Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
File:                     x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft (raw, json)
Hash identifier:          fp+UFvnucryB1Q2uuWbngOe03nQoWYbTid4PbUVqHIU=
Subject key identifier:   70:15:8C:A5:E3:13:61:66:CE:80:16:AE:73:CA:74:E6:0D:C8:6E:AD
Authority key identifier: C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86
Certificate issuer:       /CN=F36C629BAF/serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
Certificate serial:       044E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
Manifest number:          044B
Signing time:             Sat 24 Oct 2026 03:51:37 +0000
Manifest this update:     Sat 24 Oct 2026 03:51:36 +0000
Manifest next update:     Mon 26 Oct 2026 03:51:36 +0000
Files and hashes:         1: x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl (hash: zN5oe1OdNwpmcmul2Gl3dI/PyZSDwa2LI6rsZxxUK4s=)
                          2: B2D67FBC81B811EFBF661993762E951A.roa (hash: uoPtPDn/rbTQRBGn7Sv62W9Z11akCbhfrMo3RcO5nHI=)
                          3: 566028A281BB11EFA2B4C6A4762E951A.roa (hash: sff2TxKKkLZbomvR8u92IEB7S8eTuT8nC5FtfM/Fsf4=)
                          4: D54273E281BA11EFA327CDA0762E951A.roa (hash: 5R8cd2x4uz0VmbtOqIFPktz58DCFoYAlE0EfcBaZH7c=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1102 (0x44e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C629BAF, serialNumber=C7D3466682C5160E22B62548E97E210FE4A1E386
        Validity
            Not Before: Oct 24 03:51:36 2026 GMT
            Not After : Oct 26 03:51:36 2026 GMT
        Subject: CN=6adc2b49-442d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:96:e8:61:9c:6c:d8:22:0f:43:ec:12:f5:03:
                    44:34:91:e5:35:f1:b0:93:ae:af:a8:69:1a:9a:63:
                    43:0a:d6:8c:22:0a:bd:2c:37:47:ab:a5:36:3c:71:
                    d6:6d:b4:be:5a:38:2e:06:50:57:54:82:e0:08:52:
                    a1:90:7d:50:e1:83:97:39:d7:4d:4c:bb:54:14:68:
                    58:ab:0d:a5:66:58:01:04:b3:fa:b0:71:f2:68:5b:
                    bf:78:db:68:1b:58:20:12:ef:ea:24:b3:bf:fb:0e:
                    7e:72:b8:29:85:ff:10:1e:93:d8:d2:cd:37:ef:4f:
                    a4:56:0b:b8:97:af:2b:31:46:f9:3c:84:6c:82:03:
                    3a:1d:f8:4f:19:ee:c4:da:e1:4c:3e:f2:d1:97:3e:
                    b3:17:5f:bd:82:eb:0c:59:55:7d:e5:b4:30:fe:7d:
                    84:4c:e3:95:e6:c6:68:b7:3f:7e:27:05:86:a3:e7:
                    0a:4c:2e:7e:7b:29:82:21:77:08:ea:96:5e:f6:8b:
                    11:ee:cc:d4:a1:b1:ac:30:ad:dd:79:29:47:05:de:
                    c9:04:a2:df:ff:3c:a6:29:4b:c1:07:18:9d:c8:67:
                    42:aa:7c:cd:8a:10:6a:fd:75:5a:91:da:0c:f6:b4:
                    fc:51:d3:21:77:49:58:10:08:34:25:fa:50:3d:1b:
                    eb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:15:8C:A5:E3:13:61:66:CE:80:16:AE:73:CA:74:E6:0D:C8:6E:AD
