Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
File:                     _p4BMgoOlVJFOamGqPA_ketPwy0.mft (raw, json)
Hash identifier:          6mmKmmwp1H1WVbJK1CjqtzIgp20P4USLFi07URa+LAw=
Subject key identifier:   A1:28:E3:D7:27:15:32:19:81:AC:E4:26:94:DE:07:B7:BC:93:C3:32
Authority key identifier: FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D
Certificate issuer:       /CN=F368D658AF/serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
Certificate serial:       03EE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
Manifest number:          03EC
Signing time:             Mon 26 Oct 2026 04:04:11 +0000
Manifest this update:     Mon 26 Oct 2026 04:04:11 +0000
Manifest next update:     Wed 28 Oct 2026 04:04:11 +0000
Files and hashes:         1: _p4BMgoOlVJFOamGqPA_ketPwy0.crl (hash: mp4z+C5AoSatz122JF/g6mtySkxqIA0I8+ZKSJXI9r8=)
                          2: 311C4904CA4B11EEB1A20B86775412E6.roa (hash: 6Jipg/U2Wzl+hCZ+uZdXwq1gTXKTDFOFMoiu2FzO3Lc=)
                          3: DC6D06E4CBEB11EEA9655CAB775412E6.roa (hash: rI3Z0thMS8kcuZHwZrlMXa6Fqk3EKGjdiGllXF+/6As=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 00:08:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368D658AF, serialNumber=FE9E01320A0E95524539A986A8F03F91EB4FC32D
        Validity
            Not Before: Oct 26 04:04:11 2026 GMT
            Not After : Oct 28 04:04:11 2026 GMT
        Subject: CN=6aded13b-405b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4a:41:d4:26:8b:8b:d8:1d:ae:b5:b5:3f:01:
                    56:18:8f:23:70:fb:6c:a4:a2:12:76:51:5d:41:5c:
                    72:d2:f5:d8:ea:88:58:5e:cb:ae:d0:98:27:11:2e:
                    8f:b0:ec:78:a4:c3:78:d2:7e:23:c3:ea:ef:94:85:
                    91:61:c5:89:6f:67:72:a0:da:0f:d9:1d:38:11:25:
                    ca:54:de:8e:56:7f:f3:4e:c8:d9:15:85:0d:5c:1e:
                    b1:03:68:18:26:2d:36:74:36:a5:1b:46:a8:a3:5e:
                    08:24:b6:a9:f8:02:68:34:89:82:d9:55:67:73:08:
                    2c:82:5f:09:13:83:08:7b:88:d3:18:2d:3d:91:66:
                    42:5b:62:cb:17:d3:1f:80:eb:bf:5e:ba:80:e7:17:
                    f5:06:56:c5:a9:8b:27:3c:96:ea:80:51:55:71:a6:
                    a1:4b:c6:fd:6e:56:ad:9c:8b:8f:41:73:ac:1c:e2:
                    97:51:98:75:32:ee:aa:b5:2d:2c:bd:f8:60:e7:4e:
                    15:d7:db:f2:78:2d:96:5f:d2:ce:43:d6:10:f7:fb:
                    71:8b:dc:10:28:d5:4f:24:86:06:0c:b2:d6:d7:1f:
                    c1:5c:92:cf:fc:7f:af:8c:13:92:86:2e:d4:8c:ce:
                    52:d5:cb:37:da:e8:08:ac:54:fa:b2:2a:8c:50:49:
                    aa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:28:E3:D7:27:15:32:19:81:AC:E4:26:94:DE:07:B7:BC:93:C3:32
            X509v3 Authority Key Identifier:
