Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
File:                     ZlRSFtT_yAOJ2hnLMhrgeor169w.mft (raw, json)
Hash identifier:          ENul0eR+XTyNplIgY4bIpzZjgeHO9NROf/X3z/2mOLA=
Subject key identifier:   2D:CD:65:88:C9:29:36:26:53:56:8A:22:92:FF:3B:81:60:FA:77:F7
Authority key identifier: 66:54:52:16:D4:FF:C8:03:89:DA:19:CB:32:1A:E0:7A:8A:F5:EB:DC
Certificate issuer:       /CN=F3610D4EAF/serialNumber=66545216D4FFC80389DA19CB321AE07A8AF5EBDC
Certificate serial:       23
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZlRSFtT_yAOJ2hnLMhrgeor169w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
Manifest number:          23
Signing time:             Sat 26 Sep 2026 05:51:56 +0000
Manifest this update:     Sat 26 Sep 2026 05:51:55 +0000
Manifest next update:     Mon 28 Sep 2026 05:51:55 +0000
Files and hashes:         1: ZlRSFtT_yAOJ2hnLMhrgeor169w.crl (hash: a1PGXG3QyTnKMZ77q9WpVlErIhjKVMTOGRJvrgCC+0g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZlRSFtT_yAOJ2hnLMhrgeor169w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610D4EAF, serialNumber=66545216D4FFC80389DA19CB321AE07A8AF5EBDC
        Validity
            Not Before: Sep 26 05:51:55 2026 GMT
            Not After : Sep 28 05:51:55 2026 GMT
        Subject: CN=6ab75d7c-b9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1f:63:15:95:65:12:5f:d3:22:6f:e6:1b:81:
                    94:cb:1a:f5:0d:e4:3a:d9:4e:19:f7:49:95:9a:27:
                    ec:8a:10:eb:a6:a9:09:c5:01:ab:92:5c:c9:3c:3c:
                    27:d9:70:e7:9f:a8:3a:da:1e:7c:d7:bf:0c:46:54:
                    b2:42:f8:5a:31:07:9d:86:75:8b:86:19:57:3e:23:
                    f5:43:f4:70:90:03:2d:a0:84:e3:37:2d:ef:a9:b3:
                    72:3b:04:ce:a7:eb:bb:b6:7d:30:76:18:84:19:ac:
                    fc:1e:e8:0f:84:fa:41:8c:60:6c:92:28:ca:39:dd:
                    03:22:87:c5:ae:ec:bf:7f:a4:a8:68:d2:3e:ab:e6:
                    a6:4d:20:52:02:0d:78:9a:1c:47:9d:19:b5:fc:62:
                    5a:6c:a7:4f:2a:fc:1e:d8:47:1f:60:8d:54:ac:e4:
                    c1:08:cf:38:6b:7d:b1:6b:c9:51:03:b3:5c:cf:6d:
                    67:d4:a1:53:d4:15:4f:d3:d3:6b:6a:a6:0c:8d:4e:
                    d9:c5:03:79:7e:1d:ac:1e:12:01:ff:7c:a0:3e:42:
                    9d:ad:d8:ac:ef:a4:ae:1e:35:6f:66:87:ff:95:b6:
                    b9:89:58:73:bf:cb:5a:51:db:6e:09:89:26:af:f0:
                    e4:0e:cd:03:3d:40:29:5d:a1:47:2d:ff:38:9a:7d:
                    7f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:CD:65:88:C9:29:36:26:53:56:8A:22:92:FF:3B:81:60:FA:77:F7
            X509v3 Authority Key Identifier:
