Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
File:                     hbCxijGOWnXQTRoKp37_lQUiiSQ.mft (raw, json)
Hash identifier:          u0gRPKgdoxr6RimBPTzOvPO99JjO8gBX7KFluEwZpQI=
Subject key identifier:   05:72:7F:14:1E:5A:0B:41:16:1A:97:D3:35:DF:7B:8A:4C:B6:D2:5F
Authority key identifier: 85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24
Certificate issuer:       /CN=F36BD4F1AF/serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
Certificate serial:       08BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
Manifest number:          08B5
Signing time:             Tue 27 Oct 2026 01:56:19 +0000
Manifest this update:     Tue 27 Oct 2026 01:56:18 +0000
Manifest next update:     Thu 29 Oct 2026 01:56:18 +0000
Files and hashes:         1: hbCxijGOWnXQTRoKp37_lQUiiSQ.crl (hash: cxUG3lfAKZPXzOlKpdTdmbwqBZGP2DlJvTJwaPUGRUI=)
                          2: 67B8C7B20B7311EF82634D34017001B1.roa (hash: gTnze+sNFy8wfWQuqCuoldModdIZeS9lmW2uAevzSyE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 29 Oct 2026 01:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2238 (0x8be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD4F1AF, serialNumber=85B0B18A318E5A75D04D1A0AA77EFF9505228924
        Validity
            Not Before: Oct 27 01:56:18 2026 GMT
            Not After : Oct 29 01:56:18 2026 GMT
        Subject: CN=6ae004c3-a1a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8c:a9:8a:b1:53:53:67:ef:c6:01:0e:e5:52:
                    1d:c0:c4:59:9e:a0:81:6b:1e:0a:4c:0b:36:d4:b8:
                    25:a5:f7:44:f9:1a:af:e0:4e:2f:c1:55:4c:b6:7d:
                    db:bc:61:84:07:2b:5a:74:e0:02:a1:a1:47:b0:a4:
                    38:32:02:8a:f4:90:92:10:db:e7:cb:2d:4c:23:3c:
                    d3:c2:27:a7:5b:fb:e2:26:8a:2c:98:9f:72:0c:4b:
                    49:86:46:7d:ea:09:43:55:58:5a:e5:3a:7c:4e:92:
                    9f:f0:c7:06:a4:63:8b:a9:5a:36:35:bd:7d:8a:1b:
                    ae:de:3f:cb:40:d0:b1:df:65:4f:12:4e:58:88:0f:
                    1b:4a:f6:9d:13:07:0f:3c:53:3d:67:2c:79:e7:98:
                    ae:49:d4:5a:6a:71:60:bd:1d:d3:8d:0d:9d:a8:9d:
                    46:bf:bc:83:67:8c:5a:e6:d6:b6:ab:d4:36:81:23:
                    4c:14:3b:56:db:e5:df:43:da:93:e5:cc:1d:32:59:
                    4b:24:ca:8a:1f:b2:51:1e:cf:57:67:81:49:da:33:
                    89:a8:61:49:fa:af:5f:29:54:d4:ce:4e:33:de:ea:
                    7a:a1:a5:68:81:1d:1f:4c:47:b3:65:d7:13:03:e8:
                    45:3a:90:26:3c:8a:8d:ab:c2:ad:49:69:f9:7b:85:
                    f9:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:72:7F:14:1E:5A:0B:41:16:1A:97:D3:35:DF:7B:8A:4C:B6:D2:5F
            X509v3 Authority Key Identifier:
                keyid:85:B0:B1:8A:31:8E:5A:75:D0:4D:1A:0A:A7:7E:FF:95:05:22:89:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/hbCxijGOWnXQTRoKp37_lQUiiSQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD4F1/0B286984358A11EBA3DE6772F8AEA228/hbCxijGOWnXQTRoKp37_lQUiiSQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:93:b4:4e:86:1c:c6:6b:9d:13:3f:c1:7a:a4:37:8d:da:e1:
         3c:af:b7:70:b2:83:97:b6:66:a4:3b:41:a4:39:6a:68:eb:ed:
         79:85:c8:77:f2:13:81:9e:c4:d6:02:d6:e8:ce:e6:39:cb:bd:
         4f:e7:04:09:e0:15:50:04:8c:f9:f2:7e:8e:1e:d9:02:9a:5f:
         bc:cd:59:9e:d9:69:ae:f3:99:8d:06:c3:9b:02:76:c1:82:61:
         cf:ca:dc:14:59:dc:cd:c5:e5:88:db:e5:28:65:c1:3d:f6:ec:
         26:16:3d:86:89:45:b9:70:81:cc:7c:b4:09:30:13:d2:22:73:
         1c:dd:79:a5:cb:3a:1b:99:9c:46:59:52:63:10:65:1b:56:a2:
         03:4e:ef:2e:26:ca:cb:1e:31:a7:ad:42:7b:9c:51:06:fa:be:
         4f:9c:4f:0c:c3:8b:19:3e:f8:90:43:84:e6:ad:a9:00:c3:7e:
         92:bd:1d:59:6f:5f:e0:a2:3b:3e:12:23:d5:49:af:63:a3:50:
         42:46:ad:eb:d9:a2:92:fb:47:a9:24:37:44:b6:4b:3b:7b:c1:
         69:b7:19:4c:29:64:eb:a3:c6:c4:12:4f:85:ea:ec:f6:a7:95:
         ab:64:06:b6:61:2b:8c:f2:70:44:8d:b3:26:71:67:8d:83:75:
         45:34:13:0e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkQ0RjFBRjExMC8GA1UEBRMoODVCMEIxOEEzMThFNUE3NUQwNEQxQTBBQTc3RUZG
OTUwNTIyODkyNDAeFw0yNjEwMjcwMTU2MThaFw0yNjEwMjkwMTU2MThaMBgxFjAU
BgNVBAMTDTZhZTAwNGMzLWExYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDZjKmKsVNTZ+/GAQ7lUh3AxFmeoIFrHgpMCzbUuCWl90T5Gq/gTi/BVUy2
fdu8YYQHK1p04AKhoUewpDgyAor0kJIQ2+fLLUwjPNPCJ6db++ImiiyYn3IMS0mG
Rn3qCUNVWFrlOnxOkp/wxwakY4upWjY1vX2KG67eP8tA0LHfZU8STliIDxtK9p0T
Bw88Uz1nLHnnmK5J1FpqcWC9HdONDZ2onUa/vINnjFrm1rar1DaBI0wUO1bb5d9D
2pPlzB0yWUskyoofslEez1dngUnaM4moYUn6r18pVNTOTjPe6nqhpWiBHR9MR7Nl
1xMD6EU6kCY8io2rwq1Jafl7hfnTAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUBXJ/
FB5aC0EWGpfTNd97iky20l8wHwYDVR0jBBgwFoAUhbCxijGOWnXQTRoKp37/lQUi
iSQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJENEYxLzBCMjg2OTg0MzU4QTExRUJBM0RFNjc3MkY4QUVBMjI4L2hiQ3hp
akdPV25YUVRSb0twMzdfbFFVaWlTUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hiQ3hpakdPV25YUVRSb0twMzdfbFFVaWlTUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkQ0RjEvMEIyODY5ODQzNThBMTFFQkEzREU2NzcyRjhB
RUEyMjgvaGJDeGlqR09XblhRVFJvS3AzN19sUVVpaVNRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAlk7ROhhzGa50TP8F6pDeN2uE8r7dw
soOXtmakO0GkOWpo6+15hch38hOBnsTWAtbozuY5y71P5wQJ4BVQBIz58n6OHtkC
ml+8zVme2Wmu85mNBsObAnbBgmHPytwUWdzNxeWI2+UoZcE99uwmFj2GiUW5cIHM
fLQJMBPSInMc3XmlyzobmZxGWVJjEGUbVqIDTu8uJsrLHjGnrUJ7nFEG+r5PnE8M
w4sZPviQQ4TmrakAw36SvR1Zb1/gojs+EiPVSa9jo1BCRq3r2aKS+0epJDdEtks7
e8FptxlMKWTro8bEEk+F6uz2p5WrZAa2YSuM8nBEjbMmcWeNg3VFNBMO
-----END CERTIFICATE-----