                keyid:FE:9E:01:32:0A:0E:95:52:45:39:A9:86:A8:F0:3F:91:EB:4F:C3:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_p4BMgoOlVJFOamGqPA_ketPwy0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368D658/9436EDAECA4711EE8CA69780775412E6/_p4BMgoOlVJFOamGqPA_ketPwy0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:26:27:f5:f4:bd:70:0d:2f:2f:7f:aa:1d:a2:33:5f:f2:6e:
         49:1a:62:8c:83:3d:d4:5a:64:68:de:e4:ff:38:72:a4:6f:ca:
         6c:2f:85:8c:0a:ba:66:c7:10:25:f8:46:bd:fd:9e:f4:b4:ce:
         ea:e5:e4:17:65:61:06:72:7e:6e:47:86:e9:9c:94:27:17:96:
         4c:b0:ee:f6:b4:1d:fb:f6:74:04:1a:e8:4e:f0:1e:5a:7e:54:
         9e:72:39:de:c2:98:f7:41:92:06:fa:18:70:a5:b2:54:d5:fe:
         0c:1a:9e:d2:31:42:6d:0b:b1:e0:9d:a0:b0:57:90:de:46:cf:
         ea:e0:c9:15:d2:9f:39:d2:cf:ca:9e:3e:43:96:d9:e7:0c:32:
         66:d5:92:a3:32:a8:c2:22:ab:25:e0:3e:5d:a3:d7:f9:d3:7e:
         e2:32:2c:5d:ad:80:a7:3c:dd:84:c9:d2:ef:9d:2a:62:2c:69:
         9d:a1:3d:fd:ce:1e:6a:27:08:9f:9e:42:c4:f1:42:15:7b:26:
         32:22:9e:f9:8c:2b:36:f5:a2:9a:88:20:93:68:f0:f7:16:25:
         1f:af:b9:48:7f:f4:4e:d9:7f:0c:d2:ca:88:5f:9b:f7:ca:62:
         fb:70:de:87:96:09:fa:2d:b9:49:74:2c:ca:95:e4:48:40:08:
         4c:d2:92:2e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEQ2NThBRjExMC8GA1UEBRMoRkU5RTAxMzIwQTBFOTU1MjQ1MzlBOTg2QThGMDNG
OTFFQjRGQzMyRDAeFw0yNjEwMjYwNDA0MTFaFw0yNjEwMjgwNDA0MTFaMBgxFjAU
BgNVBAMTDTZhZGVkMTNiLTQwNWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCoSkHUJouL2B2utbU/AVYYjyNw+2ykohJ2UV1BXHLS9djqiFhey67QmCcR
Lo+w7Hikw3jSfiPD6u+UhZFhxYlvZ3Kg2g/ZHTgRJcpU3o5Wf/NOyNkVhQ1cHrED
aBgmLTZ0NqUbRqijXggktqn4Amg0iYLZVWdzCCyCXwkTgwh7iNMYLT2RZkJbYssX
0x+A679euoDnF/UGVsWpiyc8luqAUVVxpqFLxv1uVq2ci49Bc6wc4pdRmHUy7qq1
LSy9+GDnThXX2/J4LZZf0s5D1hD3+3GL3BAo1U8khgYMstbXH8Fcks/8f6+ME5KG
LtSMzlLVyzfa6AisVPqyKoxQSapPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUoSjj
1ycVMhmBrOQmlN4Ht7yTwzIwHwYDVR0jBBgwFoAU/p4BMgoOlVJFOamGqPA/ketP
wy0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhENjU4Lzk0MzZFREFFQ0E0NzExRUU4Q0E2OTc4MDc3NTQxMkU2L19wNEJN
Z29PbFZKRk9hbUdxUEFfa2V0UHd5MC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19wNEJNZ29PbFZKRk9hbUdxUEFfa2V0UHd5MC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OEQ2NTgvOTQzNkVEQUVDQTQ3MTFFRThDQTY5NzgwNzc1
NDEyRTYvX3A0Qk1nb09sVkpGT2FtR3FQQV9rZXRQd3kwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuJif19L1wDS8vf6odojNf8m5JGmKM
gz3UWmRo3uT/OHKkb8psL4WMCrpmxxAl+Ea9/Z70tM7q5eQXZWEGcn5uR4bpnJQn
F5ZMsO72tB379nQEGuhO8B5aflSecjnewpj3QZIG+hhwpbJU1f4MGp7SMUJtC7Hg
naCwV5DeRs/q4MkV0p850s/Knj5DltnnDDJm1ZKjMqjCIqsl4D5do9f5037iMixd
rYCnPN2EydLvnSpiLGmdoT39zh5qJwifnkLE8UIVeyYyIp75jCs29aKaiCCTaPD3
FiUfr7lIf/RO2X8M0sqIX5v3ymL7cN6Hlgn6LblJdCzKleRIQAhM0pIu
-----END CERTIFICATE-----