04:02:54 +0000
Files and hashes:         1: gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl (hash: n+7J+XnezK7ZluZBILoD57OVWyHEhnCwQ8j3nPArilw=)
                          2: 2AA9064EA65E11EF9B4C49B3762E951A.roa (hash: l3UjS75Wddi3tQ56JCO9mzw04osMIVHGG4lmyDGrGpo=)
                          3: 12F6BC8EA65F11EFBD05BFB7762E951A.roa (hash: As2odCsPm4vEHElY0hwwZoUwDbYLoyLhd4dK1enI6Hg=)
                          4: 3566B206A65F11EFA911EDB9762E951A.roa (hash: BmgLIdkjAVVpbq4Muw+sVecnxg7GBO2Ss9+TP+TqAns=)
                          5: B2F145D4A65E11EF8E98B0B5762E951A.roa (hash: D8cU2N+EHK3tg0aoMbKQ1AquxfaJi2Vqr4i3VqzQqrQ=)
                          6: 2DD1E2A2C11811F09F7B83BEDAE4EC9C.roa (hash: wvL1zVkk4PrEbO1hOI+/jbrgVbiJrtyBQ/7aczeZOJg=)
                          7: 615FFEA4A65E11EF903E76B3762E951A.roa (hash: AaKVjZQe73GcXnsIAj31QxOm6ROcXoPa0qfMAokaUHI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 04:02:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1018 (0x3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3654AD1AF, serialNumber=80D435BBC77094E85B7BF3082580D127B910779E
        Validity
            Not Before: Oct 25 04:02:54 2026 GMT
            Not After : Oct 27 04:02:54 2026 GMT
        Subject: CN=6add7f6f-b89f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c7:10:17:29:1e:83:df:b0:02:7f:f3:f6:40:
                    53:3c:ae:88:3a:56:d5:08:3d:11:3f:a0:cd:43:78:
                    35:bd:83:ae:88:74:49:a2:fa:8c:62:8f:77:87:7b:
                    ad:02:02:5f:bf:11:ce:26:26:46:20:d2:5f:a6:ca:
                    0a:c2:84:06:53:d0:a5:d9:93:76:22:0e:59:4b:5b:
                    b5:29:e4:b2:c4:9c:ed:20:2d:d8:da:88:c5:ef:68:
                    ea:be:3b:60:9e:8c:06:6b:e0:a1:fd:02:70:a9:99:
                    d5:92:48:fc:78:16:55:d5:ad:a0:47:5c:56:a8:62:
                    12:e2:54:77:68:82:9a:0c:be:91:ef:0e:13:dd:08:
                    be:df:cb:95:aa:f0:df:4e:be:88:41:98:60:26:c5:
                    47:71:fb:52:a5:a6:7a:bb:93:ec:9c:3a:21:51:4e:
                    21:fe:ad:e6:64:dd:dd:0a:24:5a:d1:29:ad:d2:ec:
                    7e:9f:a8:a2:d3:73:d2:9d:5f:f3:8a:5a:4d:5f:a6:
                    0c:08:0d:0c:d8:4b:f1:3d:47:6e:ea:8c:4b:0d:36:
                    cd:0c:f7:20:3c:66:41:6c:47:14:9c:e8:a6:92:9c:
                    66:96:4d:1a:fe:2b:03:6f:58:c4:61:83:9c:a8:74:
                    fc:06:2d:f9:3c:75:e7:7c:8b:f1:07:6b:20:52:d3:
                    4f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:D5:D2:18:F3:7E:33:0A:14:C3:3C:6A:E6:E2:F1:6C:0F:B5:F2
            X509v3 Authority Key Identifier:
