Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
File:                     MQnplyMPK5fGUZojAYDU77BY1Us.mft (raw, json)
Hash identifier:          TSNZnIwtvRnE+yjYAVcUKevZdcsMoQ4F45y2gTX8mso=
Subject key identifier:   69:C8:C0:7E:0A:09:1B:31:CA:3F:B4:05:22:5D:59:20:6F:1E:36:5F
Authority key identifier: 31:09:E9:97:23:0F:2B:97:C6:51:9A:23:01:80:D4:EF:B0:58:D5:4B
Certificate issuer:       /CN=F36992ECAF/serialNumber=3109E997230F2B97C6519A230180D4EFB058D54B
Certificate serial:       042E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
Manifest number:          042D
Signing time:             Sun 25 Oct 2026 03:54:18 +0000
Manifest this update:     Sun 25 Oct 2026 03:54:17 +0000
Manifest next update:     Tue 27 Oct 2026 03:54:17 +0000
Files and hashes:         1: MQnplyMPK5fGUZojAYDU77BY1Us.crl (hash: q+Cw81RgzRKeqNJJ5uTHCfpPnAlQnsidCziQegJ6RkQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
                          rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 00:08:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36992ECAF, serialNumber=3109E997230F2B97C6519A230180D4EFB058D54B
        Validity
            Not Before: Oct 25 03:54:17 2026 GMT
            Not After : Oct 27 03:54:17 2026 GMT
        Subject: CN=6add7d6a-402f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:90:82:f8:76:63:2b:9a:ff:15:a0:b0:62:0c:
                    40:d9:1b:36:6a:c4:a7:e8:56:60:f9:07:4d:1d:95:
                    05:90:9b:44:ad:5e:a6:8a:73:43:08:b6:12:84:4f:
                    a6:77:2b:ec:65:ff:88:e1:9d:ab:f6:85:f9:1c:8e:
                    f4:b3:11:d8:0f:a1:a1:b5:95:14:f7:ca:ac:00:c9:
                    f3:ad:cc:01:16:88:26:6f:00:07:1e:d9:dd:60:52:
                    bb:ac:0f:e7:7f:95:e6:f6:88:16:ce:16:80:a3:ad:
                    7d:19:75:dc:fa:59:df:2a:91:c2:ae:3e:1a:81:26:
                    d9:1a:4d:a6:3f:20:72:fc:f6:e6:99:50:9f:a1:22:
                    e9:52:d4:81:94:e4:5a:01:8f:24:62:f6:d3:dd:bd:
                    f3:0a:e9:01:df:d5:7c:4e:fe:98:21:1b:72:cf:97:
                    05:13:00:e0:b2:0f:63:dc:e8:b8:a0:0b:8b:ec:8d:
                    31:7c:63:16:25:03:ac:bc:93:12:e9:a0:2e:fc:ad:
                    94:c2:89:59:2e:9f:19:af:5a:3d:b6:35:e6:f5:47:
                    6e:39:ff:bc:a8:d4:1a:bc:e7:bb:bc:00:a3:78:5a:
                    82:78:cd:1b:10:92:b5:46:34:52:24:1c:fb:60:c6:
                    02:24:2e:04:6b:eb:39:12:07:29:bd:61:84:96:70:
                    6f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:C8:C0:7E:0A:09:1B:31:CA:3F:B4:05:22:5D:59:20:6F:1E:36:5F
            X509v3 Authority Key Identifier:
