Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
File:                     3YlMw4XaLW71JrsLssqqX8pm8MM.mft (raw, json)
Hash identifier:          XhFnDK9nsBARPoIo3/xFQ20WFsMDoOlTVSaQI6iGXvI=
Subject key identifier:   77:24:1F:D6:A2:3C:CC:60:1E:AF:2B:C4:EA:AC:37:4F:42:EC:3E:BE
Authority key identifier: DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3
Certificate issuer:       /CN=F36A39CEAF/serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
Certificate serial:       04E9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
Manifest number:          04E8
Signing time:             Sun 25 Oct 2026 03:30:48 +0000
Manifest this update:     Sun 25 Oct 2026 03:30:47 +0000
Manifest next update:     Tue 27 Oct 2026 03:30:47 +0000
Files and hashes:         1: 3YlMw4XaLW71JrsLssqqX8pm8MM.crl (hash: +8iF07tCriuZUTZKeMsKnUrBKk7oa42llFLLATIZ3Ug=)
                          2: A0B834A6403611EF97C8EE46762E951A.roa (hash: kJ/+tKAV2nU5Yw7yHfU4bK7cxohBTA9n07WDnp1GBUA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 03:30:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1257 (0x4e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A39CEAF, serialNumber=DD894CC385DA2D6EF526BB0BB2CAAA5FCA66F0C3
        Validity
            Not Before: Oct 25 03:30:47 2026 GMT
            Not After : Oct 27 03:30:47 2026 GMT
        Subject: CN=6add77e8-9559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4d:68:18:cb:5b:e0:f6:aa:e2:58:74:72:92:
                    02:f0:65:17:b4:0a:5f:d8:10:a1:a5:77:ce:da:fe:
                    9f:74:29:d8:f6:84:0e:cf:cc:32:61:f4:2b:e6:76:
                    f2:b5:13:d3:c3:b4:23:03:27:38:88:66:6f:76:1a:
                    94:0c:80:4d:f4:aa:6c:77:7e:e9:24:55:0a:ad:c7:
                    76:5f:46:f4:28:cf:48:aa:16:ba:09:d6:64:35:5f:
                    05:71:90:19:b4:83:3b:be:46:e8:f9:61:fe:98:44:
                    65:ca:d5:5c:41:45:43:39:d8:ab:51:4b:c7:0f:c5:
                    5a:59:4a:57:25:a6:a3:61:ff:87:26:bd:7f:5d:50:
                    8c:fe:a5:5e:92:6f:84:1a:5b:bc:91:51:3c:e1:6f:
                    25:22:38:1c:72:15:9b:76:bc:e8:23:29:2b:88:e5:
                    33:13:c9:26:ac:07:a5:47:69:7d:d7:05:f3:3b:c7:
                    35:6e:4b:73:f4:73:6c:f3:9d:1b:78:90:7b:0c:fe:
                    50:cd:48:80:92:f7:d0:af:ca:51:8e:e9:ff:c5:ac:
                    69:8f:b6:ba:bd:90:77:9d:ec:89:9f:7b:c7:84:7a:
                    f3:36:81:c5:42:4c:f3:ab:1a:f0:92:d9:5b:82:86:
                    8b:4d:4c:09:75:56:7c:e6:bd:c4:0f:c7:90:34:73:
                    7a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:24:1F:D6:A2:3C:CC:60:1E:AF:2B:C4:EA:AC:37:4F:42:EC:3E:BE
            X509v3 Authority Key Identifier:
