Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File:                     zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier:          am9slz/97b2K78/8s7ssGSBSLUdyQunsmNv5tvvZnME=
Subject key identifier:   26:F7:9E:4F:2B:3B:CD:44:36:E0:AD:DF:3A:EF:49:2F:70:44:AE:2A
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer:       /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial:       0351
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number:          034D
Signing time:             Mon 26 Oct 2026 04:23:17 +0000
Manifest this update:     Mon 26 Oct 2026 04:23:16 +0000
Manifest next update:     Wed 28 Oct 2026 04:23:16 +0000
Files and hashes:         1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: 5CSM4jhbCoi3csEh/UQG+7huPY9J3VmWSOEiqlvRqeM=)
                          2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 28 Oct 2026 04:23:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 849 (0x351)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
        Validity
            Not Before: Oct 26 04:23:16 2026 GMT
            Not After : Oct 28 04:23:16 2026 GMT
        Subject: CN=6aded5b5-2352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:25:fb:9a:4b:f5:c5:a9:54:62:95:ed:1d:
                    01:89:00:8f:f5:7a:d5:8b:16:d6:67:3b:d7:23:3a:
                    45:38:6d:43:50:ec:78:47:c9:a8:23:b6:e0:7f:42:
                    e6:4b:f5:c5:0d:98:7c:ae:ce:89:d3:e0:4a:dd:ed:
                    f2:88:f0:94:14:79:df:0f:2f:56:12:d7:97:91:1a:
                    26:d3:e9:d6:2f:0e:f9:b1:c5:cb:d4:8a:19:0c:14:
                    51:df:b9:7f:47:27:23:08:be:6f:6f:6c:a4:19:4f:
                    ef:3c:69:87:ea:ab:88:78:3d:02:f9:aa:84:e0:75:
                    18:f7:86:64:7d:46:d0:3a:09:0d:fc:29:20:d5:55:
                    ee:f4:b5:c9:66:3a:13:9d:8c:cf:55:da:82:12:59:
                    df:c6:81:d3:f2:14:4a:5d:e2:84:d1:06:f8:b7:13:
                    ea:75:76:08:87:f4:d6:65:db:4e:89:99:5d:12:2a:
                    9e:9f:28:6a:1e:b3:30:c4:f3:50:8b:56:2d:04:59:
                    d6:49:14:be:cc:97:d5:5b:a2:09:1b:da:5b:44:05:
                    d6:67:93:b7:92:37:ce:c9:67:f6:e4:aa:f8:4c:25:
                    6b:30:c0:30:4c:99:bc:70:b2:38:0d:75:91:e5:0a:
                    d3:2d:47:02:82:bc:77:14:5f:73:04:a7:3a:32:7c:
                    28:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F7:9E:4F:2B:3B:CD:44:36:E0:AD:DF:3A:EF:49:2F:70:44:AE:2A
            X509v3 Authority Key Identifier:
                keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:3d:f9:47:68:e8:12:36:77:d0:84:7d:2f:16:f5:0f:fd:c7:
         75:71:58:d4:14:72:9e:de:7f:a6:02:c7:e3:df:b9:ff:96:9d:
         6f:fb:e6:b9:c9:17:14:e3:6e:d4:db:b2:3b:c0:04:de:e3:b8:
         4b:99:4f:27:46:aa:33:24:da:1b:00:d3:b2:42:e1:e2:31:f6:
         f5:1a:36:f5:13:c3:dc:76:14:6c:43:d6:48:e4:de:67:ea:98:
         77:ac:30:c7:b1:53:c3:17:bd:f7:e3:18:51:e2:1b:35:f0:67:
         6d:3e:d8:33:76:88:dd:8c:d6:e6:07:ba:16:f9:57:97:bb:85:
         92:48:fe:db:cc:04:1a:c8:0b:97:b4:07:dc:d6:ba:82:c8:f8:
         90:9f:68:84:8a:a3:4a:36:64:ea:e4:31:bf:d5:45:6d:cc:a9:
         8c:db:26:a4:d1:04:cd:f0:37:fe:dd:17:76:3d:85:92:15:b0:
         a4:c1:33:c4:18:16:b9:95:8c:a2:fe:95:ae:83:0e:dc:16:86:
         a0:11:6c:0b:af:91:e0:db:ec:fa:63:9b:b0:f2:fc:85:a8:c9:
         58:f6:6e:00:31:7a:51:ef:82:6e:0b:15:83:60:3a:bb:b2:bb:
         d9:9c:82:f3:b0:dd:9f:b9:23:e2:63:ca:97:d6:97:b3:5a:57:
         27:51:bc:ef
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA1EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTdFNjhBRjExMC8GA1UEBRMoQ0UxRUNEQTRGMDU2OTY3MEI1ODZFMkNEMzUyQkQ3
MjA2RkQ4NzgwNDAeFw0yNjEwMjYwNDIzMTZaFw0yNjEwMjgwNDIzMTZaMBgxFjAU
BgNVBAMTDTZhZGVkNWI1LTIzNTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXMCX7mkv1xalUYpXtHQGJAI/1etWLFtZnO9cjOkU4bUNQ7HhHyagjtuB/
QuZL9cUNmHyuzonT4Erd7fKI8JQUed8PL1YS15eRGibT6dYvDvmxxcvUihkMFFHf
uX9HJyMIvm9vbKQZT+88aYfqq4h4PQL5qoTgdRj3hmR9RtA6CQ38KSDVVe70tclm
OhOdjM9V2oISWd/GgdPyFEpd4oTRBvi3E+p1dgiH9NZl206JmV0SKp6fKGoeszDE
81CLVi0EWdZJFL7Ml9Vbogkb2ltEBdZnk7eSN87JZ/bkqvhMJWswwDBMmbxwsjgN
dZHlCtMtRwKCvHcUX3MEpzoyfCgnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUJvee
Tys7zUQ24K3fOu9JL3BEriowHwYDVR0jBBgwFoAUzh7NpPBWlnC1huLNNSvXIG/Y
eAQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk3RTY4LzVCMzI1QjI2NEE2MDExRUY4NjAxODI4RTc2MkU5NTFBL3poN05w
UEJXbG5DMWh1TE5OU3ZYSUdfWWVBUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3poN05wUEJXbG5DMWh1TE5OU3ZYSUdfWWVBUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTdFNjgvNUIzMjVCMjY0QTYwMTFFRjg2MDE4MjhFNzYy
RTk1MUEvemg3TnBQQldsbkMxaHVMTk5TdlhJR19ZZUFRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBJPflHaOgSNnfQhH0vFvUP/cd1cVjU
FHKe3n+mAsfj37n/lp1v++a5yRcU427U27I7wATe47hLmU8nRqozJNobANOyQuHi
Mfb1Gjb1E8PcdhRsQ9ZI5N5n6ph3rDDHsVPDF7334xhR4hs18GdtPtgzdojdjNbm
B7oW+VeXu4WSSP7bzAQayAuXtAfc1rqCyPiQn2iEiqNKNmTq5DG/1UVtzKmM2yak
0QTN8Df+3Rd2PYWSFbCkwTPEGBa5lYyi/pWugw7cFoagEWwLr5Hg2+z6Y5uw8vyF
qMlY9m4AMXpR74JuCxWDYDq7srvZnILzsN2fuSPiY8qX1pezWlcnUbzv
-----END CERTIFICATE-----