                keyid:31:09:E9:97:23:0F:2B:97:C6:51:9A:23:01:80:D4:EF:B0:58:D5:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/MQnplyMPK5fGUZojAYDU77BY1Us.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36992EC/68C283249A8911EE9287B838D25BE465/MQnplyMPK5fGUZojAYDU77BY1Us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:52:d1:48:71:1a:36:5c:51:4f:c3:6c:46:08:3f:f1:92:f7:
         2c:7e:27:7b:f3:f9:f8:91:a9:24:93:8c:16:3d:65:22:ec:a0:
         38:8c:9c:66:82:cd:a0:20:b7:d1:14:88:56:83:9f:ed:33:82:
         ec:17:5c:50:4c:e4:57:f4:de:de:fc:25:3c:af:11:16:5c:8e:
         5e:f1:a2:17:d6:ba:2c:da:a5:6d:7e:f8:b0:b2:35:1f:21:1f:
         68:3b:19:74:d4:72:a4:6c:3e:87:63:9c:66:fb:dc:15:88:34:
         b6:4f:dd:d1:bd:6c:e6:04:ca:81:39:72:be:d4:8a:4e:a9:fc:
         0a:a4:53:23:44:40:5e:b9:be:3b:5a:7d:e4:c9:b2:2c:91:05:
         24:06:99:60:e2:af:59:a5:fe:97:28:16:4d:71:c7:86:c9:00:
         1f:c9:5a:35:6a:d7:47:05:f2:73:d8:25:02:3f:0d:0f:d8:1a:
         f2:a2:ff:85:4b:c5:83:82:af:c3:d2:82:41:94:05:d4:b4:15:
         47:f8:34:46:c0:c5:5a:66:d8:05:de:51:5f:84:b4:70:02:ee:
         7c:9b:89:66:7e:26:9d:2e:d1:57:c7:60:b2:15:0c:33:b4:59:
         da:82:fd:40:63:19:e5:ce:7f:70:84:1a:37:d7:57:a4:91:c8:
         db:0a:f4:02
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBC4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTkyRUNBRjExMC8GA1UEBRMoMzEwOUU5OTcyMzBGMkI5N0M2NTE5QTIzMDE4MEQ0
RUZCMDU4RDU0QjAeFw0yNjEwMjUwMzU0MTdaFw0yNjEwMjcwMzU0MTdaMBgxFjAU
BgNVBAMTDTZhZGQ3ZDZhLTQwMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdkIL4dmMrmv8VoLBiDEDZGzZqxKfoVmD5B00dlQWQm0StXqaKc0MIthKE
T6Z3K+xl/4jhnav2hfkcjvSzEdgPoaG1lRT3yqwAyfOtzAEWiCZvAAce2d1gUrus
D+d/leb2iBbOFoCjrX0Zddz6Wd8qkcKuPhqBJtkaTaY/IHL89uaZUJ+hIulS1IGU
5FoBjyRi9tPdvfMK6QHf1XxO/pghG3LPlwUTAOCyD2Pc6LigC4vsjTF8YxYlA6y8
kxLpoC78rZTCiVkunxmvWj22Neb1R245/7yo1Bq857u8AKN4WoJ4zRsQkrVGNFIk
HPtgxgIkLgRr6zkSBym9YYSWcG9xAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUacjA
fgoJGzHKP7QFIl1ZIG8eNl8wHwYDVR0jBBgwFoAUMQnplyMPK5fGUZojAYDU77BY
1UswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk5MkVDLzY4QzI4MzI0OUE4OTExRUU5Mjg3QjgzOEQyNUJFNDY1L01RbnBs
eU1QSzVmR1Vab2pBWURVNzdCWTFVcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL01RbnBseU1QSzVmR1Vab2pBWURVNzdCWTFVcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTkyRUMvNjhDMjgzMjQ5QTg5MTFFRTkyODdCODM4RDI1
QkU0NjUvTVFucGx5TVBLNWZHVVpvakFZRFU3N0JZMVVzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6UtFIcRo2XFFPw2xGCD/xkvcsfid7
8/n4kakkk4wWPWUi7KA4jJxmgs2gILfRFIhWg5/tM4LsF1xQTORX9N7e/CU8rxEW
XI5e8aIX1ros2qVtfviwsjUfIR9oOxl01HKkbD6HY5xm+9wViDS2T93RvWzmBMqB
OXK+1IpOqfwKpFMjREBeub47Wn3kybIskQUkBplg4q9Zpf6XKBZNcceGyQAfyVo1
atdHBfJz2CUCPw0P2Bryov+FS8WDgq/D0oJBlAXUtBVH+DRGwMVaZtgF3lFfhLRw
Au58m4lmfiadLtFXx2CyFQwztFnagv1AYxnlzn9whBo311ekkcjbCvQC
-----END CERTIFICATE-----