Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
File:                     SfsOFqhdQF1bnyOWCmkJwdfBW38.mft (raw, json)
Hash identifier:          pwW2nvqETfYCxubCwiFGItLT2xC+jlPQRPSrv3L+Zns=
Subject key identifier:   80:33:36:4B:ED:26:0F:30:61:B8:93:36:FB:46:BD:DE:03:E4:F3:19
Authority key identifier: 49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F
Certificate issuer:       /CN=F36D987FAR/serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
Certificate serial:       69
Authority info access:    rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
Manifest number:          68
Signing time:             Fri 30 Oct 2026 05:44:35 +0000
Manifest this update:     Fri 30 Oct 2026 05:44:35 +0000
Manifest next update:     Sun 01 Nov 2026 05:44:35 +0000
Files and hashes:         1: SfsOFqhdQF1bnyOWCmkJwdfBW38.crl (hash: nPX3ZGjTw4KCayQ1GY6TP6KiMAYX2iMx5nIehSZYsEk=)
                          2: 423092FE844811F190DB7106CF1D38B0.roa (hash: rbEzzy1Z6bVrpIUjaoY1g/gq6tM0MnrHv81mcm8Ps6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
                          rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 01 Nov 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D987FAR, serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
        Validity
            Not Before: Oct 30 05:44:35 2026 GMT
            Not After : Nov  1 05:44:35 2026 GMT
        Subject: CN=6ae42ec3-219e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f2:a3:35:c2:d7:82:cb:65:39:6f:83:1a:d1:
                    0d:c3:5d:c2:30:ff:4c:15:9f:92:47:95:ca:92:11:
                    83:c1:f1:4d:aa:93:da:9e:6c:f1:9a:a2:22:d2:75:
                    d8:f9:36:3a:f6:d9:c1:1d:85:bb:49:34:b7:8b:a7:
                    41:a0:4d:b2:c3:bc:aa:c1:ad:12:36:a1:b7:48:38:
                    4a:3f:7e:e7:0c:d9:ea:5a:62:55:b0:f2:80:58:a8:
                    9e:c8:c9:14:1a:10:1d:19:81:1a:7b:0b:dc:fa:5c:
                    d6:6e:9e:a3:b2:fb:fb:16:9a:75:2a:7e:11:6e:ed:
                    67:e4:1b:17:06:5c:4d:2d:5f:dd:ce:ec:98:21:61:
                    c9:0f:c4:7f:dd:4f:40:a4:a0:06:57:c3:94:fb:52:
                    80:c2:e4:27:70:22:65:5f:fb:67:e2:54:5a:b5:d9:
                    dd:f6:5f:d4:39:0e:51:35:8d:d5:35:64:ba:4a:7d:
                    48:1c:64:74:76:1e:cd:69:81:60:e9:53:1f:d1:db:
                    ad:1a:7f:4f:6a:98:f2:c5:27:2d:3a:dc:25:ab:e0:
                    4c:46:5e:a7:c3:c9:c0:42:8c:c9:54:51:89:72:53:
                    1f:35:1c:3a:62:ad:6b:34:7b:6c:91:c3:4f:01:dc:
                    03:c4:8a:04:90:aa:c6:13:73:0e:98:a1:6f:be:05:
                    8c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:33:36:4B:ED:26:0F:30:61:B8:93:36:FB:46:BD:DE:03:E4:F3:19