                keyid:66:54:52:16:D4:FF:C8:03:89:DA:19:CB:32:1A:E0:7A:8A:F5:EB:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZlRSFtT_yAOJ2hnLMhrgeor169w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610D4E/0B6C4BAE9FA611F19E2EF71DCF1D38B0/ZlRSFtT_yAOJ2hnLMhrgeor169w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:f4:71:72:bd:97:83:87:07:d8:2c:a6:8a:ae:58:40:b8:3f:
         6f:6d:0f:c6:e6:1c:75:24:a4:ba:6b:13:33:1e:3d:5d:ab:80:
         35:4f:b1:b1:b7:60:f6:6d:fa:44:33:10:45:a2:f5:0c:03:4a:
         c9:c6:cd:5c:54:64:62:61:bd:70:d4:00:d7:35:b6:19:53:b1:
         f0:c6:05:1a:b5:73:2b:97:35:bc:3c:bd:a7:b4:ba:84:7e:31:
         6b:07:17:d1:0c:29:d0:05:c6:67:e6:f2:01:3a:ae:9d:96:f3:
         b2:e8:e0:51:85:1c:96:1e:ae:43:39:d6:a5:65:a7:64:c1:9f:
         5c:75:d2:92:f4:42:73:28:07:3a:f9:f7:21:6d:60:01:64:6a:
         4b:29:b3:66:17:1b:ac:48:f4:29:10:f2:59:09:dd:fa:c6:09:
         d8:cd:d2:30:a6:b3:0d:ff:f5:1c:16:94:e3:79:5c:a2:f8:43:
         35:3b:4a:e7:1b:70:13:72:33:41:ec:b1:cd:e9:ff:9a:f3:cf:
         17:49:49:df:64:5f:fa:20:04:3a:70:75:c2:5d:fc:0d:3d:7a:
         dd:28:47:52:8c:87:a1:9b:aa:d7:8e:75:59:87:bd:9f:38:83:
         a6:bf:4c:d2:93:b4:59:1f:ce:16:e4:b1:e5:73:76:10:02:cd:
         fe:34:63:f7
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBIzANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYx
MEQ0RUFGMTEwLwYDVQQFEyg2NjU0NTIxNkQ0RkZDODAzODlEQTE5Q0IzMjFBRTA3
QThBRjVFQkRDMB4XDTI2MDkyNjA1NTE1NVoXDTI2MDkyODA1NTE1NVowGDEWMBQG
A1UEAxMNNmFiNzVkN2MtYjljMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKkfYxWVZRJf0yJv5huBlMsa9Q3kOtlOGfdJlZon7IoQ66apCcUBq5JcyTw8
J9lw55+oOtoefNe/DEZUskL4WjEHnYZ1i4YZVz4j9UP0cJADLaCE4zct76mzcjsE
zqfru7Z9MHYYhBms/B7oD4T6QYxgbJIoyjndAyKHxa7sv3+kqGjSPqvmpk0gUgIN
eJocR50ZtfxiWmynTyr8HthHH2CNVKzkwQjPOGt9sWvJUQOzXM9tZ9ShU9QVT9PT
a2qmDI1O2cUDeX4drB4SAf98oD5Cna3YrO+krh41b2aH/5W2uYlYc7/LWlHbbgmJ
Jq/w5A7NAz1AKV2hRy3/OJp9fysCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQtzWWI
ySk2JlNWiiKS/zuBYPp39zAfBgNVHSMEGDAWgBRmVFIW1P/IA4naGcsyGuB6ivXr
3DAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2MTBENEUvMEI2QzRCQUU5RkE2MTFGMTlFMkVGNzFEQ0YxRDM4QjAvWmxSU0Z0
VF95QU9KMmhuTE1ocmdlb3IxNjl3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvWmxSU0Z0VF95QU9KMmhuTE1ocmdlb3IxNjl3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYxMEQ0RS8wQjZDNEJBRTlGQTYxMUYxOUUyRUY3MURDRjFE
MzhCMC9abFJTRnRUX3lBT0oyaG5MTWhyZ2VvcjE2OXcubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIT0cXK9l4OHB9gspoquWEC4P29tD8bm
HHUkpLprEzMePV2rgDVPsbG3YPZt+kQzEEWi9QwDSsnGzVxUZGJhvXDUANc1thlT
sfDGBRq1cyuXNbw8vae0uoR+MWsHF9EMKdAFxmfm8gE6rp2W87Lo4FGFHJYerkM5
1qVlp2TBn1x10pL0QnMoBzr59yFtYAFkaksps2YXG6xI9CkQ8lkJ3frGCdjN0jCm
sw3/9RwWlON5XKL4QzU7SucbcBNyM0Hssc3p/5rzzxdJSd9kX/ogBDpwdcJd/A09
et0oR1KMh6GbqteOdVmHvZ84g6a/TNKTtFkfzhbkseVzdhACzf40Y/c=
-----END CERTIFICATE-----