Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
File:                     _9XXjnVnnozv_5gXPaanm0zID_0.mft (raw, json)
Hash identifier:          uu7jyYXM0RN+6+An1eJAbkehh96+y7MY+O6jrD8SxEo=
Subject key identifier:   78:78:A0:C5:62:C4:57:E7:C2:9B:E0:5B:28:7B:42:9C:85:37:8A:FF
Authority key identifier: FF:D5:D7:8E:75:67:9E:8C:EF:FF:98:17:3D:A6:A7:9B:4C:C8:0F:FD
Certificate issuer:       /CN=F366C76DAF/serialNumber=FFD5D78E75679E8CEFFF98173DA6A79B4CC80FFD
Certificate serial:       0144
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_9XXjnVnnozv_5gXPaanm0zID_0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
Manifest number:          0143
Signing time:             Sun 25 Oct 2026 05:18:58 +0000
Manifest this update:     Sun 25 Oct 2026 05:18:57 +0000
Manifest next update:     Tue 27 Oct 2026 05:18:57 +0000
Files and hashes:         1: _9XXjnVnnozv_5gXPaanm0zID_0.crl (hash: hmmsZGDpmWp+J6FEjuEL0nDSyz+fmXIUq3NW5U6qEpc=)
                          2: 51BF4370D5CD11F0BF78ACDCDAE4EC9C.roa (hash: GpfJtRTKikRCRP7GY2KeAG+0LEHAqBX0XHiILcklaao=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_9XXjnVnnozv_5gXPaanm0zID_0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 05:18:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366C76DAF, serialNumber=FFD5D78E75679E8CEFFF98173DA6A79B4CC80FFD
        Validity
            Not Before: Oct 25 05:18:57 2026 GMT
            Not After : Oct 27 05:18:57 2026 GMT
        Subject: CN=6add9142-4d3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a7:31:6d:26:bd:b6:d0:66:f9:49:f4:ef:eb:
                    54:c4:40:8f:17:ef:cd:d5:c5:3b:71:ac:9c:fc:58:
                    67:a6:5d:27:a5:c0:e4:2d:e5:96:51:6c:ab:ec:0f:
                    17:f3:e3:bf:8f:0d:d1:73:57:74:0d:17:78:bb:3a:
                    f0:34:96:8c:33:f7:3f:9c:2c:60:98:23:33:3d:83:
                    66:f3:55:d7:c5:a0:b0:ed:69:f5:86:39:cd:c8:e3:
                    a3:f1:32:9e:91:2d:53:73:03:29:7c:ae:11:db:53:
                    4d:d6:03:05:22:43:81:7a:46:49:d1:bc:97:13:71:
                    60:96:8f:7b:0e:9a:e9:af:dd:db:06:8b:2e:d4:5c:
                    b3:b5:20:b2:f5:36:3b:79:70:33:ad:44:0a:2b:c5:
                    ca:a8:76:4c:67:dd:ca:9e:f2:28:f6:87:7d:6c:b9:
                    27:fe:7b:b4:58:ea:ca:5d:65:6c:e1:40:12:89:04:
                    76:11:e1:fa:5e:d3:69:f7:eb:cf:7f:a2:59:85:f9:
                    ba:ee:ab:66:2f:d5:0d:69:65:67:56:19:6f:21:d2:
                    11:c5:bd:2c:0b:f2:72:5f:19:e8:44:d3:1d:70:43:
                    ed:75:58:15:50:d5:c7:69:76:fa:d4:b9:a9:52:76:
                    1d:6a:b0:f4:c6:e3:64:6d:c1:3a:dc:6b:a1:ae:dc:
                    44:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:78:A0:C5:62:C4:57:E7:C2:9B:E0:5B:28:7B:42:9C:85:37:8A:FF
            X509v3 Authority Key Identifier:
