Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
File:                     QS0Z-aThegTQm63JAqsLCQgk6tc.mft (raw, json)
Hash identifier:          iy5Qa10GJuSdtcdUQOMq/rcGD8e5DmQZOXwRkeNh5K0=
Subject key identifier:   56:66:DA:F1:01:49:BA:68:11:90:FF:50:CA:CA:27:6E:F1:58:2B:55
Authority key identifier: 41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7
Certificate issuer:       /CN=F36FFD1EAF/serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
Certificate serial:       105D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
Manifest number:          105B
Signing time:             Sat 24 Oct 2026 00:52:59 +0000
Manifest this update:     Sat 24 Oct 2026 00:52:58 +0000
Manifest next update:     Mon 26 Oct 2026 00:52:58 +0000
Files and hashes:         1: QS0Z-aThegTQm63JAqsLCQgk6tc.crl (hash: Yujh/8kv56EftF+P6XKXkdHxgJao4NxJ0qclPHjxtAM=)
                          2: 353655B83FCC11F1922821BFCE1D38B0.roa (hash: IRSZKYkm7LcuUToOhHCRKBS+q6X69O13ur9lhLNv9xs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4189 (0x105d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FFD1EAF, serialNumber=412D19F9A4E17A04D09BADC902AB0B090824EAD7
        Validity
            Not Before: Oct 24 00:52:58 2026 GMT
            Not After : Oct 26 00:52:58 2026 GMT
        Subject: CN=6adc016b-cd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:04:94:d7:cc:ed:82:7d:fb:1a:b0:36:89:1f:
                    0a:28:83:a0:d8:cf:03:8c:d0:d6:ae:85:12:cb:68:
                    91:29:69:17:26:18:c1:10:aa:43:fb:09:6d:7b:6f:
                    d8:e8:5a:34:eb:99:62:75:a1:7d:d7:db:58:7f:06:
                    83:24:26:a3:bf:9c:35:80:90:62:d9:e9:31:0e:cb:
                    0b:71:99:23:a6:45:41:a3:2b:d0:05:1d:b0:fa:99:
                    b5:35:77:ad:d1:d5:96:f2:f2:90:f3:ee:3c:01:cb:
                    91:b9:98:ff:47:90:bb:f1:d3:48:51:f0:bb:10:59:
                    5e:f7:13:61:9f:c6:e1:0a:bd:1a:73:ae:0a:3c:01:
                    8d:ca:d7:bf:03:50:54:1a:6a:fc:f2:a4:cb:d7:6e:
                    7d:64:5e:4f:26:c8:49:aa:13:a8:7a:bd:94:1a:6a:
                    90:f0:c0:64:dc:28:ce:23:db:22:ea:98:b6:a8:05:
                    68:cf:91:bc:a8:c6:91:7e:ae:86:b0:c1:20:0a:86:
                    50:f5:96:36:30:00:a4:32:2b:72:93:10:e6:f1:48:
                    12:2d:d0:1a:3f:6b:0c:5d:2e:9e:e1:9a:76:10:f2:
                    5b:bd:e2:1b:d4:bc:73:ab:ce:58:57:29:9f:8a:3d:
                    3b:0c:25:bf:c1:06:9f:c7:2e:f0:e3:44:2d:2a:61:
                    a2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:66:DA:F1:01:49:BA:68:11:90:FF:50:CA:CA:27:6E:F1:58:2B:55
            X509v3 Authority Key Identifier:
                keyid:41:2D:19:F9:A4:E1:7A:04:D0:9B:AD:C9:02:AB:0B:09:08:24:EA:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QS0Z-aThegTQm63JAqsLCQgk6tc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FFD1E/1AAE260C316511E5AE666067F8AEA228/QS0Z-aThegTQm63JAqsLCQgk6tc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:bb:05:fc:d9:03:a9:cf:f7:2e:f7:e7:a7:51:92:fc:59:98:
         4e:62:fb:57:4e:74:a7:e9:05:24:e7:37:27:0e:1b:36:f2:2c:
         61:c0:b4:f8:3b:d1:b3:41:28:87:e1:a7:4c:50:e8:5a:b6:b2:
         99:40:dd:62:ed:17:14:af:ef:4d:6e:19:a7:92:08:4a:96:9b:
         c8:0a:f9:8d:eb:75:3e:17:1e:0f:ee:36:66:dd:47:74:72:ea:
         e1:54:a9:8d:0e:3f:fc:bf:3e:23:a0:47:99:cf:4a:0a:ac:fe:
         a1:d5:75:26:f0:f5:28:66:49:51:a1:f5:2a:41:92:1a:94:91:
         81:7b:22:b1:3f:3b:4e:5f:36:b8:5b:e7:5e:46:f9:ca:a9:a2:
         d1:9e:b3:8b:c9:cd:b5:87:b3:16:e9:fd:10:4b:2c:cc:9a:a3:
         73:6d:8d:d7:15:c3:96:0b:38:6c:fe:38:a8:ca:98:d3:22:c7:
         9f:92:3d:b0:d7:18:fd:e2:96:55:e8:25:e2:48:03:dc:f4:da:
         58:9b:09:a6:c7:d9:5c:57:8d:c9:f8:b7:39:70:16:73:cc:15:
         d5:27:b6:21:74:6d:90:d8:fb:2b:8c:09:92:e6:00:4f:7b:73:
         8a:90:4e:1a:b1:f6:80:79:5f:96:91:a9:de:6a:66:fd:26:43:
         c9:ce:ca:e1
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICEF0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkZEMUVBRjExMC8GA1UEBRMoNDEyRDE5RjlBNEUxN0EwNEQwOUJBREM5MDJBQjBC
MDkwODI0RUFENzAeFw0yNjEwMjQwMDUyNThaFw0yNjEwMjYwMDUyNThaMBgxFjAU
BgNVBAMTDTZhZGMwMTZiLWNkM2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbBJTXzO2CffsasDaJHwoog6DYzwOM0NauhRLLaJEpaRcmGMEQqkP7CW17
b9joWjTrmWJ1oX3X21h/BoMkJqO/nDWAkGLZ6TEOywtxmSOmRUGjK9AFHbD6mbU1
d63R1Zby8pDz7jwBy5G5mP9HkLvx00hR8LsQWV73E2GfxuEKvRpzrgo8AY3K178D
UFQaavzypMvXbn1kXk8myEmqE6h6vZQaapDwwGTcKM4j2yLqmLaoBWjPkbyoxpF+
roawwSAKhlD1ljYwAKQyK3KTEObxSBIt0Bo/awxdLp7hmnYQ8lu94hvUvHOrzlhX
KZ+KPTsMJb/BBp/HLvDjRC0qYaIjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUVmba
8QFJumgRkP9QysonbvFYK1UwHwYDVR0jBBgwFoAUQS0Z+aThegTQm63JAqsLCQgk
6tcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZGRDFFLzFBQUUyNjBDMzE2NTExRTVBRTY2NjA2N0Y4QUVBMjI4L1FTMFot
YVRoZWdUUW02M0pBcXNMQ1FnazZ0Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FTMFotYVRoZWdUUW02M0pBcXNMQ1FnazZ0Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkZEMUUvMUFBRTI2MEMzMTY1MTFFNUFFNjY2MDY3RjhB
RUEyMjgvUVMwWi1hVGhlZ1RRbTYzSkFxc0xDUWdrNnRjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBxuwX82QOpz/cu9+enUZL8WZhOYvtX
TnSn6QUk5zcnDhs28ixhwLT4O9GzQSiH4adMUOhatrKZQN1i7RcUr+9NbhmnkghK
lpvICvmN63U+Fx4P7jZm3Ud0curhVKmNDj/8vz4joEeZz0oKrP6h1XUm8PUoZklR
ofUqQZIalJGBeyKxPztOXza4W+deRvnKqaLRnrOLyc21h7MW6f0QSyzMmqNzbY3X
FcOWCzhs/jioypjTIsefkj2w1xj94pZV6CXiSAPc9NpYmwmmx9lcV43J+Lc5cBZz
zBXVJ7YhdG2Q2PsrjAmS5gBPe3OKkE4asfaAeV+Wkaneamb9JkPJzsrh
-----END CERTIFICATE-----