Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
File:                     5OfkzwUGmYE4HGusKKJrtmmU0rc.mft (raw, json)
Hash identifier:          gl6rJRT01fDgFY3uXvP9rdv29Y+jZMTqYB2N0ueQk3c=
Subject key identifier:   B0:EC:70:34:71:ED:CB:6E:A4:20:47:72:9D:92:93:FC:AA:E3:20:E7
Authority key identifier: E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7
Certificate issuer:       /CN=F36A6EA0AF/serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
Certificate serial:       0158
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
Manifest number:          0152
Signing time:             Tue 27 Oct 2026 05:16:55 +0000
Manifest this update:     Tue 27 Oct 2026 05:16:54 +0000
Manifest next update:     Thu 29 Oct 2026 05:16:54 +0000
Files and hashes:         1: 5OfkzwUGmYE4HGusKKJrtmmU0rc.crl (hash: T1ES5IM8pnB181cvnO8izlK8xuCIyFMROHSbJK2DO3o=)
                          2: F36F0F1AD0F611F0AB30B88FDAE4EC9C.roa (hash: dNGgCtw24nbAR58DF8sv0Wym3VwzJDfok0oC2N1xwvc=)
                          3: 2FFDE81CD34E11F0B7F1C9BADAE4EC9C.roa (hash: lmKBgc8wIXpN7ohFi3bEsVy0HhEMQZg8umYWi7PtY/0=)
                          4: 1811E4B2D34C11F0A34F27AEDAE4EC9C.roa (hash: 5J5kKxxmT3AitlgzrzKNAptdmk4cbkC8tOUOxsnY+GM=)
                          5: AFCDD206D34D11F0ADCD4EB7DAE4EC9C.roa (hash: Wushw/sA+miTMHcjq5BUALTuvax/UDlZ5uswbKq6gbc=)
                          6: B82C1EEAD34C11F0A0F487B0DAE4EC9C.roa (hash: EGArG9brFI7oxboTdJn16N3Dn9tsiL6qA8X8WNsrRI0=)
                          7: 216C2206D34D11F081CE2AB4DAE4EC9C.roa (hash: wmcnwC3N1n68tZ025Jzu1Yi8vDKdizTOQUqWDI3JT4g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 05:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AF, serialNumber=E4E7E4CF05069981381C6BAC28A26BB66994D2B7
        Validity
            Not Before: Oct 27 05:16:54 2026 GMT
            Not After : Oct 29 05:16:54 2026 GMT
        Subject: CN=6ae033c7-e424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1d:2f:0a:ef:9e:50:b2:1e:92:a3:30:6e:95:
                    5d:e8:f6:af:9e:3a:1a:94:dd:90:26:c0:8c:27:95:
                    bd:b2:85:46:3e:e1:b9:e9:f7:d7:1f:5d:a2:8c:1e:
                    55:71:82:2c:e2:3b:42:4d:dc:0b:67:1d:7f:e9:d5:
                    2d:29:9a:ec:a8:eb:df:fa:96:e5:b9:51:fc:0a:ce:
                    a1:0b:40:d0:c8:7e:bd:b2:ba:b6:7f:a7:c6:b0:db:
                    6d:0e:5a:84:6a:5d:b6:8c:c6:3c:b0:d9:4c:8f:34:
                    9e:76:cd:c7:22:cf:93:b8:84:d3:54:d8:09:1e:96:
                    82:93:81:d7:35:a0:59:c5:84:5b:d7:88:cf:5d:a8:
                    ff:c1:4a:f8:11:f9:53:b1:ab:ec:8c:f3:f2:e8:4b:
                    db:a8:6c:c0:57:83:65:2f:0a:1d:21:09:4a:cb:28:
                    98:3b:63:5a:21:a0:f8:66:f8:68:3a:6f:6c:5a:8d:
                    d6:18:52:d4:18:c8:85:4c:ed:ce:6f:11:a1:32:ee:
                    38:39:e6:09:ce:35:6f:2b:53:dc:c3:f2:bb:01:31:
                    29:2d:11:71:66:9d:93:f8:eb:b5:b2:67:44:b4:a6:
                    e3:b0:8e:4e:bc:41:eb:a3:44:7b:2d:11:0d:66:d2:
                    1e:f7:c5:22:0a:79:df:64:5b:dc:7a:be:b4:4d:96:
                    6d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:EC:70:34:71:ED:CB:6E:A4:20:47:72:9D:92:93:FC:AA:E3:20:E7
            X509v3 Authority Key Identifier:
                keyid:E4:E7:E4:CF:05:06:99:81:38:1C:6B:AC:28:A2:6B:B6:69:94:D2:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/5OfkzwUGmYE4HGusKKJrtmmU0rc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/59C558DED0F511F0AE204785DAE4EC9C/5OfkzwUGmYE4HGusKKJrtmmU0rc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ea:bd:f0:c3:54:3a:4a:aa:e7:3f:a5:18:0f:ca:83:cb:2c:
         fe:c5:08:ce:77:ce:68:9c:45:1a:1a:65:ac:f5:15:65:37:27:
         f5:e2:88:da:72:11:43:51:2e:ab:4b:a4:70:8b:e3:57:3c:f6:
         2d:70:76:4a:fc:a3:60:c4:41:21:68:e5:a5:a1:b7:bc:2f:80:
         0a:4c:eb:f2:d2:a6:19:c5:a9:85:4a:70:9a:19:84:8e:92:a7:
         dc:08:21:ae:2a:5e:7a:a0:b6:fc:f7:6f:46:cf:04:45:06:84:
         2a:83:6e:dc:43:93:5d:c9:98:e8:1a:54:26:c3:a0:58:87:e0:
         33:c7:cf:0d:6d:bd:49:23:91:dc:9c:b7:81:eb:e5:eb:eb:07:
         83:e8:a9:d3:56:3e:bc:da:1b:2a:19:93:06:87:40:18:7a:a4:
         44:6b:4b:da:2e:95:c5:ce:d6:46:9b:f1:11:48:40:a2:40:71:
         d5:a9:f9:53:fc:e7:ce:0e:22:45:a5:97:9e:39:ef:f7:6e:f5:
         92:d9:eb:66:2e:d3:e4:63:98:e5:16:0c:65:48:9b:72:99:39:
         e0:97:4d:b2:bf:b1:e2:0f:bb:fa:c8:36:cb:f9:e2:35:f7:b4:
         8e:c4:8a:53:69:7b:af:f7:19:11:e7:52:95:d5:c0:08:10:8f:
         35:db:87:cf
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTZFQTBBRjExMC8GA1UEBRMoRTRFN0U0Q0YwNTA2OTk4MTM4MUM2QkFDMjhBMjZC
QjY2OTk0RDJCNzAeFw0yNjEwMjcwNTE2NTRaFw0yNjEwMjkwNTE2NTRaMBgxFjAU
BgNVBAMTDTZhZTAzM2M3LWU0MjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+HS8K755Qsh6SozBulV3o9q+eOhqU3ZAmwIwnlb2yhUY+4bnp99cfXaKM
HlVxgiziO0JN3AtnHX/p1S0pmuyo69/6luW5UfwKzqELQNDIfr2yurZ/p8aw220O
WoRqXbaMxjyw2UyPNJ52zcciz5O4hNNU2AkeloKTgdc1oFnFhFvXiM9dqP/BSvgR
+VOxq+yM8/LoS9uobMBXg2UvCh0hCUrLKJg7Y1ohoPhm+Gg6b2xajdYYUtQYyIVM
7c5vEaEy7jg55gnONW8rU9zD8rsBMSktEXFmnZP467WyZ0S0puOwjk68QeujRHst
EQ1m0h73xSIKed9kW9x6vrRNlm0/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUsOxw
NHHty26kIEdynZKT/KrjIOcwHwYDVR0jBBgwFoAU5OfkzwUGmYE4HGusKKJrtmmU
0rcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE2RUEwLzU5QzU1OERFRDBGNTExRjBBRTIwNDc4NURBRTRFQzlDLzVPZmt6
d1VHbVlFNEhHdXNLS0pydG1tVTByYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzVPZmt6d1VHbVlFNEhHdXNLS0pydG1tVTByYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTZFQTAvNTlDNTU4REVEMEY1MTFGMEFFMjA0Nzg1REFF
NEVDOUMvNU9ma3p3VUdtWUU0SEd1c0tLSnJ0bW1VMHJjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA06r3ww1Q6SqrnP6UYD8qDyyz+xQjO
d85onEUaGmWs9RVlNyf14ojachFDUS6rS6Rwi+NXPPYtcHZK/KNgxEEhaOWlobe8
L4AKTOvy0qYZxamFSnCaGYSOkqfcCCGuKl56oLb8929GzwRFBoQqg27cQ5NdyZjo
GlQmw6BYh+Azx88Nbb1JI5HcnLeB6+Xr6weD6KnTVj682hsqGZMGh0AYeqREa0va
LpXFztZGm/ERSECiQHHVqflT/OfODiJFpZeeOe/3bvWS2etmLtPkY5jlFgxlSJty
mTngl02yv7HiD7v6yDbL+eI197SOxIpTaXuv9xkR51KV1cAIEI8124fP
-----END CERTIFICATE-----