Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
File:                     _CFqOFBDurE2eHrAmYJUYZDL3pI.mft (raw, json)
Hash identifier:          jSz0HY6jocgSTER3+f0fWDN2LdnVlcw7QKpyOu0Z8+g=
Subject key identifier:   3C:FC:E7:A0:47:3F:3E:EA:D8:24:79:6F:72:9C:93:4F:9B:8A:0D:FA
Authority key identifier: FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92
Certificate issuer:       /CN=F3618989AF/serialNumber=FC216A385043BAB136787AC09982546190CBDE92
Certificate serial:       0921
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
Manifest number:          091E
Signing time:             Sat 03 Oct 2026 01:51:02 +0000
Manifest this update:     Sat 03 Oct 2026 01:51:01 +0000
Manifest next update:     Mon 05 Oct 2026 01:51:01 +0000
Files and hashes:         1: _CFqOFBDurE2eHrAmYJUYZDL3pI.crl (hash: YdVljSIn+bmn63X5VoMe4kJa64SM7K3A9Et3G7AIAbg=)
                          2: 7D1D251CC04011EA957AEB21F8AEA228.roa (hash: t/ypp67l7oHU7gQc6/GfToKk0xAfDBleGGehP++nK88=)
                          3: 234A1CC0C04011EABDD07A21F8AEA228.roa (hash: qxLDaEM+dLvWNlnURJT6LsT7+vD5fBM4n0SH7Mu85No=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2337 (0x921)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3618989AF, serialNumber=FC216A385043BAB136787AC09982546190CBDE92
        Validity
            Not Before: Oct  3 01:51:01 2026 GMT
            Not After : Oct  5 01:51:01 2026 GMT
        Subject: CN=6ac05f86-73ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:21:32:3c:9f:17:00:ea:fb:4a:06:1c:bb:52:
                    77:1d:fe:a8:00:1e:8a:3e:eb:0b:4d:39:03:1b:88:
                    ff:9b:72:ce:ea:aa:7a:fd:87:df:54:4f:a2:e1:fd:
                    8f:02:ef:bb:a1:27:e5:0a:f1:0c:4b:63:a0:d7:20:
                    39:32:08:81:7f:43:6c:07:2c:a0:3a:d0:4e:b6:93:
                    9b:b3:37:2b:db:07:13:87:78:ab:1a:8f:17:cb:12:
                    35:ac:05:7f:ad:47:b0:e9:40:12:17:f6:21:ce:68:
                    05:09:63:13:7d:8d:11:3d:e4:37:e2:db:0f:82:a2:
                    ab:83:9e:db:0d:91:e6:2c:e3:40:31:4b:ce:4a:fd:
                    f7:2f:fa:b1:26:73:87:21:0d:c6:04:d1:1f:14:48:
                    35:a7:e3:d1:0e:e6:b0:ed:79:e2:5a:18:f2:9e:33:
                    d1:c4:dc:90:92:06:ab:c1:d4:aa:43:e2:b0:d0:78:
                    44:f4:d1:ce:99:2d:a0:e2:2f:f2:40:bd:ec:52:75:
                    e1:0c:d5:bf:e8:a9:9d:79:c8:e0:cc:19:f5:f6:18:
                    d8:43:55:b9:c8:fe:9b:c5:8d:e8:13:85:5b:c3:ae:
                    74:c3:06:56:4c:48:1f:f7:eb:df:05:7d:fc:62:5b:
                    88:70:3b:ff:5c:c3:65:10:6d:9e:56:67:49:63:d2:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:FC:E7:A0:47:3F:3E:EA:D8:24:79:6F:72:9C:93:4F:9B:8A:0D:FA
            X509v3 Authority Key Identifier:
                keyid:FC:21:6A:38:50:43:BA:B1:36:78:7A:C0:99:82:54:61:90:CB:DE:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_CFqOFBDurE2eHrAmYJUYZDL3pI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3618989/DE67E01AC03F11EA886D1D21F8AEA228/_CFqOFBDurE2eHrAmYJUYZDL3pI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:7f:06:53:ed:7e:f8:6d:79:5a:25:77:fc:cc:ba:6f:8a:bd:
         05:c7:71:b6:ea:61:cd:31:a1:23:eb:56:f5:87:18:48:a0:51:
         bb:19:97:d7:a6:00:34:c6:ec:e8:fa:2e:06:c3:0c:e6:f3:e0:
         42:ee:b0:2c:21:4f:55:22:95:c9:07:45:68:41:5d:2e:f7:6e:
         38:33:da:3f:0b:81:3a:03:81:9c:c6:0e:a0:cd:71:66:d4:e0:
         85:01:d2:12:c9:e1:d3:44:c4:80:0c:9d:44:8f:36:61:d1:22:
         af:47:68:68:1b:07:00:e7:ac:9f:6b:14:1d:40:dd:41:57:c5:
         80:7b:5f:ce:bd:1a:bc:04:5c:8c:f3:5d:46:fc:f9:f7:6d:6d:
         85:40:35:6a:34:ad:26:25:e8:0e:f9:ba:48:63:d6:e5:e3:e8:
         ff:20:95:19:8f:f3:7c:2a:21:a0:0f:d9:a6:b3:d2:74:fe:34:
         9b:01:a9:15:6f:0b:85:d1:b8:31:71:0f:41:4d:02:6a:ea:9d:
         f4:2b:a7:5e:1b:54:58:ba:ba:3a:f2:19:88:11:78:b2:14:fb:
         06:fa:d3:88:fc:cb:57:52:ef:aa:bb:14:64:03:62:3b:03:19:
         73:6b:2a:da:10:0c:98:92:36:2a:6e:72:6b:87:36:0e:c7:1d:
         b9:39:77:51
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCSEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTg5ODlBRjExMC8GA1UEBRMoRkMyMTZBMzg1MDQzQkFCMTM2Nzg3QUMwOTk4MjU0
NjE5MENCREU5MjAeFw0yNjEwMDMwMTUxMDFaFw0yNjEwMDUwMTUxMDFaMBgxFjAU
BgNVBAMTDTZhYzA1Zjg2LTczY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCWITI8nxcA6vtKBhy7Uncd/qgAHoo+6wtNOQMbiP+bcs7qqnr9h99UT6Lh
/Y8C77uhJ+UK8QxLY6DXIDkyCIF/Q2wHLKA60E62k5uzNyvbBxOHeKsajxfLEjWs
BX+tR7DpQBIX9iHOaAUJYxN9jRE95Dfi2w+CoquDntsNkeYs40AxS85K/fcv+rEm
c4chDcYE0R8USDWn49EO5rDteeJaGPKeM9HE3JCSBqvB1KpD4rDQeET00c6ZLaDi
L/JAvexSdeEM1b/oqZ15yODMGfX2GNhDVbnI/pvFjegThVvDrnTDBlZMSB/3698F
ffxiW4hwO/9cw2UQbZ5WZ0lj0untAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUPPzn
oEc/PurYJHlvcpyTT5uKDfowHwYDVR0jBBgwFoAU/CFqOFBDurE2eHrAmYJUYZDL
3pIwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE4OTg5L0RFNjdFMDFBQzAzRjExRUE4ODZEMUQyMUY4QUVBMjI4L19DRnFP
RkJEdXJFMmVIckFtWUpVWVpETDNwSS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19DRnFPRkJEdXJFMmVIckFtWUpVWVpETDNwSS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTg5ODkvREU2N0UwMUFDMDNGMTFFQTg4NkQxRDIxRjhB
RUEyMjgvX0NGcU9GQkR1ckUyZUhyQW1ZSlVZWkRMM3BJLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA1fwZT7X74bXlaJXf8zLpvir0Fx3G2
6mHNMaEj61b1hxhIoFG7GZfXpgA0xuzo+i4Gwwzm8+BC7rAsIU9VIpXJB0VoQV0u
9244M9o/C4E6A4Gcxg6gzXFm1OCFAdISyeHTRMSADJ1EjzZh0SKvR2hoGwcA56yf
axQdQN1BV8WAe1/OvRq8BFyM811G/Pn3bW2FQDVqNK0mJegO+bpIY9bl4+j/IJUZ
j/N8KiGgD9mms9J0/jSbAakVbwuF0bgxcQ9BTQJq6p30K6deG1RYuro68hmIEXiy
FPsG+tOI/MtXUu+quxRkA2I7AxlzayraEAyYkjYqbnJrhzYOxx25OXdR
-----END CERTIFICATE-----