Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
File:                     cfbjXgELx4fYmgtLqTPZlvrU2tI.mft (raw, json)
Hash identifier:          Y1JGZ6IPh0eUHUiJvidT/VnP8JTNAO31fGIy14++yk4=
Subject key identifier:   E1:0D:26:9D:3A:A9:FD:B8:9F:C8:3A:DF:4D:6D:F3:22:20:48:79:F9
Authority key identifier: 71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2
Certificate issuer:       /CN=F36882A1AF/serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
Certificate serial:       07E1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
Manifest number:          07E1
Signing time:             Mon 26 Oct 2026 02:12:09 +0000
Manifest this update:     Mon 26 Oct 2026 02:12:08 +0000
Manifest next update:     Wed 28 Oct 2026 02:12:08 +0000
Files and hashes:         1: cfbjXgELx4fYmgtLqTPZlvrU2tI.crl (hash: eIPs+p7EY4Zh9G5gxJKui8Xl/iQvTF7C8mF/fU83d54=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 02:12:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2017 (0x7e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36882A1AF, serialNumber=71F6E35E010BC787D89A0B4BA933D996FAD4DAD2
        Validity
            Not Before: Oct 26 02:12:08 2026 GMT
            Not After : Oct 28 02:12:08 2026 GMT
        Subject: CN=6adeb6f9-9042
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:65:33:ef:92:1e:ba:c6:b4:5d:35:0e:a8:74:
                    72:c2:56:a5:a4:36:75:b8:52:29:22:12:7f:8f:03:
                    a4:0d:ba:5c:3e:9c:39:a6:94:42:ed:0a:d5:8f:84:
                    b4:b0:2d:9b:d4:9b:de:73:c5:51:8f:f1:f1:79:21:
                    72:c8:65:5f:8e:60:cf:fa:b7:9e:fb:85:e0:48:bc:
                    98:2d:da:b4:5c:40:d5:68:11:7f:12:c8:66:4e:2f:
                    24:07:70:51:a9:d4:3e:e6:b8:db:2f:89:20:f7:db:
                    19:98:65:63:37:9d:40:50:c6:92:77:c4:1d:2c:3f:
                    07:62:fd:54:b6:ae:b2:e4:cf:b1:3a:64:0a:03:df:
                    be:0a:2a:b9:e6:86:8c:7a:a0:d0:74:b5:06:71:a1:
                    e1:47:d5:60:7c:47:74:7e:b2:d2:57:c2:c7:6e:24:
                    64:d6:13:0d:0b:41:d3:35:82:b7:61:b8:98:08:bd:
                    d3:46:8c:7e:0d:30:84:e5:bf:28:7e:76:50:84:78:
                    d3:ef:9e:0f:28:8e:7f:7c:2c:de:84:69:2a:af:f5:
                    13:f1:c4:79:95:ec:6b:dd:14:ad:b7:7b:53:a5:a9:
                    79:ac:5e:0b:01:aa:b8:4a:fc:1b:10:46:e1:dc:16:
                    06:40:2d:e8:6f:b9:61:67:d5:a8:7a:94:3e:52:70:
                    84:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:0D:26:9D:3A:A9:FD:B8:9F:C8:3A:DF:4D:6D:F3:22:20:48:79:F9
            X509v3 Authority Key Identifier:
                keyid:71:F6:E3:5E:01:0B:C7:87:D8:9A:0B:4B:A9:33:D9:96:FA:D4:DA:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/cfbjXgELx4fYmgtLqTPZlvrU2tI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36882A1/AA75582CC7C411EBB520A668F8AEA228/cfbjXgELx4fYmgtLqTPZlvrU2tI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f2:ff:ba:37:e7:b5:b9:d2:4a:21:36:7d:2a:d7:6e:d0:69:
         3b:4c:3b:31:1a:79:38:ad:45:f9:ae:91:65:77:3e:3f:69:5a:
         48:8c:36:43:8b:0d:86:9c:0f:ca:f6:80:10:b7:5c:f6:5d:40:
         7a:b1:5f:33:3d:0c:32:8d:38:eb:06:63:eb:da:01:80:70:84:
         08:a7:e6:1a:c9:df:62:ad:e7:a3:05:60:12:af:5b:26:68:0f:
         ef:93:22:10:21:3b:d4:4f:d1:da:04:2a:4d:a1:2d:36:49:4d:
         ab:f4:9b:49:f3:46:cd:e6:c3:a0:d3:13:89:dc:cb:57:93:a0:
         cb:79:b3:b0:7d:9a:2a:ef:04:f0:0f:ac:07:29:3d:96:c6:97:
         53:84:8a:92:37:96:17:f0:d6:d4:90:c4:9d:0a:12:84:20:c5:
         e1:5c:d2:f7:d8:cd:5d:15:28:c1:36:7a:33:91:1d:2b:a6:f8:
         55:07:2e:08:08:5e:9a:54:50:c7:08:35:b3:4b:d6:2a:19:95:
         18:40:3c:5d:13:7b:4c:8f:69:c7:4d:df:bc:6b:a3:e8:bc:db:
         f5:e3:17:21:f9:a6:96:33:dd:11:81:59:aa:32:6b:cf:68:8f:
         62:72:0b:4b:d6:49:b7:d7:07:29:d1:2c:f5:9d:4e:c0:df:1f:
         02:38:47:22
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB+EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODgyQTFBRjExMC8GA1UEBRMoNzFGNkUzNUUwMTBCQzc4N0Q4OUEwQjRCQTkzM0Q5
OTZGQUQ0REFEMjAeFw0yNjEwMjYwMjEyMDhaFw0yNjEwMjgwMjEyMDhaMBgxFjAU
BgNVBAMTDTZhZGViNmY5LTkwNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC8ZTPvkh66xrRdNQ6odHLCVqWkNnW4UikiEn+PA6QNulw+nDmmlELtCtWP
hLSwLZvUm95zxVGP8fF5IXLIZV+OYM/6t577heBIvJgt2rRcQNVoEX8SyGZOLyQH
cFGp1D7muNsviSD32xmYZWM3nUBQxpJ3xB0sPwdi/VS2rrLkz7E6ZAoD374KKrnm
hox6oNB0tQZxoeFH1WB8R3R+stJXwsduJGTWEw0LQdM1grdhuJgIvdNGjH4NMITl
vyh+dlCEeNPvng8ojn98LN6EaSqv9RPxxHmV7GvdFK23e1OlqXmsXgsBqrhK/BsQ
RuHcFgZALehvuWFn1ah6lD5ScIRPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4Q0m
nTqp/bifyDrfTW3zIiBIefkwHwYDVR0jBBgwFoAUcfbjXgELx4fYmgtLqTPZlvrU
2tIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4MkExL0FBNzU1ODJDQzdDNDExRUJCNTIwQTY2OEY4QUVBMjI4L2NmYmpY
Z0VMeDRmWW1ndExxVFBabHZyVTJ0SS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2NmYmpYZ0VMeDRmWW1ndExxVFBabHZyVTJ0SS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODgyQTEvQUE3NTU4MkNDN0M0MTFFQkI1MjBBNjY4RjhB
RUEyMjgvY2ZialhnRUx4NGZZbWd0THFUUFpsdnJVMnRJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB28v+6N+e1udJKITZ9Ktdu0Gk7TDsx
Gnk4rUX5rpFldz4/aVpIjDZDiw2GnA/K9oAQt1z2XUB6sV8zPQwyjTjrBmPr2gGA
cIQIp+Yayd9ireejBWASr1smaA/vkyIQITvUT9HaBCpNoS02SU2r9JtJ80bN5sOg
0xOJ3MtXk6DLebOwfZoq7wTwD6wHKT2WxpdThIqSN5YX8NbUkMSdChKEIMXhXNL3
2M1dFSjBNnozkR0rpvhVBy4ICF6aVFDHCDWzS9YqGZUYQDxdE3tMj2nHTd+8a6Po
vNv14xch+aaWM90RgVmqMmvPaI9icgtL1km31wcp0Sz1nU7A3x8COEci
-----END CERTIFICATE-----