            X509v3 Authority Key Identifier:
                keyid:49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:f3:1d:ae:0d:34:dd:77:11:98:a7:d0:88:25:31:72:fc:ac:
         70:37:1f:a9:f0:2d:64:48:56:cb:da:a1:05:21:c1:46:81:09:
         27:5c:9f:a3:9f:f7:70:5e:bd:ac:c9:2c:33:60:ad:97:00:a9:
         a5:34:36:e0:62:81:fc:9d:ca:e9:6e:ac:a8:29:d1:9b:85:56:
         50:ba:08:74:b0:78:f3:da:5d:89:ce:43:31:45:22:37:e0:15:
         f1:08:98:1f:27:70:85:74:97:01:f9:40:23:67:0e:46:f3:55:
         44:44:e6:a5:fe:0b:3d:2d:7c:bc:2b:a1:17:4f:b0:9e:4e:b1:
         ca:08:1f:ad:f9:b4:0d:8c:8f:c0:db:1d:52:40:ea:9a:61:c6:
         07:e4:a4:d5:eb:f0:98:5c:de:1a:e4:80:c2:ae:ed:a7:c6:17:
         91:b6:f4:43:99:19:74:a1:0a:fc:19:b2:2c:b0:2f:c7:0f:d9:
         26:b3:79:1a:d5:00:ae:cc:8e:5b:6b:40:0f:3b:af:fa:e2:65:
         9a:90:37:05:87:bf:0a:eb:5d:a6:8a:2a:9c:97:45:ef:17:23:
         bf:10:98:b0:18:e8:6a:fe:1d:ba:ac:98:b3:47:eb:2f:19:78:
         d8:93:80:d8:c1:f3:c5:2e:7a:4f:ee:1a:da:71:5e:99:04:6b:
         72:ed:23:2f
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBaTANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
OTg3RkFSMTEwLwYDVQQFEyg0OUZCMEUxNkE4NUQ0MDVENUI5RjIzOTYwQTY5MDlD
MUQ3QzE1QjdGMB4XDTI2MTAzMDA1NDQzNVoXDTI2MTEwMTA1NDQzNVowGDEWMBQG
A1UEAxMNNmFlNDJlYzMtMjE5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL7yozXC14LLZTlvgxrRDcNdwjD/TBWfkkeVypIRg8HxTaqT2p5s8ZqiItJ1
2Pk2OvbZwR2Fu0k0t4unQaBNssO8qsGtEjaht0g4Sj9+5wzZ6lpiVbDygFionsjJ
FBoQHRmBGnsL3Ppc1m6eo7L7+xaadSp+EW7tZ+QbFwZcTS1f3c7smCFhyQ/Ef91P
QKSgBlfDlPtSgMLkJ3AiZV/7Z+JUWrXZ3fZf1DkOUTWN1TVkukp9SBxkdHYezWmB
YOlTH9HbrRp/T2qY8sUnLTrcJavgTEZep8PJwEKMyVRRiXJTHzUcOmKtazR7bJHD
TwHcA8SKBJCqxhNzDpihb74FjBcCAwEAAaOCArUwggKxMB0GA1UdDgQWBBSAMzZL
7SYPMGG4kzb7Rr3eA+TzGTAfBgNVHSMEGDAWgBRJ+w4WqF1AXVufI5YKaQnB18Fb
fzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDk4N0YvMjU3N0ZENDI4NDQyMTFGMUI5NEM3MUU1Q0UxRDM4QjAvU2ZzT0Zx
aGRRRjFibnlPV0Nta0p3ZGZCVzM4LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
U2ZzT0ZxaGRRRjFibnlPV0Nta0p3ZGZCVzM4LmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZEOTg3Ri8yNTc3RkQ0Mjg0NDIxMUYxQjk0QzcxRTVDRTFEMzhC
MC9TZnNPRnFoZFFGMWJueU9XQ21rSndkZkJXMzgubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAK/zHa4NNN13EZin0IglMXL8rHA3H6nwLWRI
VsvaoQUhwUaBCSdcn6Of93BevazJLDNgrZcAqaU0NuBigfydyulurKgp0ZuFVlC6
CHSwePPaXYnOQzFFIjfgFfEImB8ncIV0lwH5QCNnDkbzVURE5qX+Cz0tfLwroRdP
sJ5OscoIH635tA2Mj8DbHVJA6pphxgfkpNXr8Jhc3hrkgMKu7afGF5G29EOZGXSh
CvwZsiywL8cP2SazeRrVAK7MjltrQA87r/riZZqQNwWHvwrrXaaKKpyXRe8XI78Q
mLAY6Gr+HbqsmLNH6y8ZeNiTgNjB88Uuek/uGtpxXpkEa3LtIy8=
-----END CERTIFICATE-----