Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
File:                     9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft (raw, json)
Hash identifier:          U9g2rizakgffyv4Sh96VAK/zcZ9rmIwdvcw7Os84I6I=
Subject key identifier:   8D:0E:34:83:2B:0B:11:00:D5:D6:56:26:59:11:C5:24:E8:C0:35:70
Authority key identifier: F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD
Certificate issuer:       /CN=F3671BB4AF/serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
Certificate serial:       0A2F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
Manifest number:          0A2A
Signing time:             Tue 27 Oct 2026 01:37:39 +0000
Manifest this update:     Tue 27 Oct 2026 01:37:38 +0000
Manifest next update:     Thu 29 Oct 2026 01:37:38 +0000
Files and hashes:         1: 9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl (hash: BGyfIgwMqm8pzl+crMHKPnSB+Om/ObwJQhCOgDfQDUA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 01:37:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2607 (0xa2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3671BB4AF, serialNumber=F72AC76BB07E44DDC7AC60E6631F1CD2EDF035DD
        Validity
            Not Before: Oct 27 01:37:38 2026 GMT
            Not After : Oct 29 01:37:38 2026 GMT
        Subject: CN=6ae00063-8f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f6:31:36:72:9a:ce:ff:39:6f:5c:7b:00:e9:
                    fd:0d:9b:39:4c:84:71:50:ac:dd:5a:f0:e8:ca:15:
                    aa:b7:84:76:ee:d7:64:0d:39:e8:0c:1c:ac:30:94:
                    e6:3b:d5:59:00:b7:5b:8c:1b:6e:39:80:1c:c1:ce:
                    20:20:b8:f0:b6:e7:66:37:05:5b:fe:fb:e1:9c:df:
                    56:93:6b:d0:f5:88:24:cd:f6:10:d1:3f:d9:c2:eb:
                    c6:41:2a:40:75:99:07:1b:92:9f:23:f6:1f:81:7d:
                    bf:55:91:1f:c5:56:78:8d:7c:0e:90:03:0c:ff:a1:
                    7b:9a:6d:86:51:65:72:e7:36:38:fb:26:3e:c1:12:
                    a2:3d:2e:44:72:00:62:69:91:e2:7f:98:e8:14:77:
                    c6:00:4f:d2:5b:ed:f6:0e:46:70:a8:8e:3f:f4:b0:
                    9a:bd:d3:ab:9c:10:20:9c:f8:81:6b:2d:52:fb:b4:
                    9f:24:f7:57:a6:c9:08:42:ee:03:97:a3:fe:fc:73:
                    7c:f5:35:16:49:30:5b:d3:ff:da:3d:65:5c:24:0e:
                    6a:9a:1d:49:15:bb:2c:a4:2a:a4:76:51:de:97:66:
                    cf:e5:6e:7f:18:35:e0:38:54:de:3b:10:82:6c:c9:
                    29:13:ac:5a:8d:3c:f5:07:31:7e:b4:96:30:1d:de:
                    4a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0E:34:83:2B:0B:11:00:D5:D6:56:26:59:11:C5:24:E8:C0:35:70
            X509v3 Authority Key Identifier:
