Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.mft
File:                     EHQgJlqGxb5IELWX5NT_zS4PF5A.mft (raw, json)
Hash identifier:          PKw1KgnqdJcmP0f4IF6ToXrCE78eN7dTZB+2FXEAt6s=
Subject key identifier:   31:19:D1:A2:2A:86:A3:44:5D:69:9E:42:C7:C9:A8:03:64:75:B6:8A
Authority key identifier: 10:74:20:26:5A:86:C5:BE:48:10:B5:97:E4:D4:FF:CD:2E:0F:17:90
Certificate issuer:       /CN=F36FDD86AF/serialNumber=107420265A86C5BE4810B597E4D4FFCD2E0F1790
Certificate serial:       025F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.mft
Manifest number:          025A
Signing time:             Sun 25 Oct 2026 04:50:03 +0000
Manifest this update:     Sun 25 Oct 2026 04:50:02 +0000
Manifest next update:     Tue 27 Oct 2026 04:50:02 +0000
Files and hashes:         1: EHQgJlqGxb5IELWX5NT_zS4PF5A.crl (hash: w2PcPvnjiEpJX1PAqf2iG2y33oDvdbCBKG+/6mfennU=)
                          2: 10A0595805BF11F08B582351762E951A.roa (hash: LQJrOYXWlKMFH/S9MJpDgdbBKn/U/CutzSAB+yVYU8I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.mft
                          rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 27 Oct 2026 04:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FDD86AF, serialNumber=107420265A86C5BE4810B597E4D4FFCD2E0F1790
        Validity
            Not Before: Oct 25 04:50:02 2026 GMT
            Not After : Oct 27 04:50:02 2026 GMT
        Subject: CN=6add8a7b-7c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ae:fc:42:25:ca:4f:f9:ac:3c:41:d3:b0:3e:
                    fc:6e:31:51:2f:38:c8:f8:7a:ad:13:d2:ee:1b:44:
                    27:29:9c:67:c3:04:7d:60:85:ae:30:c5:4e:b4:ab:
                    12:55:9e:bc:76:35:1c:f4:6e:0e:7b:5c:72:29:df:
                    00:1e:d9:70:20:32:f3:55:1e:8c:33:67:ef:6e:04:
                    9f:c3:05:c4:22:0e:d4:42:9d:6c:56:ba:ee:fa:36:
                    51:9d:e1:cd:d3:67:d5:e0:78:47:93:c2:7a:1c:04:
                    97:cf:ef:94:d0:e1:60:28:12:5e:32:63:14:d4:49:
                    f8:87:e0:fb:49:9f:e1:4c:dc:07:b1:36:f5:29:c3:
                    16:0b:bc:2f:57:19:1d:77:89:73:6e:ad:3b:f8:fa:
                    a5:cd:25:bc:ff:a1:bb:a4:1a:41:4a:7b:6f:14:d9:
                    10:c1:9b:46:27:62:40:d7:6f:66:0f:81:d9:1d:99:
                    bd:b3:94:93:ed:95:1e:9d:6c:2a:e4:73:ae:c8:2c:
                    bd:93:08:ba:58:35:06:8f:1c:4e:bb:ee:b8:b6:b8:
                    50:0f:7b:8e:a0:5e:47:9e:f9:44:54:32:69:ec:21:
                    f3:6d:a2:25:47:46:ac:b2:b3:e5:01:20:c4:92:68:
                    6b:bf:a1:98:7b:a3:fb:fc:5d:a2:a7:a9:03:f7:7c:
                    20:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:19:D1:A2:2A:86:A3:44:5D:69:9E:42:C7:C9:A8:03:64:75:B6:8A
            X509v3 Authority Key Identifier:
                keyid:10:74:20:26:5A:86:C5:BE:48:10:B5:97:E4:D4:FF:CD:2E:0F:17:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/EHQgJlqGxb5IELWX5NT_zS4PF5A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FDD86/34A8FAE8033B11F0AFF6DEB3762E951A/EHQgJlqGxb5IELWX5NT_zS4PF5A.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a0:cd:e3:b8:c1:79:14:85:73:24:89:da:cb:9d:3b:ed:c7:
         84:bc:ae:73:ea:12:1e:1d:eb:a5:89:21:3e:5c:0d:ae:d6:ce:
         0b:87:d8:22:39:ea:63:4e:c6:f7:81:ec:90:96:77:44:0b:ca:
         9a:df:ad:4b:56:fa:9e:7c:3c:96:33:0d:98:e5:ad:aa:4d:78:
         2f:0f:61:28:15:23:fd:a6:c4:e8:f3:5c:f7:2e:f2:12:18:42:
         20:01:4a:ef:85:b9:1b:04:db:b0:3d:25:d2:4a:e0:5d:4f:c8:
         81:a7:57:d0:4e:aa:a2:ba:93:f7:64:40:f5:3c:20:4b:ab:95:
         c8:cf:1a:c6:e6:fd:19:14:ac:52:cf:a7:95:77:75:8d:0f:28:
         a5:a2:e4:44:a4:11:59:17:c0:18:6c:45:6a:79:e4:92:db:9b:
         2e:3d:b2:1a:90:71:5d:94:74:f3:da:3e:2b:2a:a0:fa:6f:32:
         7c:82:10:22:58:83:39:02:87:1b:b2:6b:b8:6c:b7:a3:a4:64:
         77:69:ff:32:c7:e9:b6:19:fe:49:49:a6:81:5f:70:2b:83:60:
         96:70:b4:04:39:c2:fe:09:e2:27:e7:73:70:12:9a:39:83:b4:
         09:65:85:e0:90:93:b7:aa:41:0d:37:bf:f0:28:f7:f6:ed:16:
         e9:46:36:2f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkREODZBRjExMC8GA1UEBRMoMTA3NDIwMjY1QTg2QzVCRTQ4MTBCNTk3RTRENEZG
Q0QyRTBGMTc5MDAeFw0yNjEwMjUwNDUwMDJaFw0yNjEwMjcwNDUwMDJaMBgxFjAU
BgNVBAMTDTZhZGQ4YTdiLTdjODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfrvxCJcpP+aw8QdOwPvxuMVEvOMj4eq0T0u4bRCcpnGfDBH1gha4wxU60
qxJVnrx2NRz0bg57XHIp3wAe2XAgMvNVHowzZ+9uBJ/DBcQiDtRCnWxWuu76NlGd
4c3TZ9XgeEeTwnocBJfP75TQ4WAoEl4yYxTUSfiH4PtJn+FM3AexNvUpwxYLvC9X
GR13iXNurTv4+qXNJbz/obukGkFKe28U2RDBm0YnYkDXb2YPgdkdmb2zlJPtlR6d
bCrkc67ILL2TCLpYNQaPHE677ri2uFAPe46gXkee+URUMmnsIfNtoiVHRqyys+UB
IMSSaGu/oZh7o/v8XaKnqQP3fCAdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMRnR
oiqGo0RdaZ5Cx8moA2R1toowHwYDVR0jBBgwFoAUEHQgJlqGxb5IELWX5NT/zS4P
F5AwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZERDg2LzM0QThGQUU4MDMzQjExRjBBRkY2REVCMzc2MkU5NTFBL0VIUWdK
bHFHeGI1SUVMV1g1TlRfelM0UEY1QS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0VIUWdKbHFHeGI1SUVMV1g1TlRfelM0UEY1QS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkREODYvMzRBOEZBRTgwMzNCMTFGMEFGRjZERUIzNzYy
RTk1MUEvRUhRZ0pscUd4YjVJRUxXWDVOVF96UzRQRjVBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAsoM3juMF5FIVzJInay5077ceEvK5z
6hIeHeuliSE+XA2u1s4Lh9giOepjTsb3geyQlndEC8qa361LVvqefDyWMw2Y5a2q
TXgvD2EoFSP9psTo81z3LvISGEIgAUrvhbkbBNuwPSXSSuBdT8iBp1fQTqqiupP3
ZED1PCBLq5XIzxrG5v0ZFKxSz6eVd3WNDyilouREpBFZF8AYbEVqeeSS25suPbIa
kHFdlHTz2j4rKqD6bzJ8ghAiWIM5Aocbsmu4bLejpGR3af8yx+m2Gf5JSaaBX3Ar
g2CWcLQEOcL+CeIn53NwEpo5g7QJZYXgkJO3qkENN7/wKPf27RbpRjYv
-----END CERTIFICATE-----