Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
File:                     5OfkzwUGmYE4HGusKKJrtmmU0rc.mft (raw, json)
Hash identifier:          qYumqUapRvvoCnUPA/hHEL/Eo1KvTmYCYTgGVrZLQuE=
Subject key identifier:   05:CA:08:A0:D1:A8:0F:FB:DB:19:11:8C:5B:2E:8E:22:3F:93:AB:30
Authority key identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7
Certificate issuer:       /CN=F36A6EA0AF/serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
Certificate serial:       0129
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
Manifest number:          0123
Signing time:             Thu 10 Sep 2026 05:16:41 +0000
Manifest this update:     Thu 10 Sep 2026 05:16:41 +0000
Manifest next update:     Sat 12 Sep 2026 05:16:41 +0000
Files and hashes:         1: 5OfkzwUGmYE4HGusKKJrtmmU0rc.crl (hash: eh62KDG5m/6CKDOFGgTBceE0bpc1+6LoCVWCU6/TZfw=)
                          2: F36F0F1AD0F611F0AB30B88FDAE4EC9C.roa (hash: dNGgCtw24nbAR58DF8sv0Wym3VwzJDfok0oC2N1xwvc=)
                          3: 2FFDE81CD34E11F0B7F1C9BADAE4EC9C.roa (hash: lmKBgc8wIXpN7ohFi3bEsVy0HhEMQZg8umYWi7PtY/0=)
                          4: 1811E4B2D34C11F0A34F27AEDAE4EC9C.roa (hash: 5J5kKxxmT3AitlgzrzKNAptdmk4cbkC8tOUOxsnY+GM=)
                          5: AFCDD206D34D11F0ADCD4EB7DAE4EC9C.roa (hash: Wushw/sA+miTMHcjq5BUALTuvax/UDlZ5uswbKq6gbc=)
                          6: B82C1EEAD34C11F0A0F487B0DAE4EC9C.roa (hash: EGArG9brFI7oxboTdJn16N3Dn9tsiL6qA8X8WNsrRI0=)
                          7: 216C2206D34D11F081CE2AB4DAE4EC9C.roa (hash: wmcnwC3N1n68tZ025Jzu1Yi8vDKdizTOQUqWDI3JT4g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 05:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 297 (0x129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AF, serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
        Validity
            Not Before: Sep 10 05:16:41 2026 GMT
            Not After : Sep 12 05:16:41 2026 GMT
        Subject: CN=6aa23d39-81c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:3b:09:c0:c7:45:e4:70:cc:2e:64:7e:56:
                    0c:1a:a3:4f:93:69:e2:5a:d3:f5:f6:d6:bd:ac:a5:
                    4b:52:98:d9:ff:fb:01:ea:c4:c0:93:ee:ea:b1:98:
                    c2:26:98:b5:2b:54:d1:8a:2a:e1:bd:74:7b:e2:7e:
                    40:ce:e6:27:9a:30:f6:04:34:98:5b:c8:ca:02:dd:
                    c0:ee:98:f2:21:17:db:b3:e9:b3:c1:d9:01:24:66:
                    d7:dd:34:d1:47:b5:ab:bc:df:68:ab:78:8a:75:0a:
                    d1:e3:6c:44:c4:14:a6:3b:c3:27:70:ae:4d:73:c8:
                    3c:75:f4:1b:70:87:b6:dd:52:cd:c0:cb:ca:bf:44:
                    56:43:d6:10:31:3a:f6:6f:e6:5d:84:2e:a7:f2:68:
                    7d:b3:7d:6b:67:cd:40:2e:1c:d4:67:1d:51:86:d8:
                    10:6d:1d:26:71:97:fb:f3:aa:70:41:0d:c4:17:d7:
                    d6:a8:23:d9:c2:da:c8:5d:db:3f:6b:c3:53:d8:22:
                    d4:d8:1e:25:44:6f:b1:38:c5:c2:6f:91:d9:c6:11:
                    ab:0a:e4:0a:02:df:76:82:08:bf:0d:87:35:17:29:
                    c8:7b:d2:40:e5:ec:2e:f0:b3:62:73:88:d5:f0:05:
                    51:df:94:aa:e1:a0:02:2b:fb:e5:4b:6e:5b:85:58:
                    1b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CA:08:A0:D1:A8:0F:FB:DB:19:11:8C:5B:2E:8E:22:3F:93:AB:30
            X509v3 Authority Key Identifier:
                keyid:E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cf:2a:a9:da:c4:59:62:ec:7c:45:08:fe:f8:61:98:82:ba:
         a0:9d:e1:56:26:ca:c8:f4:c5:38:dc:bb:7f:65:cc:e2:42:a7:
         d4:e6:fb:5d:1d:d2:55:34:41:4d:f0:c2:a0:c2:11:30:b5:f3:
         ac:b9:e3:ee:59:e8:33:24:65:4f:4e:64:35:e8:f1:9a:05:52:
         e3:af:de:cd:ed:bc:85:3f:bf:1d:0e:14:71:20:0b:75:41:8b:
         a4:7a:a8:69:5a:87:90:e7:ab:37:1a:f7:ae:8a:56:36:80:b6:
         6c:5b:48:42:2c:7b:39:ba:e5:5a:ca:7e:3d:8b:49:86:e8:16:
         22:f8:2d:4b:f7:0f:9a:70:3a:47:00:17:94:f7:f7:73:6c:97:
         a3:2b:f5:c5:b2:b9:9d:86:3f:8e:f9:4a:29:bf:7c:ad:61:99:
         5e:6c:db:c9:ba:84:36:44:b4:77:50:4e:54:53:5a:27:3a:e0:
         d8:b1:6f:a3:aa:81:44:85:a2:e4:ad:75:f8:90:74:1d:85:e1:
         28:85:c5:a3:fa:bf:6e:6d:22:d8:20:1b:34:15:8f:58:cf:4e:
         04:95:f3:ac:21:d3:76:13:ce:6d:2a:53:06:74:fe:67:6c:de:
         90:7d:da:31:42:f3:dc:05:03:14:0c:9e:75:74:c9:e8:99:56:
         33:77:1a:c3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICASkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTZFQTBBRjExMC8GA1UEBRMoRTRFN0U0Q0YwNTA2OTk4MTM4MUM2QkFDMjhBMjZC
QjY2OTk0RDJCNzAeFw0yNjA5MTAwNTE2NDFaFw0yNjA5MTIwNTE2NDFaMBgxFjAU
BgNVBAMTDTZhYTIzZDM5LTgxYzcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/cjsJwMdF5HDMLmR+Vgwao0+TaeJa0/X21r2spUtSmNn/+wHqxMCT7uqx
mMImmLUrVNGKKuG9dHvifkDO5ieaMPYENJhbyMoC3cDumPIhF9uz6bPB2QEkZtfd
NNFHtau832ireIp1CtHjbETEFKY7wydwrk1zyDx19Btwh7bdUs3Ay8q/RFZD1hAx
OvZv5l2ELqfyaH2zfWtnzUAuHNRnHVGG2BBtHSZxl/vzqnBBDcQX19aoI9nC2shd
2z9rw1PYItTYHiVEb7E4xcJvkdnGEasK5AoC33aCCL8NhzUXKch70kDl7C7ws2Jz
iNXwBVHflKrhoAIr++VLbluFWBuRAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBcoI
oNGoD/vbGRGMWy6OIj+TqzAwHwYDVR0jBBgwFoAU5OfkzwUGmYE4HGusKKJrtmmU
0rcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE2RUEwLzU5QzU1OERFRDBGNTExRjBBRTIwNDc4NURBRTRFQzlDLzVPZmt6
d1VHbVlFNEhHdXNLS0pydG1tVTByYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVPZmt6d1VHbVlFNEhHdXNLS0pydG1tVTByYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTZFQTAvNTlDNTU4REVEMEY1MTFGMEFFMjA0Nzg1REFF
NEVDOUMvNU9ma3p3VUdtWUU0SEd1c0tLSnJ0bW1VMHJjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCZzyqp2sRZYux8RQj++GGYgrqgneFW
JsrI9MU43Lt/ZcziQqfU5vtdHdJVNEFN8MKgwhEwtfOsuePuWegzJGVPTmQ16PGa
BVLjr97N7byFP78dDhRxIAt1QYukeqhpWoeQ56s3GveuilY2gLZsW0hCLHs5uuVa
yn49i0mG6BYi+C1L9w+acDpHABeU9/dzbJejK/XFsrmdhj+O+Uopv3ytYZlebNvJ
uoQ2RLR3UE5UU1onOuDYsW+jqoFEhaLkrXX4kHQdheEohcWj+r9ubSLYIBs0FY9Y
z04ElfOsIdN2E85tKlMGdP5nbN6QfdoxQvPcBQMUDJ51dMnomVYzdxrD
-----END CERTIFICATE-----