                keyid:DD:89:4C:C3:85:DA:2D:6E:F5:26:BB:0B:B2:CA:AA:5F:CA:66:F0:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/3YlMw4XaLW71JrsLssqqX8pm8MM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A39CE/792DDDBE0B5311EEA6555E5D4AD9E6FC/3YlMw4XaLW71JrsLssqqX8pm8MM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:01:e4:84:a1:c6:a4:8d:c4:c7:f8:da:bc:6c:11:2a:5e:fb:
         e2:48:fc:20:0d:dc:21:c0:cc:d9:dd:30:e9:a1:0f:b2:e4:8e:
         1a:10:75:42:e3:80:a4:e6:de:4d:dd:43:de:4d:1f:e5:3b:b0:
         2e:5a:3d:8e:9e:6d:2a:2a:9e:97:b2:01:00:49:67:90:ee:84:
         9e:d3:01:70:41:18:a1:b3:f1:9e:ff:5f:5c:3c:88:e5:47:46:
         c3:a5:b7:23:a9:a6:f6:89:39:54:15:a3:db:7c:14:4c:4d:ba:
         1b:61:98:fd:33:34:76:3d:28:74:4f:bd:d1:de:41:2a:b8:1a:
         68:e5:0e:7b:d8:fd:51:f1:74:dc:42:9d:38:ae:87:af:66:a7:
         99:4c:b3:e7:46:19:88:c1:66:c5:34:17:13:1c:b9:89:b5:db:
         02:e4:2d:c5:e8:43:8a:e9:c1:f5:42:4e:34:e6:e1:9d:74:df:
         52:1f:60:86:e2:18:2f:e1:23:b3:15:e0:02:14:1e:6b:d8:b1:
         00:e1:de:30:cd:fe:be:da:1d:78:33:cf:52:09:9a:d7:ad:ff:
         98:a9:5e:77:b1:62:b3:b0:d6:b4:d6:f5:ae:c1:1a:34:52:ec:
         bb:41:b9:c2:d7:44:0c:e4:10:33:4b:69:7b:8d:9c:84:e9:ab:
         fe:33:af:83
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBOkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM5Q0VBRjExMC8GA1UEBRMoREQ4OTRDQzM4NURBMkQ2RUY1MjZCQjBCQjJDQUFB
NUZDQTY2RjBDMzAeFw0yNjEwMjUwMzMwNDdaFw0yNjEwMjcwMzMwNDdaMBgxFjAU
BgNVBAMTDTZhZGQ3N2U4LTk1NTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCcTWgYy1vg9qriWHRykgLwZRe0Cl/YEKGld87a/p90Kdj2hA7PzDJh9Cvm
dvK1E9PDtCMDJziIZm92GpQMgE30qmx3fukkVQqtx3ZfRvQoz0iqFroJ1mQ1XwVx
kBm0gzu+Ruj5Yf6YRGXK1VxBRUM52KtRS8cPxVpZSlclpqNh/4cmvX9dUIz+pV6S
b4QaW7yRUTzhbyUiOBxyFZt2vOgjKSuI5TMTySasB6VHaX3XBfM7xzVuS3P0c2zz
nRt4kHsM/lDNSICS99CvylGO6f/FrGmPtrq9kHed7Imfe8eEevM2gcVCTPOrGvCS
2VuChotNTAl1VnzmvcQPx5A0c3q5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdyQf
1qI8zGAeryvE6qw3T0LsPr4wHwYDVR0jBBgwFoAU3YlMw4XaLW71JrsLssqqX8pm
8MMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzOUNFLzc5MkREREJFMEI1MzExRUVBNjU1NUU1RDRBRDlFNkZDLzNZbE13
NFhhTFc3MUpyc0xzc3FxWDhwbThNTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzNZbE13NFhhTFc3MUpyc0xzc3FxWDhwbThNTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTM5Q0UvNzkyREREQkUwQjUzMTFFRUE2NTU1RTVENEFE
OUU2RkMvM1lsTXc0WGFMVzcxSnJzTHNzcXFYOHBtOE1NLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCOAeSEocakjcTH+Nq8bBEqXvviSPwg
DdwhwMzZ3TDpoQ+y5I4aEHVC44Ck5t5N3UPeTR/lO7AuWj2Onm0qKp6XsgEASWeQ
7oSe0wFwQRihs/Ge/19cPIjlR0bDpbcjqab2iTlUFaPbfBRMTbobYZj9MzR2PSh0
T73R3kEquBpo5Q572P1R8XTcQp04roevZqeZTLPnRhmIwWbFNBcTHLmJtdsC5C3F
6EOK6cH1Qk405uGddN9SH2CG4hgv4SOzFeACFB5r2LEA4d4wzf6+2h14M89SCZrX
rf+YqV53sWKzsNa01vWuwRo0Uuy7QbnC10QM5BAzS2l7jZyE6av+M6+D
-----END CERTIFICATE-----