Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
File:                     tBCb7cR3hyfiTpo3fMYXvAfApzU.mft (raw, json)
Hash identifier:          EhZuE2zjlGxlYU6En1YvHuahRe8fZ2dtq46H3b6JIqQ=
Subject key identifier:   1C:83:46:E1:D7:C1:A4:36:FA:09:E6:A9:8B:D4:59:C2:80:EF:6F:18
Authority key identifier: B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35
Certificate issuer:       /CN=F3697B99AF/serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
Certificate serial:       04BA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
Manifest number:          04B4
Signing time:             Sun 25 Oct 2026 03:38:40 +0000
Manifest this update:     Sun 25 Oct 2026 03:38:40 +0000
Manifest next update:     Tue 27 Oct 2026 03:38:40 +0000
Files and hashes:         1: tBCb7cR3hyfiTpo3fMYXvAfApzU.crl (hash: /YfuEQk5TKqx6hh9l4qsKJeUEfdA8eIHa8/1JTn/eAE=)
                          2: B63A66C4376711EEAA259F3E4AD9E6FC.roa (hash: 9w+jP2sXoRv+obbHw9SWbFJ5hQjBdgaqWD8tExz+tWg=)
                          3: F8EEFF3A376611EE889CDB3C4AD9E6FC.roa (hash: c3SWIThhr/4Nh4YdojbRz5///xELn2rF8i4ptv6E9tA=)
                          4: 8331CC34376911EEAA8EFF424AD9E6FC.roa (hash: 0/Dh/phm1Ej6zfuxxZR9ocsLV8tECuhD2Hfk/8sF7Vo=)
                          5: 820A44FA376711EEA243283E4AD9E6FC.roa (hash: ZttSXdlWsN452hajpfHfL317dPsyGT14Z854aNGNFHs=)
                          6: 50A77B08376711EEA86E983D4AD9E6FC.roa (hash: 5/a9m6VsXxKX05jWV6oIWoE5c8mQIdE0BHzT5lFqAZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1210 (0x4ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697B99AF, serialNumber=B4109BEDC4778727E24E9A377CC617BC07C0A735
        Validity
            Not Before: Oct 25 03:38:40 2026 GMT
            Not After : Oct 27 03:38:40 2026 GMT
        Subject: CN=6add79c0-0aea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f1:c1:ed:c3:14:b4:ed:fa:1d:46:29:fb:38:
                    b0:bb:7c:37:7f:76:a9:f6:fb:20:4f:5c:f1:f1:1d:
                    ce:2b:07:83:f8:dd:be:c7:4f:46:1e:a6:08:9c:54:
                    29:84:18:cd:7a:08:f5:7f:8b:d0:c3:5a:50:11:33:
                    53:ac:78:17:c1:56:3a:ca:fa:98:d6:4c:f2:d5:51:
                    6b:a0:f5:79:e8:f7:34:c6:5e:1b:d2:d5:82:53:d9:
                    a6:ae:30:10:20:dd:b6:42:a7:49:84:1c:73:e4:f7:
                    e5:27:b7:97:59:da:1e:63:52:8c:cf:ed:43:ea:2f:
                    e0:be:d0:a9:86:8c:20:ec:11:2a:8b:aa:5d:d3:88:
                    ed:e2:4e:94:38:cc:8a:cb:19:88:dd:5c:da:46:eb:
                    3e:20:33:fb:d7:bf:82:f9:2b:2c:3d:73:70:34:28:
                    b9:06:9d:bb:14:66:42:0f:7f:10:f0:a0:86:f5:a6:
                    1a:e2:cb:f5:41:1e:5b:7a:fc:c3:49:79:88:0e:b5:
                    4a:21:0f:6d:45:20:ef:f8:bc:35:86:47:ce:1a:db:
                    71:06:91:3f:40:c3:da:e9:0b:6f:b9:52:a4:48:53:
                    c7:c7:0e:70:d8:c6:ce:07:4f:70:53:e4:73:a3:59:
                    e0:ff:98:02:bb:0e:b3:0a:5a:a1:5b:82:fd:23:cd:
                    06:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:83:46:E1:D7:C1:A4:36:FA:09:E6:A9:8B:D4:59:C2:80:EF:6F:18
            X509v3 Authority Key Identifier:
                keyid:B4:10:9B:ED:C4:77:87:27:E2:4E:9A:37:7C:C6:17:BC:07:C0:A7:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/tBCb7cR3hyfiTpo3fMYXvAfApzU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697B99/11FE3600376011EEA28A212C4AD9E6FC/tBCb7cR3hyfiTpo3fMYXvAfApzU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:42:5c:66:90:c7:8f:11:94:cc:94:68:39:1f:52:a0:f9:2b:
         43:61:41:3c:ee:bc:55:68:92:b4:a1:f6:96:f5:1f:59:b7:08:
         79:a6:4c:ce:90:01:7e:e9:26:f0:70:6a:6d:b7:08:5e:44:c7:
         0a:cd:75:01:ab:fb:51:b9:0e:31:50:2b:50:10:c3:fe:85:87:
         9f:5d:05:55:bd:4f:01:1e:f9:58:b6:f2:74:60:a0:34:7d:a6:
         82:e0:b9:13:45:08:49:1e:59:8e:ce:37:d4:54:10:23:de:d3:
         57:6e:af:d4:b0:d5:9b:18:b5:3f:bd:69:84:94:59:cc:f0:6d:
         8a:f6:04:00:92:05:1f:bb:76:a9:9e:bd:11:dd:78:15:d7:c2:
         74:d9:19:ed:71:08:ca:be:a3:ad:70:f7:7d:22:a4:95:3f:03:
         ca:1e:48:da:be:76:25:ab:e3:3e:96:93:0d:2f:90:2c:87:17:
         89:55:dc:12:3a:b6:88:94:0e:bb:80:ca:4c:ae:d6:86:eb:c2:
         86:f8:fd:3d:f5:b2:47:02:ac:14:39:21:af:26:4a:71:80:ab:
         28:8e:7f:f6:cc:fc:d9:4b:86:3b:1b:f5:c6:dd:36:20:c9:77:
         f3:44:5a:ee:37:67:48:81:3a:1f:3e:b6:5b:1a:74:a4:cf:49:
         8c:22:b9:ae
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBLowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTdCOTlBRjExMC8GA1UEBRMoQjQxMDlCRURDNDc3ODcyN0UyNEU5QTM3N0NDNjE3
QkMwN0MwQTczNTAeFw0yNjEwMjUwMzM4NDBaFw0yNjEwMjcwMzM4NDBaMBgxFjAU
BgNVBAMTDTZhZGQ3OWMwLTBhZWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+8cHtwxS07fodRin7OLC7fDd/dqn2+yBPXPHxHc4rB4P43b7HT0Yepgic
VCmEGM16CPV/i9DDWlARM1OseBfBVjrK+pjWTPLVUWug9Xno9zTGXhvS1YJT2aau
MBAg3bZCp0mEHHPk9+Unt5dZ2h5jUozP7UPqL+C+0KmGjCDsESqLql3TiO3iTpQ4
zIrLGYjdXNpG6z4gM/vXv4L5Kyw9c3A0KLkGnbsUZkIPfxDwoIb1phriy/VBHlt6
/MNJeYgOtUohD21FIO/4vDWGR84a23EGkT9Aw9rpC2+5UqRIU8fHDnDYxs4HT3BT
5HOjWeD/mAK7DrMKWqFbgv0jzQYHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUHING
4dfBpDb6Ceapi9RZwoDvbxgwHwYDVR0jBBgwFoAUtBCb7cR3hyfiTpo3fMYXvAfA
pzUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk3Qjk5LzExRkUzNjAwMzc2MDExRUVBMjhBMjEyQzRBRDlFNkZDL3RCQ2I3
Y1IzaHlmaVRwbzNmTVlYdkFmQXB6VS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3RCQ2I3Y1IzaHlmaVRwbzNmTVlYdkFmQXB6VS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTdCOTkvMTFGRTM2MDAzNzYwMTFFRUEyOEEyMTJDNEFE
OUU2RkMvdEJDYjdjUjNoeWZpVHBvM2ZNWVh2QWZBcHpVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBZQlxmkMePEZTMlGg5H1Kg+StDYUE8
7rxVaJK0ofaW9R9Ztwh5pkzOkAF+6SbwcGpttwheRMcKzXUBq/tRuQ4xUCtQEMP+
hYefXQVVvU8BHvlYtvJ0YKA0faaC4LkTRQhJHlmOzjfUVBAj3tNXbq/UsNWbGLU/
vWmElFnM8G2K9gQAkgUfu3apnr0R3XgV18J02RntcQjKvqOtcPd9IqSVPwPKHkja
vnYlq+M+lpMNL5AshxeJVdwSOraIlA67gMpMrtaG68KG+P099bJHAqwUOSGvJkpx
gKsojn/2zPzZS4Y7G/XG3TYgyXfzRFruN2dIgTofPrZbGnSkz0mMIrmu
-----END CERTIFICATE-----