Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
File:                     2KoAqxWVGabWVnDenlmLc99qssE.mft (raw, json)
Hash identifier:          Magv3Xya3w96tYklA42yz4f7uCYRBf76UCu/Ki3he0k=
Subject key identifier:   CD:0A:91:4D:A7:17:C3:97:15:6A:5A:6F:63:3C:5F:AA:A1:15:8E:E7
Authority key identifier: D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1
Certificate issuer:       /CN=F36F273DAF/serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
Certificate serial:       02D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
Manifest number:          02CD
Signing time:             Sat 24 Oct 2026 04:40:10 +0000
Manifest this update:     Sat 24 Oct 2026 04:40:09 +0000
Manifest next update:     Mon 26 Oct 2026 04:40:09 +0000
Files and hashes:         1: 2KoAqxWVGabWVnDenlmLc99qssE.crl (hash: 6sbY8mvUZ66WotbHlajeUAnRKSn+sLdCLmGASpphbPg=)
                          2: 8612CEC8A8A911EFB887DDA0762E951A.roa (hash: GTU21iNyjdIeL6dIGxKDjmWXXd/5ZvujPdaZWrQ4o/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 720 (0x2d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F273DAF, serialNumber=D8AA00AB159519A6D65670DE9E598B73DF6AB2C1
        Validity
            Not Before: Oct 24 04:40:09 2026 GMT
            Not After : Oct 26 04:40:09 2026 GMT
        Subject: CN=6adc36a9-b989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e8:72:c3:f9:bf:25:bb:7b:31:da:62:78:10:
                    a8:5c:54:bf:2b:22:ec:c7:23:35:1b:f4:14:15:52:
                    84:cb:f7:a3:3a:2f:27:8d:99:56:29:f5:61:19:ad:
                    b9:2c:55:27:6e:a5:85:56:d8:7d:75:f5:0c:d7:84:
                    6b:b7:87:83:8e:a8:ec:69:9b:cb:5b:5a:c9:6b:7b:
                    40:fa:0a:3e:90:a2:f9:c9:ca:6d:97:f2:22:62:20:
                    48:dd:c2:6a:c7:a2:02:e6:d8:e8:6e:f1:a6:de:86:
                    cf:7b:fd:73:ac:0f:b3:6e:08:0b:5f:61:79:aa:02:
                    83:6a:53:53:b5:d5:e5:83:a7:ea:08:d7:d4:6e:d2:
                    d8:06:f1:40:06:a1:7b:01:51:e2:f6:b5:70:25:ac:
                    d5:74:45:12:55:cd:34:07:86:17:c5:5a:eb:ff:a5:
                    79:d1:00:09:73:b9:74:36:48:7f:2e:97:2e:50:b1:
                    2d:3c:f6:5d:85:2a:fc:73:72:7c:ce:ce:7d:75:7d:
                    bb:89:7c:49:1c:25:57:03:0f:af:77:9e:75:00:c3:
                    b9:08:c1:e5:77:e2:ec:07:c7:31:dd:1b:dd:ac:76:
                    43:8e:bd:66:9d:88:04:56:30:92:14:9a:fd:af:ec:
                    e6:be:5a:9e:78:1e:4a:d0:9d:03:71:84:51:24:8a:
                    7c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:0A:91:4D:A7:17:C3:97:15:6A:5A:6F:63:3C:5F:AA:A1:15:8E:E7
            X509v3 Authority Key Identifier:
                keyid:D8:AA:00:AB:15:95:19:A6:D6:56:70:DE:9E:59:8B:73:DF:6A:B2:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/2KoAqxWVGabWVnDenlmLc99qssE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F273D/3E265EFEA8A911EFA5E2C2A0762E951A/2KoAqxWVGabWVnDenlmLc99qssE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:90:e3:ae:96:ac:42:c9:c1:76:69:c4:50:ed:2f:96:c0:7e:
         e2:17:6f:9a:b3:67:14:d3:3b:1a:46:16:2b:94:3d:e0:9f:6a:
         90:85:b6:fd:26:af:c9:58:2e:51:e9:c2:18:f0:2f:25:04:06:
         1b:16:4c:86:8a:e7:e0:04:e4:e6:8a:71:55:74:6d:e1:3c:2a:
         19:55:2d:18:2e:eb:c1:77:01:4e:b8:bf:92:ed:14:1c:ce:0d:
         8a:76:2b:95:dc:74:d3:3f:d5:7c:58:78:e4:cb:02:9e:a8:05:
         39:e0:e6:5e:62:e3:ab:c1:1f:63:06:45:dc:b9:1d:99:f8:80:
         c5:f4:7c:a1:34:4a:28:7e:6d:26:84:95:45:df:c9:8a:a2:dc:
         b5:9d:bb:93:5b:7e:6a:fe:b5:df:ab:d3:0e:8a:85:32:c1:50:
         f7:2e:18:f6:e5:71:3a:bf:b3:00:48:95:00:f7:af:81:31:07:
         f7:80:4e:35:d4:2b:0b:ef:3a:87:95:eb:88:e2:e7:9b:67:67:
         57:7a:f1:98:0e:c7:c5:aa:06:6b:6b:da:ec:d7:48:98:a7:b3:
         f2:97:eb:86:81:1d:44:ea:02:a4:4c:40:77:10:7e:a7:8f:a3:
         14:db:e6:89:ec:f5:89:56:0f:d8:91:9c:ec:12:54:56:fd:35:
         b8:ba:bf:96
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAtAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RjI3M0RBRjExMC8GA1UEBRMoRDhBQTAwQUIxNTk1MTlBNkQ2NTY3MERFOUU1OThC
NzNERjZBQjJDMTAeFw0yNjEwMjQwNDQwMDlaFw0yNjEwMjYwNDQwMDlaMBgxFjAU
BgNVBAMTDTZhZGMzNmE5LWI5ODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD46HLD+b8lu3sx2mJ4EKhcVL8rIuzHIzUb9BQVUoTL96M6LyeNmVYp9WEZ
rbksVSdupYVW2H119QzXhGu3h4OOqOxpm8tbWslre0D6Cj6QovnJym2X8iJiIEjd
wmrHogLm2Ohu8abehs97/XOsD7NuCAtfYXmqAoNqU1O11eWDp+oI19Ru0tgG8UAG
oXsBUeL2tXAlrNV0RRJVzTQHhhfFWuv/pXnRAAlzuXQ2SH8uly5QsS089l2FKvxz
cnzOzn11fbuJfEkcJVcDD693nnUAw7kIweV34uwHxzHdG92sdkOOvWadiARWMJIU
mv2v7Oa+Wp54HkrQnQNxhFEkinzFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUzQqR
TacXw5cValpvYzxfqqEVjucwHwYDVR0jBBgwFoAU2KoAqxWVGabWVnDenlmLc99q
ssEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkYyNzNELzNFMjY1RUZFQThBOTExRUZBNUUyQzJBMDc2MkU5NTFBLzJLb0Fx
eFdWR2FiV1ZuRGVubG1MYzk5cXNzRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzJLb0FxeFdWR2FiV1ZuRGVubG1MYzk5cXNzRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RjI3M0QvM0UyNjVFRkVBOEE5MTFFRkE1RTJDMkEwNzYy
RTk1MUEvMktvQXF4V1ZHYWJXVm5EZW5sbUxjOTlxc3NFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNkOOulqxCycF2acRQ7S+WwH7iF2+a
s2cU0zsaRhYrlD3gn2qQhbb9Jq/JWC5R6cIY8C8lBAYbFkyGiufgBOTminFVdG3h
PCoZVS0YLuvBdwFOuL+S7RQczg2KdiuV3HTTP9V8WHjkywKeqAU54OZeYuOrwR9j
BkXcuR2Z+IDF9HyhNEoofm0mhJVF38mKoty1nbuTW35q/rXfq9MOioUywVD3Lhj2
5XE6v7MASJUA96+BMQf3gE411CsL7zqHleuI4uebZ2dXevGYDsfFqgZra9rs10iY
p7Pyl+uGgR1E6gKkTEB3EH6nj6MU2+aJ7PWJVg/YkZzsElRW/TW4ur+W
-----END CERTIFICATE-----