Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File:                     PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier:          h7lGdK9xQ0ftQi9ZHg9j4Z10Z/1bKPJox9bN6rs1uzE=
Subject key identifier:   C5:D9:E9:E0:BF:D8:C1:79:16:04:62:9B:7F:F0:2B:DF:3A:B9:1B:FA
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer:       /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial:       041F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number:          041E
Signing time:             Thu 10 Sep 2026 03:48:49 +0000
Manifest this update:     Thu 10 Sep 2026 03:48:48 +0000
Manifest next update:     Sat 12 Sep 2026 03:48:48 +0000
Files and hashes:         1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: KzlM2CzGOcrsyqONvAsOjeSd3nZ8qBDfAv2mc6gqsGY=)
                          2: 7505B06024CD11EF9410DD1A7DDC24C2.roa (hash: vn59PtsA74MEKr6H9TKVqZemfFNq5OYAs+pWATJBHgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 03:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1055 (0x41f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AF, serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
        Validity
            Not Before: Sep 10 03:48:48 2026 GMT
            Not After : Sep 12 03:48:48 2026 GMT
        Subject: CN=6aa228a1-31f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:af:7d:5d:a4:5f:10:a5:11:a3:75:c5:4b:ea:
                    fa:18:c0:e5:fc:6c:f2:c2:3f:1b:a1:af:61:56:8d:
                    b9:3d:28:c4:a3:15:fb:9e:35:b0:cf:bc:f6:d8:71:
                    1a:8b:51:21:66:90:73:e7:de:6d:36:f0:a3:c8:af:
                    26:a4:a0:69:ae:e8:d0:94:c0:42:25:17:a1:2d:5e:
                    b3:0a:ee:6a:32:9d:0b:e9:fa:c1:49:8e:dd:da:9e:
                    44:b8:7d:90:82:69:92:2b:37:96:5e:e3:99:20:89:
                    3a:74:41:65:99:67:f1:33:73:3f:02:02:bc:a2:dc:
                    c5:61:3b:75:71:03:dc:7c:62:04:20:3e:5e:04:e8:
                    bd:d2:f9:bf:23:e5:08:1a:40:b0:63:f6:7c:37:c4:
                    60:19:09:d4:fd:b3:a5:28:0a:03:f4:92:e2:26:a6:
                    26:c5:7b:9e:58:59:12:15:00:ec:88:77:ba:fd:fc:
                    c0:86:5a:43:06:f3:7b:1f:ef:07:7e:d4:33:99:15:
                    45:c5:27:9a:17:26:68:3b:c6:2c:ce:75:27:b1:89:
                    4e:90:d3:f7:94:3a:04:8a:17:45:cc:a7:9f:51:d3:
                    39:fe:ab:22:1f:d5:ad:8c:85:be:7f:a3:9c:84:07:
                    26:c2:5c:3c:8c:d0:19:32:27:ef:6a:ce:9b:f6:3c:
                    e7:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D9:E9:E0:BF:D8:C1:79:16:04:62:9B:7F:F0:2B:DF:3A:B9:1B:FA
            X509v3 Authority Key Identifier:
                keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9c:ad:fb:ee:93:79:cb:d8:b0:d5:36:00:0c:93:2c:a5:47:
         92:5c:bd:34:86:92:e4:a1:c3:68:a5:2b:8f:4a:37:e5:dc:24:
         61:3b:d2:13:bb:ad:35:d7:37:85:10:3c:5f:88:7a:24:4c:d9:
         d8:50:0a:5f:6b:cd:a9:a6:00:c7:c6:22:25:90:1d:5e:a6:47:
         af:8d:49:1f:53:dd:17:f2:d4:a2:7c:7c:18:f7:7e:ed:c1:2b:
         bc:27:c0:2f:32:17:a4:3d:3c:60:70:f8:05:76:36:61:4f:c1:
         3b:44:68:9b:bc:de:a4:c1:8b:fe:40:4e:5d:f3:87:9c:16:8f:
         3c:97:d6:97:4a:00:79:f1:f3:2b:e8:b3:bc:dc:70:6c:37:8d:
         4f:5c:55:0d:7a:06:98:29:8b:95:24:54:d5:ee:a9:ec:4c:28:
         80:de:01:e6:ba:a2:f0:2f:98:60:2e:12:50:f3:c3:59:0a:3c:
         21:00:d7:f0:b0:b9:7b:e6:d8:7b:dd:95:d7:c5:d8:e2:b4:aa:
         5d:ea:1b:10:07:57:0a:cb:3b:09:90:c5:34:54:3c:12:90:a8:
         94:52:09:dc:00:9c:e4:4a:38:eb:58:bc:96:d7:80:3d:47:83:
         80:15:45:d2:bf:a0:ba:b8:c9:dc:fc:07:9b:3b:9e:f1:80:99:
         f6:be:45:0d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBB8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTgxMjVBRjExMC8GA1UEBRMoM0M3OUYwRkNCQkIwQzA0MUM4QjRGNkRFRTEwM0Iw
MjUxOTUxNkVGNDAeFw0yNjA5MTAwMzQ4NDhaFw0yNjA5MTIwMzQ4NDhaMBgxFjAU
BgNVBAMTDTZhYTIyOGExLTMxZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQChr31dpF8QpRGjdcVL6voYwOX8bPLCPxuhr2FWjbk9KMSjFfueNbDPvPbY
cRqLUSFmkHPn3m028KPIryakoGmu6NCUwEIlF6EtXrMK7moynQvp+sFJjt3ankS4
fZCCaZIrN5Ze45kgiTp0QWWZZ/Ezcz8CAryi3MVhO3VxA9x8YgQgPl4E6L3S+b8j
5QgaQLBj9nw3xGAZCdT9s6UoCgP0kuImpibFe55YWRIVAOyId7r9/MCGWkMG83sf
7wd+1DOZFUXFJ5oXJmg7xizOdSexiU6Q0/eUOgSKF0XMp59R0zn+qyIf1a2Mhb5/
o5yEBybCXDyM0BkyJ+9qzpv2POctAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUxdnp
4L/YwXkWBGKbf/Ar3zq5G/owHwYDVR0jBBgwFoAUPHnw/LuwwEHItPbe4QOwJRlR
bvQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4MTI1LzlFRDdFQjFFODM4NDExRUVBRjgxMzEzNTRBRDlFNkZDL1BIbndf
THV3d0VISXRQYmU0UU93SlJsUmJ2US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BIbndfTHV3d0VISXRQYmU0UU93SlJsUmJ2US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTgxMjUvOUVEN0VCMUU4Mzg0MTFFRUFGODEzMTM1NEFE
OUU2RkMvUEhud19MdXd3RUhJdFBiZTRRT3dKUmxSYnZRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAEnK377pN5y9iw1TYADJMspUeSXL00
hpLkocNopSuPSjfl3CRhO9ITu6011zeFEDxfiHokTNnYUApfa82ppgDHxiIlkB1e
pkevjUkfU90X8tSifHwY937twSu8J8AvMhekPTxgcPgFdjZhT8E7RGibvN6kwYv+
QE5d84ecFo88l9aXSgB58fMr6LO83HBsN41PXFUNegaYKYuVJFTV7qnsTCiA3gHm
uqLwL5hgLhJQ88NZCjwhANfwsLl75th73ZXXxdjitKpd6hsQB1cKyzsJkMU0VDwS
kKiUUgncAJzkSjjrWLyW14A9R4OAFUXSv6C6uMnc/AebO57xgJn2vkUN
-----END CERTIFICATE-----