                keyid:F7:2A:C7:6B:B0:7E:44:DD:C7:AC:60:E6:63:1F:1C:D2:ED:F0:35:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9yrHa7B-RN3HrGDmYx8c0u3wNd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3671BB4/02E646F8061D11EABC386256F8AEA228/9yrHa7B-RN3HrGDmYx8c0u3wNd0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b7:55:9d:0e:82:6a:d6:6d:cd:8c:9d:8a:57:b2:2b:af:87:
         93:ae:ad:59:39:b8:6a:4f:e7:fd:f8:d8:ac:20:18:1f:af:71:
         f4:4d:2b:94:82:53:2f:90:67:33:4c:1f:31:96:48:e7:38:2c:
         f6:17:57:a7:98:4e:c2:05:12:12:69:28:88:78:4c:85:dc:58:
         3b:11:69:62:1a:99:d2:c9:df:bb:2b:8f:e4:72:b3:54:12:57:
         1c:75:1c:a2:96:0d:3a:0e:4d:7f:63:98:0f:70:d6:45:25:89:
         30:9d:43:83:4e:0c:bd:f4:87:3e:b5:3c:23:d7:ff:56:c0:ac:
         87:f4:86:f2:e1:19:ea:35:58:df:5e:03:ed:9a:e2:5a:f0:6a:
         7d:73:25:29:d7:ca:90:e8:70:ae:c1:5c:8f:62:d9:a7:d7:0c:
         08:37:ce:f6:bb:98:12:0a:87:13:b8:4b:d6:d2:4c:73:58:2c:
         57:dd:ab:10:bc:23:78:9d:f0:06:b8:b6:b6:bc:8a:70:c9:cd:
         3c:da:f1:7d:00:78:ba:10:0c:25:5f:56:20:e0:cd:c4:d2:f9:
         7f:d6:64:e3:fb:d9:58:e4:96:bc:0a:9f:5c:c4:58:84:87:ee:
         5c:38:ae:31:76:8d:3f:2b:26:99:1c:e4:f7:b8:19:bb:f7:71:
         28:61:42:1b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCi8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzFCQjRBRjExMC8GA1UEBRMoRjcyQUM3NkJCMDdFNDREREM3QUM2MEU2NjMxRjFD
RDJFREYwMzVERDAeFw0yNjEwMjcwMTM3MzhaFw0yNjEwMjkwMTM3MzhaMBgxFjAU
BgNVBAMTDTZhZTAwMDYzLThmMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCg9jE2cprO/zlvXHsA6f0NmzlMhHFQrN1a8OjKFaq3hHbu12QNOegMHKww
lOY71VkAt1uMG245gBzBziAguPC252Y3BVv+++Gc31aTa9D1iCTN9hDRP9nC68ZB
KkB1mQcbkp8j9h+Bfb9VkR/FVniNfA6QAwz/oXuabYZRZXLnNjj7Jj7BEqI9LkRy
AGJpkeJ/mOgUd8YAT9Jb7fYORnCojj/0sJq906ucECCc+IFrLVL7tJ8k91emyQhC
7gOXo/78c3z1NRZJMFvT/9o9ZVwkDmqaHUkVuyykKqR2Ud6XZs/lbn8YNeA4VN47
EIJsySkTrFqNPPUHMX60ljAd3kqJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUjQ40
gysLEQDV1lYmWRHFJOjANXAwHwYDVR0jBBgwFoAU9yrHa7B+RN3HrGDmYx8c0u3w
Nd0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjcxQkI0LzAyRTY0NkY4MDYxRDExRUFCQzM4NjI1NkY4QUVBMjI4Lzl5ckhh
N0ItUk4zSHJHRG1ZeDhjMHUzd05kMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzl5ckhhN0ItUk4zSHJHRG1ZeDhjMHUzd05kMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzFCQjQvMDJFNjQ2RjgwNjFEMTFFQUJDMzg2MjU2RjhB
RUEyMjgvOXlySGE3Qi1STjNIckdEbVl4OGMwdTN3TmQwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0t1WdDoJq1m3NjJ2KV7Irr4eTrq1Z
ObhqT+f9+NisIBgfr3H0TSuUglMvkGczTB8xlkjnOCz2F1enmE7CBRISaSiIeEyF
3Fg7EWliGpnSyd+7K4/kcrNUElccdRyilg06Dk1/Y5gPcNZFJYkwnUODTgy99Ic+
tTwj1/9WwKyH9Iby4RnqNVjfXgPtmuJa8Gp9cyUp18qQ6HCuwVyPYtmn1wwIN872
u5gSCocTuEvW0kxzWCxX3asQvCN4nfAGuLa2vIpwyc082vF9AHi6EAwlX1Yg4M3E
0vl/1mTj+9lY5Ja8Cp9cxFiEh+5cOK4xdo0/KyaZHOT3uBm793EoYUIb
-----END CERTIFICATE-----