Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
File:                     Ga2syP-jkxMYpsdToKwbKukpXgM.mft (raw, json)
Hash identifier:          nSRqY9zArl0GucIfLV2hM3GD6LaTeiFGCTxPXjvIcHY=
Subject key identifier:   2E:56:84:2C:12:61:89:8F:0A:51:CC:82:9B:5D:93:30:1B:0B:17:15
Authority key identifier: 19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03
Certificate issuer:       /CN=F36B52A6AF/serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
Certificate serial:       0AD4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
Manifest number:          0AC9
Signing time:             Thu 10 Sep 2026 01:18:40 +0000
Manifest this update:     Thu 10 Sep 2026 01:18:39 +0000
Manifest next update:     Sat 12 Sep 2026 01:18:39 +0000
Files and hashes:         1: Ga2syP-jkxMYpsdToKwbKukpXgM.crl (hash: /7RvxKwXlbr7/viYcHa7JmPaOaBSHqvNpG5w5IFxzoE=)
                          2: 40F0EA0C864C11EF8B0D4162762E951A.roa (hash: 5nZTReAvtcbgPm+oRDhQ83p7XciRK3gVMtmCqG06N7Q=)
                          3: 19DBEAFC864C11EF91E74660762E951A.roa (hash: ssNbfh+xyxoJkv8ui9GVFM6RQk48tyv7Wmx8dqGtWao=)
                          4: 8F04BF5C864C11EF8F687464762E951A.roa (hash: MFVB+4npBxn/Yh83eigumhh31Iuk3EG7QH/ll1Qzce0=)
                          5: DF0FB1A6864B11EFAA421C60762E951A.roa (hash: wcCwWJ/0MHVkGO7m4+40u82BAL5x3asIQ+jyQE9ovPY=)
                          6: 325E4A4E864B11EF9931C05B762E951A.roa (hash: uilxINn6WdcvcjXq+Nwl5lpnynygHnR6cPspfvXc/m0=)
                          7: EB320A3E864511EF82F333B8762E951A.roa (hash: AOcstZS+3TqPjLs5Onnwkaac6jTexzGQCvTnjKOL0G4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 12 Sep 2026 01:18:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2772 (0xad4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B52A6AF, serialNumber=19ADACC8FFA3931318A6C753A0AC1B2AE9295E03
        Validity
            Not Before: Sep 10 01:18:39 2026 GMT
            Not After : Sep 12 01:18:39 2026 GMT
        Subject: CN=6aa20570-2a12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:05:8a:7d:d9:f6:f2:0d:6a:2e:bf:f8:a4:c3:
                    ef:25:32:45:9e:e0:0e:9b:e6:6f:19:0c:12:2b:a3:
                    77:7b:76:58:2f:f9:bd:bc:8f:0e:02:18:4c:e2:3c:
                    e7:36:95:c8:f1:fa:35:72:00:9c:35:ba:63:5f:1b:
                    d2:17:ef:a7:c7:e1:94:e3:d8:0e:96:b1:2a:b5:02:
                    ec:1d:7c:9f:f6:db:61:ca:cd:4c:0b:2a:15:99:56:
                    ad:c4:3e:15:a7:81:d8:26:fd:a9:7c:af:5e:dc:b0:
                    a1:c6:ca:b7:18:b9:7e:37:81:9d:b4:a3:f8:46:fa:
                    60:4a:dd:e9:69:06:29:a4:06:78:63:8d:e2:32:16:
                    14:67:a8:ad:ac:bf:79:f3:63:a5:22:33:13:cb:2b:
                    cc:75:81:66:b8:82:d2:c1:40:2b:ae:8a:e5:22:43:
                    4c:18:dd:f9:92:ce:b3:69:cf:77:21:2c:bc:05:a9:
                    e5:aa:bf:38:15:e1:2e:34:15:00:bb:af:d6:b1:e1:
                    57:e2:23:5c:77:71:bd:1a:5f:ee:4f:02:1d:3f:c9:
                    c9:24:90:eb:51:ab:8b:3e:dd:a4:ed:d4:b6:6f:52:
                    22:59:52:9d:0f:51:e1:c6:a8:2b:b4:ec:87:f6:f3:
                    f3:59:c8:2c:39:58:a7:0d:e9:0a:c2:c0:f9:6b:77:
                    09:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:56:84:2C:12:61:89:8F:0A:51:CC:82:9B:5D:93:30:1B:0B:17:15
            X509v3 Authority Key Identifier:
                keyid:19:AD:AC:C8:FF:A3:93:13:18:A6:C7:53:A0:AC:1B:2A:E9:29:5E:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Ga2syP-jkxMYpsdToKwbKukpXgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B52A6/6AE307B66FFD11E9A69CC134F8AEA228/Ga2syP-jkxMYpsdToKwbKukpXgM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:6a:0e:11:cd:96:e6:b6:44:f6:55:43:6c:a5:3a:ab:d8:b2:
         da:e8:8c:d2:04:37:76:96:1f:a4:84:60:03:c3:89:74:14:8a:
         07:be:9f:ab:7a:ba:c7:35:5f:25:5f:d3:6c:32:dd:92:8a:82:
         e3:32:3b:da:a8:2e:80:47:6e:65:cc:66:b2:e2:a0:bf:57:a7:
         05:c4:e0:b7:c6:09:63:90:45:e9:1a:2a:10:cf:db:b1:05:0b:
         30:3b:fc:bf:2f:9c:bb:00:af:c3:74:10:3b:7f:38:4f:16:04:
         68:c3:a8:99:7f:4e:dc:3b:84:4a:ad:4d:97:35:87:5a:96:29:
         a5:2d:0e:18:0d:9c:c5:7c:a0:b1:26:7b:15:ee:6b:a0:5c:38:
         15:b8:fc:11:24:40:d6:9c:93:e0:56:62:3c:29:df:91:10:94:
         9d:9d:6f:78:49:b3:26:a7:b7:0d:4d:a3:c0:3e:e7:21:67:5f:
         07:f0:20:a6:46:5e:16:59:d0:02:a7:d9:d2:28:7f:22:73:e8:
         29:c7:04:41:37:96:f9:dd:dd:12:21:2e:6c:55:eb:81:0b:e2:
         22:ed:a9:75:e3:0e:9a:90:a6:43:d7:10:df:f1:e1:58:ca:6a:
         e4:a0:9e:b0:38:aa:3f:ae:87:ec:be:d6:d9:69:56:b0:06:1f:
         14:0a:55:76
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCtQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QjUyQTZBRjExMC8GA1UEBRMoMTlBREFDQzhGRkEzOTMxMzE4QTZDNzUzQTBBQzFC
MkFFOTI5NUUwMzAeFw0yNjA5MTAwMTE4MzlaFw0yNjA5MTIwMTE4MzlaMBgxFjAU
BgNVBAMTDTZhYTIwNTcwLTJhMTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDoBYp92fbyDWouv/ikw+8lMkWe4A6b5m8ZDBIro3d7dlgv+b28jw4CGEzi
POc2lcjx+jVyAJw1umNfG9IX76fH4ZTj2A6WsSq1AuwdfJ/222HKzUwLKhWZVq3E
PhWngdgm/al8r17csKHGyrcYuX43gZ20o/hG+mBK3elpBimkBnhjjeIyFhRnqK2s
v3nzY6UiMxPLK8x1gWa4gtLBQCuuiuUiQ0wY3fmSzrNpz3chLLwFqeWqvzgV4S40
FQC7r9ax4VfiI1x3cb0aX+5PAh0/yckkkOtRq4s+3aTt1LZvUiJZUp0PUeHGqCu0
7If28/NZyCw5WKcN6QrCwPlrdwmPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQULlaE
LBJhiY8KUcyCm12TMBsLFxUwHwYDVR0jBBgwFoAUGa2syP+jkxMYpsdToKwbKukp
XgMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkI1MkE2LzZBRTMwN0I2NkZGRDExRTlBNjlDQzEzNEY4QUVBMjI4L0dhMnN5
UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0dhMnN5UC1qa3hNWXBzZFRvS3diS3VrcFhnTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QjUyQTYvNkFFMzA3QjY2RkZEMTFFOUE2OUNDMTM0RjhB
RUEyMjgvR2Eyc3lQLWpreE1ZcHNkVG9Ld2JLdWtwWGdNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBYag4RzZbmtkT2VUNspTqr2LLa6IzS
BDd2lh+khGADw4l0FIoHvp+rerrHNV8lX9NsMt2SioLjMjvaqC6AR25lzGay4qC/
V6cFxOC3xgljkEXpGioQz9uxBQswO/y/L5y7AK/DdBA7fzhPFgRow6iZf07cO4RK
rU2XNYdalimlLQ4YDZzFfKCxJnsV7mugXDgVuPwRJEDWnJPgVmI8Kd+REJSdnW94
SbMmp7cNTaPAPuchZ18H8CCmRl4WWdACp9nSKH8ic+gpxwRBN5b53d0SIS5sVeuB
C+Ii7al14w6akKZD1xDf8eFYymrkoJ6wOKo/rofsvtbZaVawBh8UClV2
-----END CERTIFICATE-----