Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File:                     PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier:          sZmDJaWWG45arv7jz2azTq5NKufWrUUpiCmUVwZHlHk=
Subject key identifier:   CE:F6:AB:A5:37:A6:94:AD:E9:A6:9C:74:6A:38:7D:70:B1:10:76:DB
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer:       /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial:       0454
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number:          0453
Signing time:             Mon 02 Nov 2026 03:49:49 +0000
Manifest this update:     Mon 02 Nov 2026 03:49:49 +0000
Manifest next update:     Wed 04 Nov 2026 03:49:49 +0000
Files and hashes:         1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: AEOLWonSu/VFS89A5f1xFZ+6IBYkwb3JHk30FQe5wwM=)
                          2: 7505B06024CD11EF9410DD1A7DDC24C2.roa (hash: vn59PtsA74MEKr6H9TKVqZemfFNq5OYAs+pWATJBHgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 03:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1108 (0x454)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AF, serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
        Validity
            Not Before: Nov  2 03:49:49 2026 GMT
            Not After : Nov  4 03:49:49 2026 GMT
        Subject: CN=6ae8085d-8cc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b7:0d:25:58:37:78:94:08:ba:55:82:e2:13:
                    42:61:d6:d0:0b:5f:1a:49:31:3a:6c:53:06:9d:7e:
                    7e:80:87:0f:17:43:d7:4b:00:a7:1d:b7:20:e8:99:
                    f1:4b:e3:f9:cb:74:2e:4a:8f:6c:c2:89:0f:b0:58:
                    cb:90:7c:6d:d3:a7:44:07:b7:3f:0d:99:76:47:46:
                    c5:4f:21:fc:f0:08:e3:28:c5:dd:63:98:42:90:67:
                    72:03:e8:54:33:6f:d2:22:d5:54:8a:71:26:b8:60:
                    13:8d:f7:86:1f:f2:c8:98:fd:d4:74:4b:25:4d:e2:
                    54:aa:0a:fe:3f:db:52:9f:2d:3a:df:a0:92:75:85:
                    89:84:fb:3c:e8:9a:54:bc:e6:5e:cd:1b:60:33:2f:
                    f6:74:77:d1:b7:86:71:56:c0:d6:b6:3a:04:d2:52:
                    1e:d5:0a:ad:49:bc:55:15:56:90:17:ca:b3:fb:1b:
                    ec:e4:e1:86:00:c8:f2:e8:7f:d3:e0:3c:c4:e7:f7:
                    4c:6c:9b:4b:e7:f6:d1:b4:05:2e:fa:21:05:77:01:
                    82:7e:fd:1c:d8:59:66:a0:d8:94:47:59:9b:b7:5b:
                    9d:2a:cf:a3:82:76:ba:4c:5c:27:9d:22:44:c9:9f:
                    7c:3e:b9:2f:87:4f:b7:09:a1:fb:cb:3e:d3:6b:26:
                    e3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:F6:AB:A5:37:A6:94:AD:E9:A6:9C:74:6A:38:7D:70:B1:10:76:DB
            X509v3 Authority Key Identifier:
                keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:c7:79:97:1a:a1:bb:01:98:a9:65:3e:91:e4:5a:db:7d:29:
         9c:f5:fe:e6:ba:b4:32:48:55:2c:e3:b7:27:b5:b3:99:61:4a:
         f4:2b:0c:41:92:02:9d:bd:57:c9:54:c6:2c:ec:96:ca:50:d2:
         95:17:1d:09:30:77:b3:14:83:8f:66:ae:6a:f1:5c:45:5e:50:
         0b:b0:ed:42:2c:65:86:d5:b4:43:d3:4b:43:f1:2a:6b:3d:72:
         06:ab:b4:50:82:c6:ea:17:d0:b1:0d:82:ce:bf:47:91:28:f9:
         8f:26:c0:9d:16:9f:0c:34:25:6c:6f:ca:a8:ae:76:d9:38:f3:
         8a:44:f6:9b:ad:bf:c8:4a:1a:15:2f:f3:9e:77:a2:d2:6b:36:
         d9:37:d5:42:a5:b3:94:3f:e9:7c:e9:3f:81:57:27:66:60:22:
         40:6b:44:52:25:83:a2:db:4e:e0:33:d3:2e:ed:62:d6:07:e7:
         d1:d9:34:8b:ec:d1:d9:d4:ac:bd:8b:88:10:99:88:fc:5b:9c:
         20:b5:9a:2f:a3:93:33:fc:79:de:f5:4b:08:51:44:21:66:e4:
         42:eb:37:02:87:37:1f:59:9c:bc:b7:a1:2f:d8:17:4c:1a:81:
         b3:6c:ee:f6:65:61:7c:1f:4e:72:24:d1:47:8d:c7:d4:7b:5c:
         e4:78:11:b7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBFQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTgxMjVBRjExMC8GA1UEBRMoM0M3OUYwRkNCQkIwQzA0MUM4QjRGNkRFRTEwM0Iw
MjUxOTUxNkVGNDAeFw0yNjExMDIwMzQ5NDlaFw0yNjExMDQwMzQ5NDlaMBgxFjAU
BgNVBAMTDTZhZTgwODVkLThjYzYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7tw0lWDd4lAi6VYLiE0Jh1tALXxpJMTpsUwadfn6Ahw8XQ9dLAKcdtyDo
mfFL4/nLdC5Kj2zCiQ+wWMuQfG3Tp0QHtz8NmXZHRsVPIfzwCOMoxd1jmEKQZ3ID
6FQzb9Ii1VSKcSa4YBON94Yf8siY/dR0SyVN4lSqCv4/21KfLTrfoJJ1hYmE+zzo
mlS85l7NG2AzL/Z0d9G3hnFWwNa2OgTSUh7VCq1JvFUVVpAXyrP7G+zk4YYAyPLo
f9PgPMTn90xsm0vn9tG0BS76IQV3AYJ+/RzYWWag2JRHWZu3W50qz6OCdrpMXCed
IkTJn3w+uS+HT7cJofvLPtNrJuMdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzvar
pTemlK3pppx0ajh9cLEQdtswHwYDVR0jBBgwFoAUPHnw/LuwwEHItPbe4QOwJRlR
bvQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4MTI1LzlFRDdFQjFFODM4NDExRUVBRjgxMzEzNTRBRDlFNkZDL1BIbndf
THV3d0VISXRQYmU0UU93SlJsUmJ2US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BIbndfTHV3d0VISXRQYmU0UU93SlJsUmJ2US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTgxMjUvOUVEN0VCMUU4Mzg0MTFFRUFGODEzMTM1NEFE
OUU2RkMvUEhud19MdXd3RUhJdFBiZTRRT3dKUmxSYnZRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQANx3mXGqG7AZipZT6R5FrbfSmc9f7m
urQySFUs47cntbOZYUr0KwxBkgKdvVfJVMYs7JbKUNKVFx0JMHezFIOPZq5q8VxF
XlALsO1CLGWG1bRD00tD8SprPXIGq7RQgsbqF9CxDYLOv0eRKPmPJsCdFp8MNCVs
b8qornbZOPOKRPabrb/IShoVL/Oed6LSazbZN9VCpbOUP+l86T+BVydmYCJAa0RS
JYOi207gM9Mu7WLWB+fR2TSL7NHZ1Ky9i4gQmYj8W5wgtZovo5Mz/Hne9UsIUUQh
ZuRC6zcChzcfWZy8t6Ev2BdMGoGzbO72ZWF8H05yJNFHjcfUe1zkeBG3
-----END CERTIFICATE-----