            X509v3 Authority Key Identifier:
                keyid:C7:D3:46:66:82:C5:16:0E:22:B6:25:48:E9:7E:21:0F:E4:A1:E3:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/x9NGZoLFFg4itiVI6X4hD-Sh44Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C629B/E09366C0847C11EE90B044464AD9E6FC/x9NGZoLFFg4itiVI6X4hD-Sh44Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:1d:4b:9a:0d:da:84:95:1e:02:24:6b:c4:3c:0a:54:7f:98:
         39:f9:a5:1f:08:5b:a9:48:7e:6d:4b:46:7a:5f:1c:8c:e2:ce:
         fe:4e:a5:e1:b9:c0:b7:4d:f1:39:88:5e:0f:43:aa:38:e8:22:
         79:b9:54:02:78:21:32:70:f7:65:7c:f6:e8:7e:bc:97:28:a4:
         98:91:fb:b8:e8:87:ce:09:6b:f4:60:5b:cc:bd:bd:f2:0f:15:
         fe:43:01:fe:26:73:65:2c:81:b4:9d:ab:30:06:fb:7b:60:f9:
         fa:d3:ed:de:ec:ad:81:1a:03:ce:c3:f0:59:ad:e3:b6:fb:22:
         c0:d8:40:a1:70:31:99:d2:fe:8d:f8:e8:a8:52:c2:24:96:0e:
         b1:76:73:cf:84:ee:08:23:82:87:78:b6:9d:b7:f9:fa:03:4e:
         6f:14:82:9b:bd:49:ef:ff:29:15:21:5c:77:c8:5f:b3:12:f9:
         b1:ff:bd:1e:05:f6:96:93:f8:c6:08:96:ee:33:3d:a1:d1:a9:
         f4:b9:1b:89:74:99:e8:a7:a9:c8:c2:96:34:97:28:d0:77:90:
         21:6d:45:b8:3b:81:2d:84:18:a5:81:82:0c:dc:e2:23:de:c7:
         ce:a1:66:9f:ea:88:12:13:8f:a4:6f:9f:af:6a:77:0c:c7:4f:
         77:02:7f:f8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBE4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzYyOUJBRjExMC8GA1UEBRMoQzdEMzQ2NjY4MkM1MTYwRTIyQjYyNTQ4RTk3RTIx
MEZFNEExRTM4NjAeFw0yNjEwMjQwMzUxMzZaFw0yNjEwMjYwMzUxMzZaMBgxFjAU
BgNVBAMTDTZhZGMyYjQ5LTQ0MmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPluhhnGzYIg9D7BL1A0Q0keU18bCTrq+oaRqaY0MK1owiCr0sN0erpTY8
cdZttL5aOC4GUFdUguAIUqGQfVDhg5c5101Mu1QUaFirDaVmWAEEs/qwcfJoW794
22gbWCAS7+oks7/7Dn5yuCmF/xAek9jSzTfvT6RWC7iXrysxRvk8hGyCAzod+E8Z
7sTa4Uw+8tGXPrMXX72C6wxZVX3ltDD+fYRM45Xmxmi3P34nBYaj5wpMLn57KYIh
dwjqll72ixHuzNShsawwrd15KUcF3skEot//PKYpS8EHGJ3IZ0KqfM2KEGr9dVqR
2gz2tPxR0yF3SVgQCDQl+lA9G+tPAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUcBWM
peMTYWbOgBauc8p05g3Ibq0wHwYDVR0jBBgwFoAUx9NGZoLFFg4itiVI6X4hD+Sh
44YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM2MjlCL0UwOTM2NkMwODQ3QzExRUU5MEIwNDQ0NjRBRDlFNkZDL3g5Tkda
b0xGRmc0aXRpVkk2WDRoRC1TaDQ0WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3g5Tkdab0xGRmc0aXRpVkk2WDRoRC1TaDQ0WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzYyOUIvRTA5MzY2QzA4NDdDMTFFRTkwQjA0NDQ2NEFE
OUU2RkMveDlOR1pvTEZGZzRpdGlWSTZYNGhELVNoNDRZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB9HUuaDdqElR4CJGvEPApUf5g5+aUf
CFupSH5tS0Z6XxyM4s7+TqXhucC3TfE5iF4PQ6o46CJ5uVQCeCEycPdlfPbofryX
KKSYkfu46IfOCWv0YFvMvb3yDxX+QwH+JnNlLIG0naswBvt7YPn60+3e7K2BGgPO
w/BZreO2+yLA2EChcDGZ0v6N+OioUsIklg6xdnPPhO4II4KHeLadt/n6A05vFIKb
vUnv/ykVIVx3yF+zEvmx/70eBfaWk/jGCJbuMz2h0an0uRuJdJnop6nIwpY0lyjQ
d5AhbUW4O4EthBilgYIM3OIj3sfOoWaf6ogSE4+kb5+vancMx093An/4
-----END CERTIFICATE-----