Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
File:                     qO-WBRTjNkRNPN43sktm3DnUPRs.mft (raw, json)
Hash identifier:          e7zwjhKIOW89sh7hEBFDvk9pp+kiXM49aW9to4qlQaQ=
Subject key identifier:   B9:6E:0E:5D:B4:AD:DA:32:E5:19:51:E6:C2:60:27:8C:E1:96:D1:27
Authority key identifier: A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B
Certificate issuer:       /CN=F3668CFEAF/serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
Certificate serial:       04B6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
Manifest number:          049E
Signing time:             Fri 11 Sep 2026 03:38:02 +0000
Manifest this update:     Fri 11 Sep 2026 03:38:01 +0000
Manifest next update:     Sun 13 Sep 2026 03:38:01 +0000
Files and hashes:         1: qO-WBRTjNkRNPN43sktm3DnUPRs.crl (hash: yS7rTrBkZD9rPuSwgM7WH38FcPwIXyag9T9+IydgZO8=)
                          2: C64BDF325B8611EE8F5917154AD9E6FC.roa (hash: lOfMw6yYmupoBGzZG06JxE7nkGYN0SjR1YBL+6yU110=)
                          3: 3FC126045B7F11EE91B3797C4AD9E6FC.roa (hash: B4Jxb4zuiNxx8ARYO+8FuXUu5CFHZJCjPVqFobOB2EU=)
                          4: F592AE225B7E11EEAAD8A37B4AD9E6FC.roa (hash: H2+/hMWhZrQQ/v+xp+P99me7GUvAhaEZLEIOvuDJ8+o=)
                          5: 9389DEB25B7E11EE85FB5A794AD9E6FC.roa (hash: saW9gDDU1fU/ss5E5QByOp+7T1wbc1vVgpJ7XS+gk+s=)
                          6: 39E85D245B7F11EE90195D7C4AD9E6FC.roa (hash: eHbXQ/7kild+PjHeBFmSGxlAnlG3pi2uyC9o63m5Mio=)
                          7: 44122BBE5B7E11EEA5C359784AD9E6FC.roa (hash: dlLpBI0Us25zgjOKkdJouRreKgFknaWvSBpHKXaHN4Q=)
                          8: 0DDE14645B8711EEBE2DF3154AD9E6FC.roa (hash: OVYm5oOpe8XlJOHUYg0R0oIytfPmlhVRgGeohPVoeGg=)
                          9: E29E1C625B7D11EEAFF513774AD9E6FC.roa (hash: cL6yXVTdN5LFRK/8lI56JvUwQ8huIMxP3ArtUJsfAsg=)
                          10: 0DB547A45B7E11EE95F5E0774AD9E6FC.roa (hash: sgLUjm9KT8NBSGsfPuF7zb59LXdnTNhjWZlBuJluY4o=)
                          11: 82BE0D345B8711EE8AF170174AD9E6FC.roa (hash: du0kSdCk2tSzKNVUZIxuV5z/5Bcr0/T6HJ/NasAIv4s=)
                          12: 673167545B7E11EE98EEBD784AD9E6FC.roa (hash: adqbPWSj3qJmhRpUh3DUEWmWfDKPs4YfwC9ZlFS5ias=)
                          13: A97AA9E05B7E11EEAD5E8F794AD9E6FC.roa (hash: 3NkJ+hNEcmyOZzaQCsy/+Ozh2yGmiiWLNtnnqsmfG2I=)
                          14: C07457B08A3711F0A002C2E7DAE4EC9C.roa (hash: Pe7GZmcC+gV4uLFF5b8V8YgWqeJmXfjZci1uqWUJRZA=)
                          15: BBA7D8A05B8711EEA5880E184AD9E6FC.roa (hash: NwbjXk0kj8eY+sbmyk9mA7z7P4Od2Lqrhnl5SE+949A=)
