Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
File:                     ib0Ua61yHpyUGcUJxustXey5ZyE.mft (raw, json)
Hash identifier:          K2msByWH9FGSfwQ5TErhQZu8BVh2x1852E1LbnI3uSY=
Subject key identifier:   8B:E0:9C:77:E8:27:6D:C2:F0:07:32:03:94:B6:CB:D2:E1:AD:50:64
Authority key identifier: 89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21
Certificate issuer:       /CN=F36675E3AF/serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
Certificate serial:       0401
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
Manifest number:          03FC
Signing time:             Fri 23 Oct 2026 04:04:28 +0000
Manifest this update:     Fri 23 Oct 2026 04:04:27 +0000
Manifest next update:     Sun 25 Oct 2026 04:04:27 +0000
Files and hashes:         1: ib0Ua61yHpyUGcUJxustXey5ZyE.crl (hash: Jd24RLzU1jgVLGKc2ZtEgROVuyEruxd+9Y3GFZC2JSs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 25 Oct 2026 04:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1025 (0x401)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36675E3AF, serialNumber=89BD146BAD721E9C9419C509C6EB2D5DECB96721
        Validity
            Not Before: Oct 23 04:04:27 2026 GMT
            Not After : Oct 25 04:04:27 2026 GMT
        Subject: CN=6adadccb-fec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:92:c1:22:5d:13:8e:cc:f4:e4:3b:6a:15:d5:
                    9d:d9:8e:62:3d:db:1c:bb:3e:08:c1:b1:30:b6:55:
                    7e:11:cd:75:7b:cc:61:73:38:1e:7f:91:80:2f:5b:
                    98:b3:36:68:81:6a:36:5a:59:56:00:0b:e5:29:e4:
                    0d:9f:c3:a2:84:c7:8b:19:77:4c:c2:66:27:ed:ce:
                    cc:aa:a1:02:ed:2f:52:b4:77:2c:e5:83:36:81:05:
                    b6:e6:f2:61:b4:5d:ae:24:26:4d:3a:54:08:2b:34:
                    8c:3c:71:36:69:da:0c:2b:4d:64:77:26:e6:ac:80:
                    bc:18:73:af:64:0d:68:41:9b:aa:fd:db:bd:c0:2b:
                    0b:d2:d6:a3:51:b4:57:05:1d:d7:4f:f5:a6:d7:dc:
                    1f:a9:ae:2a:73:70:72:3c:9f:f3:45:71:51:ec:88:
                    58:5b:b3:8f:48:55:4c:41:1a:c4:18:c5:af:21:06:
                    86:7a:1a:fe:8f:58:01:3e:e2:93:64:2a:7e:d1:1d:
                    c9:b5:3d:08:ff:53:24:09:8c:76:bc:55:15:91:7e:
                    ee:0d:ea:90:c9:2c:34:62:5e:2b:d6:7d:7c:81:2c:
                    8b:68:5b:5c:0b:57:20:08:a6:f6:49:09:63:43:d1:
                    90:f7:79:d7:41:e7:67:f0:ac:6a:12:43:90:47:a6:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E0:9C:77:E8:27:6D:C2:F0:07:32:03:94:B6:CB:D2:E1:AD:50:64
            X509v3 Authority Key Identifier:
                keyid:89:BD:14:6B:AD:72:1E:9C:94:19:C5:09:C6:EB:2D:5D:EC:B9:67:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ib0Ua61yHpyUGcUJxustXey5ZyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36675E3/DA6A1362D3EF11EEB0BF7F4F775412E6/ib0Ua61yHpyUGcUJxustXey5ZyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:d9:a8:e4:a9:64:d8:c8:11:9a:bd:78:83:68:40:90:05:11:
         ad:8b:f2:1a:32:15:11:56:1e:2d:ac:d5:88:41:b5:90:08:42:
         2a:18:e8:7c:56:4a:eb:da:d2:a9:98:8f:0f:a0:12:d9:94:aa:
         f1:07:23:4e:f3:9d:d7:a3:b2:a0:bd:99:ca:0a:77:4d:46:ec:
         2b:d8:2b:18:36:2c:e9:ae:37:b7:3b:b4:87:f9:08:b5:74:95:
         63:0a:fa:c0:21:30:da:1c:1c:8e:9b:1e:49:27:ca:5d:5a:95:
         45:e9:be:32:e5:86:cd:9c:a2:bb:bb:8b:71:e0:da:94:48:91:
         9f:b4:7f:81:5a:e1:30:f6:28:87:3b:04:97:e3:d9:6e:ab:4c:
         2b:ac:4f:50:90:02:6a:0c:09:9c:76:ae:67:7f:df:0e:94:b9:
         87:6f:44:06:2c:e8:9e:ab:5a:06:58:c5:af:cf:56:ca:31:d0:
         07:08:ee:dd:44:2a:90:f0:35:a9:39:d5:ad:ab:15:2a:17:5f:
         3b:a3:c9:11:1c:04:95:62:1a:ab:bf:65:89:dc:d1:30:d9:d0:
         31:98:f9:2c:e8:66:d7:95:4c:66:e0:3d:30:cc:2e:1e:22:ee:
         0d:10:fc:94:13:16:62:29:b0:d4:f9:f7:c5:a2:12:01:b6:35:
         10:a1:fb:04
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBAEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Njc1RTNBRjExMC8GA1UEBRMoODlCRDE0NkJBRDcyMUU5Qzk0MTlDNTA5QzZFQjJE
NURFQ0I5NjcyMTAeFw0yNjEwMjMwNDA0MjdaFw0yNjEwMjUwNDA0MjdaMBgxFjAU
BgNVBAMTDTZhZGFkY2NiLWZlYzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDQksEiXROOzPTkO2oV1Z3ZjmI92xy7PgjBsTC2VX4RzXV7zGFzOB5/kYAv
W5izNmiBajZaWVYAC+Up5A2fw6KEx4sZd0zCZiftzsyqoQLtL1K0dyzlgzaBBbbm
8mG0Xa4kJk06VAgrNIw8cTZp2gwrTWR3JuasgLwYc69kDWhBm6r9273AKwvS1qNR
tFcFHddP9abX3B+pripzcHI8n/NFcVHsiFhbs49IVUxBGsQYxa8hBoZ6Gv6PWAE+
4pNkKn7RHcm1PQj/UyQJjHa8VRWRfu4N6pDJLDRiXivWfXyBLItoW1wLVyAIpvZJ
CWND0ZD3eddB52fwrGoSQ5BHppxxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUi+Cc
d+gnbcLwBzIDlLbL0uGtUGQwHwYDVR0jBBgwFoAUib0Ua61yHpyUGcUJxustXey5
ZyEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY3NUUzL0RBNkExMzYyRDNFRjExRUVCMEJGN0Y0Rjc3NTQxMkU2L2liMFVh
NjF5SHB5VUdjVUp4dXN0WGV5NVp5RS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2liMFVhNjF5SHB5VUdjVUp4dXN0WGV5NVp5RS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Njc1RTMvREE2QTEzNjJEM0VGMTFFRUIwQkY3RjRGNzc1
NDEyRTYvaWIwVWE2MXlIcHlVR2NVSnh1c3RYZXk1WnlFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAa2ajkqWTYyBGavXiDaECQBRGti/Ia
MhURVh4trNWIQbWQCEIqGOh8Vkrr2tKpmI8PoBLZlKrxByNO853Xo7KgvZnKCndN
Ruwr2CsYNizprje3O7SH+Qi1dJVjCvrAITDaHByOmx5JJ8pdWpVF6b4y5YbNnKK7
u4tx4NqUSJGftH+BWuEw9iiHOwSX49luq0wrrE9QkAJqDAmcdq5nf98OlLmHb0QG
LOieq1oGWMWvz1bKMdAHCO7dRCqQ8DWpOdWtqxUqF187o8kRHASVYhqrv2WJ3NEw
2dAxmPks6GbXlUxm4D0wzC4eIu4NEPyUExZiKbDU+ffFohIBtjUQofsE
-----END CERTIFICATE-----