                keyid:80:D4:35:BB:C7:70:94:E8:5B:7B:F3:08:25:80:D1:27:B9:10:77:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3654AD1/228F5B32CF0111EE94F586B9775412E6/gNQ1u8dwlOhbe_MIJYDRJ7kQd54.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:79:5a:ae:78:5d:a3:b7:50:b5:c7:84:6d:83:5e:e9:75:b5:
         cf:2c:cc:fb:2e:dc:b4:c4:28:48:4c:70:5c:d6:2d:15:e8:16:
         56:17:8c:15:41:8a:b3:3c:2a:7c:4e:3a:4f:f7:d4:c6:67:25:
         dc:29:76:12:74:01:74:27:a6:74:9d:61:4d:9b:e3:85:c2:f0:
         ba:b6:ea:ab:e1:d7:3a:29:b8:48:da:7f:c2:62:37:28:40:c0:
         da:56:b9:67:79:2d:b1:78:f7:31:10:94:a6:68:d7:08:21:db:
         47:68:68:23:c7:6d:33:9b:c6:a1:99:2d:7e:75:2d:1c:11:ca:
         d9:b4:18:60:76:68:3e:ca:57:d9:76:c3:3e:be:cd:48:12:69:
         a9:ea:2a:c5:4c:2f:3d:84:73:ae:ea:33:69:92:4b:4a:39:c9:
         3d:db:4c:9b:8a:72:65:1e:0c:91:f3:22:fe:11:17:08:15:fb:
         9c:39:03:08:ce:36:a1:d2:44:40:64:45:1e:c1:c4:d3:0a:aa:
         87:de:14:78:d7:75:f6:6f:e5:af:9c:e6:9b:d9:51:5a:f5:3d:
         bb:46:d4:e7:f6:a7:10:f4:5d:63:cb:90:e5:0e:d2:0e:d0:82:
         79:dc:43:58:04:1f:d7:a1:d4:8b:ea:88:e8:af:73:07:2d:2c:
         91:83:54:71
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA/owDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTRBRDFBRjExMC8GA1UEBRMoODBENDM1QkJDNzcwOTRFODVCN0JGMzA4MjU4MEQx
MjdCOTEwNzc5RTAeFw0yNjEwMjUwNDAyNTRaFw0yNjEwMjcwNDAyNTRaMBgxFjAU
BgNVBAMTDTZhZGQ3ZjZmLWI4OWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDoxxAXKR6D37ACf/P2QFM8rog6VtUIPRE/oM1DeDW9g66IdEmi+oxij3eH
e60CAl+/Ec4mJkYg0l+mygrChAZT0KXZk3YiDllLW7Up5LLEnO0gLdjaiMXvaOq+
O2CejAZr4KH9AnCpmdWSSPx4FlXVraBHXFaoYhLiVHdogpoMvpHvDhPdCL7fy5Wq
8N9OvohBmGAmxUdx+1Klpnq7k+ycOiFRTiH+reZk3d0KJFrRKa3S7H6fqKLTc9Kd
X/OKWk1fpgwIDQzYS/E9R27qjEsNNs0M9yA8ZkFsRxSc6KaSnGaWTRr+KwNvWMRh
g5yodPwGLfk8ded8i/EHayBS00/9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUwPfV
0hjzfjMKFMM8aubi8WwPtfIwHwYDVR0jBBgwFoAUgNQ1u8dwlOhbe/MIJYDRJ7kQ
d54wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU0QUQxLzIyOEY1QjMyQ0YwMTExRUU5NEY1ODZCOTc3NTQxMkU2L2dOUTF1
OGR3bE9oYmVfTUlKWURSSjdrUWQ1NC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2dOUTF1OGR3bE9oYmVfTUlKWURSSjdrUWQ1NC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTRBRDEvMjI4RjVCMzJDRjAxMTFFRTk0RjU4NkI5Nzc1
NDEyRTYvZ05RMXU4ZHdsT2hiZV9NSUpZRFJKN2tRZDU0Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCOeVqueF2jt1C1x4Rtg17pdbXPLMz7
Lty0xChITHBc1i0V6BZWF4wVQYqzPCp8TjpP99TGZyXcKXYSdAF0J6Z0nWFNm+OF
wvC6tuqr4dc6KbhI2n/CYjcoQMDaVrlneS2xePcxEJSmaNcIIdtHaGgjx20zm8ah
mS1+dS0cEcrZtBhgdmg+ylfZdsM+vs1IEmmp6irFTC89hHOu6jNpkktKOck920yb
inJlHgyR8yL+ERcIFfucOQMIzjah0kRAZEUewcTTCqqH3hR413X2b+WvnOab2VFa
9T27RtTn9qcQ9F1jy5DlDtIO0IJ53ENYBB/XodSL6ojor3MHLSyRg1Rx
-----END CERTIFICATE-----