Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
File:                     0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft (raw, json)
Hash identifier:          W+aKRrvl9P9YQjs/clyLT/bm2cbGRfpflRTN9BP3xW8=
Subject key identifier:   05:BB:B8:21:09:B8:48:37:8D:88:63:3F:77:B1:22:87:78:B4:E5:32
Authority key identifier: D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C
Certificate issuer:       /CN=F3688596AF/serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
Certificate serial:       1009
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
Manifest number:          1009
Signing time:             Sat 24 Oct 2026 00:57:59 +0000
Manifest this update:     Sat 24 Oct 2026 00:57:58 +0000
Manifest next update:     Mon 26 Oct 2026 00:57:58 +0000
Files and hashes:         1: 0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl (hash: kDqJnn9k96S5Haz6vqFBpdbhDxv9xvXy2Byq4HlIrTE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4105 (0x1009)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3688596AF, serialNumber=D2AAA1A5E1AE17C3F66F66FA71D9A6116195A78C
        Validity
            Not Before: Oct 24 00:57:58 2026 GMT
            Not After : Oct 26 00:57:58 2026 GMT
        Subject: CN=6adc0297-398e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:96:a9:2f:14:35:93:ef:3c:58:2b:06:34:f6:
                    14:96:bc:b4:b0:0b:b0:56:47:89:36:bb:12:0f:97:
                    77:f3:18:50:0d:bd:40:93:05:bb:60:ee:2b:25:1c:
                    8f:44:4c:75:96:46:79:ae:72:80:86:ba:dc:71:b3:
                    cc:1e:66:86:6c:32:53:22:7d:57:c8:70:6b:41:32:
                    1d:c6:98:13:6e:2b:37:49:2e:96:f0:88:be:8a:eb:
                    99:e6:82:c2:40:fd:60:29:b3:47:89:5e:7b:b5:f3:
                    fa:61:95:4d:96:9e:86:cd:ad:6a:e5:59:dd:a9:f7:
                    88:dc:8c:72:ff:9c:6a:7a:7a:43:20:42:79:7a:36:
                    18:23:6c:f6:9b:5a:1c:90:cf:c5:e9:21:a8:9c:e6:
                    4c:b1:7b:a7:45:39:60:79:de:45:f4:9c:81:80:70:
                    56:3b:c4:71:13:7a:77:2d:7d:0b:e5:f0:c9:b1:37:
                    1c:82:af:77:45:83:6b:6d:15:71:61:44:9e:07:de:
                    78:0f:66:57:85:d3:a3:4c:e0:73:11:b9:68:16:f5:
                    0d:5f:9b:16:ba:87:93:4b:e6:87:b4:06:1a:db:ae:
                    b6:95:91:9c:ce:2c:21:35:4e:f3:13:5a:85:0a:a0:
                    ac:d6:b1:d4:4e:82:65:d0:82:d5:88:2e:97:28:7e:
                    d6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BB:B8:21:09:B8:48:37:8D:88:63:3F:77:B1:22:87:78:B4:E5:32
            X509v3 Authority Key Identifier:
                keyid:D2:AA:A1:A5:E1:AE:17:C3:F6:6F:66:FA:71:D9:A6:11:61:95:A7:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0qqhpeGuF8P2b2b6cdmmEWGVp4w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3688596/59EF2C686E6311E585534430F8AEA228/0qqhpeGuF8P2b2b6cdmmEWGVp4w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:f7:19:c7:7b:02:2a:fb:f2:aa:81:6f:e7:fd:64:e4:fc:6e:
         f3:8a:a3:79:22:72:ee:b7:01:7c:f3:5a:38:3f:ab:1a:b5:e7:
         f0:b4:10:26:65:36:31:e0:09:c5:15:38:a1:bf:01:0c:23:de:
         49:ec:22:d6:1b:86:02:08:67:7f:62:53:b0:07:cd:ad:92:bc:
         ef:94:0a:13:a2:37:4c:4a:33:c8:cc:d7:a6:6e:c5:44:1b:4f:
         f9:56:42:da:fa:83:d0:9c:33:81:da:55:2f:e3:6b:5f:70:d9:
         60:77:52:77:fc:a2:90:92:cc:c5:ce:e6:47:cd:5b:fe:f8:b9:
         f8:df:ed:1f:64:ea:b9:91:26:0e:b0:72:6e:db:f7:d0:06:dd:
         a8:09:51:1e:2b:a2:bf:79:8b:f0:1b:09:1d:98:2d:62:18:14:
         71:51:ef:ec:31:fb:47:4b:84:35:6c:4d:ce:6e:6b:35:63:09:
         3f:fd:8d:03:12:b2:83:94:aa:2f:69:26:d9:48:ed:ec:c0:9f:
         90:8e:5a:05:27:79:8a:fd:13:47:4f:d7:fd:c5:e1:8c:d1:5b:
         69:34:51:c1:87:4b:b7:9c:34:d6:2c:33:31:8d:88:8d:ef:cd:
         a4:5d:cc:34:b2:67:1a:71:72:0f:91:72:4a:14:e4:89:5c:e7:
         37:1e:f3:c5
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICEAkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODg1OTZBRjExMC8GA1UEBRMoRDJBQUExQTVFMUFFMTdDM0Y2NkY2NkZBNzFEOUE2
MTE2MTk1QTc4QzAeFw0yNjEwMjQwMDU3NThaFw0yNjEwMjYwMDU3NThaMBgxFjAU
BgNVBAMTDTZhZGMwMjk3LTM5OGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLlqkvFDWT7zxYKwY09hSWvLSwC7BWR4k2uxIPl3fzGFANvUCTBbtg7isl
HI9ETHWWRnmucoCGutxxs8weZoZsMlMifVfIcGtBMh3GmBNuKzdJLpbwiL6K65nm
gsJA/WAps0eJXnu18/phlU2WnobNrWrlWd2p94jcjHL/nGp6ekMgQnl6NhgjbPab
WhyQz8XpIaic5kyxe6dFOWB53kX0nIGAcFY7xHETenctfQvl8MmxNxyCr3dFg2tt
FXFhRJ4H3ngPZleF06NM4HMRuWgW9Q1fmxa6h5NL5oe0BhrbrraVkZzOLCE1TvMT
WoUKoKzWsdROgmXQgtWILpcoftbnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBbu4
IQm4SDeNiGM/d7Eih3i05TIwHwYDVR0jBBgwFoAU0qqhpeGuF8P2b2b6cdmmEWGV
p4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg4NTk2LzU5RUYyQzY4NkU2MzExRTU4NTUzNDQzMEY4QUVBMjI4LzBxcWhw
ZUd1RjhQMmIyYjZjZG1tRVdHVnA0dy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzBxcWhwZUd1RjhQMmIyYjZjZG1tRVdHVnA0dy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODg1OTYvNTlFRjJDNjg2RTYzMTFFNTg1NTM0NDMwRjhB
RUEyMjgvMHFxaHBlR3VGOFAyYjJiNmNkbW1FV0dWcDR3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC19xnHewIq+/KqgW/n/WTk/G7ziqN5
InLutwF881o4P6satefwtBAmZTYx4AnFFTihvwEMI95J7CLWG4YCCGd/YlOwB82t
krzvlAoTojdMSjPIzNembsVEG0/5VkLa+oPQnDOB2lUv42tfcNlgd1J3/KKQkszF
zuZHzVv++Ln43+0fZOq5kSYOsHJu2/fQBt2oCVEeK6K/eYvwGwkdmC1iGBRxUe/s
MftHS4Q1bE3Obms1Ywk//Y0DErKDlKovaSbZSO3swJ+QjloFJ3mK/RNHT9f9xeGM
0VtpNFHBh0u3nDTWLDMxjYiN782kXcw0smcacXIPkXJKFOSJXOc3HvPF
-----END CERTIFICATE-----