                          16: 7D84FCC85B7E11EE930F05794AD9E6FC.roa (hash: LbVSQZqmCHBXF80jfRgZ632p1CiqtMRJRyKOIJ1fwIY=)
                          17: 5A3685F85B7D11EEB4B9A0754AD9E6FC.roa (hash: hua4m2v20w0RdcluLq3SvMVi3aYeRg47OfgA9wTRs3E=)
                          18: 1C0B2122019C11F1BBDB0E7FDAE4EC9C.roa (hash: xwJRkcjKrYUbtrVrTZw0KB8n5igOjLaAbAqiU+HglAk=)
                          19: D6AA10E05B7E11EE9B32467A4AD9E6FC.roa (hash: RAafA0ML5VlgZ60Y1uxp4EowWyBnwvs0LOD/pOddd5E=)
                          20: 9FF8CF2E5B8711EE9F40A5174AD9E6FC.roa (hash: lG9MW9PGMEKdmiEYPlQxLtvMK2I/+bgWEhfhck5fvqA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 00:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1206 (0x4b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3668CFEAF, serialNumber=A8EF960514E336444D3CDE37B24B66DC39D43D1B
        Validity
            Not Before: Sep 11 03:38:01 2026 GMT
            Not After : Sep 13 03:38:01 2026 GMT
        Subject: CN=6aa3779a-e074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:00:80:a4:e8:fe:30:a8:21:bf:a7:1e:50:f7:
                    62:fd:c2:50:31:8a:f6:39:2d:4a:a6:8b:b9:53:e3:
                    d8:ff:bf:eb:c6:41:86:87:bf:05:16:b2:57:b0:78:
                    7b:a3:60:8f:2d:72:0c:0d:20:f1:e8:c1:49:ee:6d:
                    79:f9:16:04:51:e5:80:89:26:da:69:c7:a4:9d:d8:
                    69:ea:60:0f:78:2d:0d:d3:03:ae:46:ab:f1:5e:be:
                    39:73:6e:be:96:a1:c3:82:26:9b:2d:66:b8:14:2c:
                    79:ca:46:25:ea:e8:1b:f4:b4:31:87:3f:f5:df:6a:
                    1e:31:1a:ac:a9:91:4a:72:5f:cd:66:76:8e:e0:8c:
                    27:15:9b:c1:8c:bb:7b:30:e3:3b:e4:f6:e2:08:25:
                    f4:d7:26:7a:c3:ad:e5:78:ec:12:58:28:c7:96:5f:
                    d7:a2:e6:d6:4d:bd:d4:c5:48:77:6e:9b:1b:b8:db:
                    76:a9:87:d8:a0:1c:40:41:e9:4f:c3:c9:7a:9d:6e:
                    17:ff:11:f1:c4:8d:78:13:3d:88:8a:d5:f9:1c:ca:
                    ae:35:f1:8c:0b:9b:45:79:e7:99:e2:61:41:b9:d5:
                    ec:5a:8c:d8:8b:2c:58:f4:df:63:a4:bc:ea:a5:26:
                    26:4d:bc:37:6e:50:66:53:01:ed:66:bf:7c:f4:e3:
                    fe:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6E:0E:5D:B4:AD:DA:32:E5:19:51:E6:C2:60:27:8C:E1:96:D1:27
            X509v3 Authority Key Identifier:
                keyid:A8:EF:96:05:14:E3:36:44:4D:3C:DE:37:B2:4B:66:DC:39:D4:3D:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qO-WBRTjNkRNPN43sktm3DnUPRs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3668CFE/95EFD74C375711EEBB1432184AD9E6FC/qO-WBRTjNkRNPN43sktm3DnUPRs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:22:a1:7d:b7:2d:e1:e4:23:82:c4:46:9b:5c:4a:5a:f0:87:
         94:9d:0a:e1:68:30:2a:5b:99:f6:4a:dd:48:73:8c:a6:ed:6b:
         00:58:4b:4a:91:e9:1b:2a:5e:61:49:e8:44:0a:3b:11:85:44:
         df:ed:bf:49:23:14:18:13:ab:2c:72:87:61:89:90:13:80:af:
         85:0e:c1:a7:f1:08:be:1c:b9:21:83:64:8a:38:74:92:9d:13:
         ea:a3:c8:d7:78:f9:d9:a9:a8:09:75:b9:cf:f6:9d:84:1e:d2:
         3c:b3:52:dc:9a:fb:c0:f9:a6:ac:2b:39:16:99:17:b7:52:08:
         e5:ed:0d:1e:0c:27:23:43:1d:37:6f:ab:49:15:80:5c:37:74:
         23:f2:50:1e:84:80:68:4e:0a:ec:45:66:4e:3d:6c:1e:d4:8e:
         64:93:78:d5:a4:2b:d6:bf:01:f7:0b:e9:7e:4a:d4:64:62:a1:
         ba:ee:04:27:40:33:fd:5a:8e:c7:8a:f5:b7:87:da:e3:11:49:
         ff:39:a4:de:e0:bd:92:58:a6:4d:47:dd:45:72:59:2c:6b:c9:
         b0:0e:58:4e:e2:da:49:d6:e6:5b:8e:fb:77:80:24:8f:e3:7c:
         a8:24:41:56:38:17:b8:8b:05:c7:a0:be:ea:98:db:40:be:93:
         9b:02:96:ab
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBLYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjhDRkVBRjExMC8GA1UEBRMoQThFRjk2MDUxNEUzMzY0NDREM0NERTM3QjI0QjY2
REMzOUQ0M0QxQjAeFw0yNjA5MTEwMzM4MDFaFw0yNjA5MTMwMzM4MDFaMBgxFjAU
BgNVBAMTDTZhYTM3NzlhLWUwNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCnAICk6P4wqCG/px5Q92L9wlAxivY5LUqmi7lT49j/v+vGQYaHvwUWslew
eHujYI8tcgwNIPHowUnubXn5FgRR5YCJJtppx6Sd2GnqYA94LQ3TA65Gq/Fevjlz
br6WocOCJpstZrgULHnKRiXq6Bv0tDGHP/Xfah4xGqypkUpyX81mdo7gjCcVm8GM
u3sw4zvk9uIIJfTXJnrDreV47BJYKMeWX9ei5tZNvdTFSHdumxu423aph9igHEBB
6U/DyXqdbhf/EfHEjXgTPYiK1fkcyq418YwLm0V555niYUG51exajNiLLFj032Ok
vOqlJiZNvDduUGZTAe1mv3z04/4DAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUuW4O
XbSt2jLlGVHmwmAnjOGW0ScwHwYDVR0jBBgwFoAUqO+WBRTjNkRNPN43sktm3DnU
PRswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjY4Q0ZFLzk1RUZENzRDMzc1NzExRUVCQjE0MzIxODRBRDlFNkZDL3FPLVdC
UlRqTmtSTlBONDNza3RtM0RuVVBScy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FPLVdCUlRqTmtSTlBONDNza3RtM0RuVVBScy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjhDRkUvOTVFRkQ3NEMzNzU3MTFFRUJCMTQzMjE4NEFE
OUU2RkMvcU8tV0JSVGpOa1JOUE40M3NrdG0zRG5VUFJzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEIqF9ty3h5COCxEabXEpa8IeUnQrh
aDAqW5n2St1Ic4ym7WsAWEtKkekbKl5hSehECjsRhUTf7b9JIxQYE6sscodhiZAT
gK+FDsGn8Qi+HLkhg2SKOHSSnRPqo8jXePnZqagJdbnP9p2EHtI8s1LcmvvA+aas
KzkWmRe3Ugjl7Q0eDCcjQx03b6tJFYBcN3Qj8lAehIBoTgrsRWZOPWwe1I5kk3jV
pCvWvwH3C+l+StRkYqG67gQnQDP9Wo7HivW3h9rjEUn/OaTe4L2SWKZNR91Fclks
a8mwDlhO4tpJ1uZbjvt3gCSP43yoJEFWOBe4iwXHoL7qmNtAvpObApar
-----END CERTIFICATE-----