                keyid:FF:D5:D7:8E:75:67:9E:8C:EF:FF:98:17:3D:A6:A7:9B:4C:C8:0F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_9XXjnVnnozv_5gXPaanm0zID_0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366C76D/7486C632D5CB11F0A751D3D1DAE4EC9C/_9XXjnVnnozv_5gXPaanm0zID_0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:d1:d2:91:fc:5a:2d:31:9a:49:40:3d:73:23:11:67:89:ea:
         63:ad:fe:90:09:13:9d:94:a1:4b:5e:56:49:4e:a3:dd:08:9b:
         da:44:04:a0:c6:fc:2f:10:73:9a:ac:a9:76:71:ad:db:9e:41:
         48:b8:64:24:c4:f6:93:1b:a6:12:d9:7a:9d:f0:8c:8d:e2:56:
         b6:3f:48:89:0c:e9:bb:ca:39:c2:0f:fe:a7:2c:1a:a2:a2:50:
         9d:69:0a:1a:9d:cd:1a:9a:34:2b:8f:57:f8:71:3a:dd:91:77:
         28:f5:b0:92:bf:91:96:06:1e:e2:7e:dd:e6:8e:a8:1e:7a:65:
         13:52:d9:db:ef:0d:35:7e:64:51:cd:de:c6:69:fc:d8:00:97:
         7d:c9:f1:99:1a:19:4f:7b:f4:b7:a1:07:a2:96:c3:7c:e7:02:
         2e:e7:c0:3a:f9:0c:5c:83:11:e9:92:4e:a5:4c:99:35:b5:a3:
         b7:19:e6:51:66:26:40:1a:1a:c4:0e:ba:fe:3b:57:93:e0:67:
         40:ad:f5:23:1c:d4:d1:e9:57:5c:7c:07:50:d3:49:98:01:1e:
         6d:ce:77:a7:af:cc:e9:71:ac:c0:32:e1:1d:91:0d:31:52:9a:
         05:23:7f:f2:77:c1:d2:31:8b:c6:ef:98:e3:f0:11:46:ca:98:
         b0:64:04:c7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkM3NkRBRjExMC8GA1UEBRMoRkZENUQ3OEU3NTY3OUU4Q0VGRkY5ODE3M0RBNkE3
OUI0Q0M4MEZGRDAeFw0yNjEwMjUwNTE4NTdaFw0yNjEwMjcwNTE4NTdaMBgxFjAU
BgNVBAMTDTZhZGQ5MTQyLTRkM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChpzFtJr220Gb5SfTv61TEQI8X783VxTtxrJz8WGemXSelwOQt5ZZRbKvs
Dxfz47+PDdFzV3QNF3i7OvA0lowz9z+cLGCYIzM9g2bzVdfFoLDtafWGOc3I46Px
Mp6RLVNzAyl8rhHbU03WAwUiQ4F6RknRvJcTcWCWj3sOmumv3dsGiy7UXLO1ILL1
Njt5cDOtRAorxcqodkxn3cqe8ij2h31suSf+e7RY6spdZWzhQBKJBHYR4fpe02n3
689/olmF+bruq2Yv1Q1pZWdWGW8h0hHFvSwL8nJfGehE0x1wQ+11WBVQ1cdpdvrU
ualSdh1qsPTG42RtwTrca6Gu3EQNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeHig
xWLEV+fCm+BbKHtCnIU3iv8wHwYDVR0jBBgwFoAU/9XXjnVnnozv/5gXPaanm0zI
D/0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZDNzZELzc0ODZDNjMyRDVDQjExRjBBNzUxRDNEMURBRTRFQzlDL185WFhq
blZubm96dl81Z1hQYWFubTB6SURfMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL185WFhqblZubm96dl81Z1hQYWFubTB6SURfMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkM3NkQvNzQ4NkM2MzJENUNCMTFGMEE3NTFEM0QxREFF
NEVDOUMvXzlYWGpuVm5ub3p2XzVnWFBhYW5tMHpJRF8wLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB80dKR/FotMZpJQD1zIxFniepjrf6Q
CROdlKFLXlZJTqPdCJvaRASgxvwvEHOarKl2ca3bnkFIuGQkxPaTG6YS2Xqd8IyN
4la2P0iJDOm7yjnCD/6nLBqiolCdaQoanc0amjQrj1f4cTrdkXco9bCSv5GWBh7i
ft3mjqgeemUTUtnb7w01fmRRzd7GafzYAJd9yfGZGhlPe/S3oQeilsN85wIu58A6
+QxcgxHpkk6lTJk1taO3GeZRZiZAGhrEDrr+O1eT4GdArfUjHNTR6VdcfAdQ00mY
AR5tznenr8zpcazAMuEdkQ0xUpoFI3/yd8HSMYvG75jj8BFGypiwZATH
-----END CERTIFICATE-----