Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
File:                     CrgqSYFgfZszadx3bbCHPaDXW0o.mft (raw, json)
Hash identifier:          kPV6LJlOqFQWMo+DYDzFyq7HjKPLBtixTQJYSp872Hw=
Subject key identifier:   A9:B6:75:C2:A6:09:2F:D9:8E:59:24:1D:FC:B9:BA:4E:41:B2:4D:22
Authority key identifier: 0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A
Certificate issuer:       /CN=F3619C2DAF/serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
Certificate serial:       0346
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
Manifest number:          0343
Signing time:             Fri 16 Oct 2026 04:19:05 +0000
Manifest this update:     Fri 16 Oct 2026 04:19:04 +0000
Manifest next update:     Sun 18 Oct 2026 04:19:04 +0000
Files and hashes:         1: CrgqSYFgfZszadx3bbCHPaDXW0o.crl (hash: Q2Ce1y8f8JWHo+9tLT+Y+hp3896wR56r46mx/WgcxPs=)
                          2: 49178D26482111EFBF6A9846762E951A.roa (hash: Uq5zF4pcoSNvC1y+ziK2X/Qxf/rDJCV5RGjunbzu6Yw=)
                          3: B03D2452482111EF9F9EC84A762E951A.roa (hash: jCfjvbMFxRCBjcQ1hYzWoTlmpoZT6gauVXaJc8YGgBc=)
                          4: 74DC4CE4482111EFB52ABE46762E951A.roa (hash: IrKSaBlXTXvuFdDCMcmVoeGgt+ao2gr+1sDL9IuQ/x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 Oct 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 838 (0x346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3619C2DAF, serialNumber=0AB82A4981607D9B3369DC776DB0873DA0D75B4A
        Validity
            Not Before: Oct 16 04:19:04 2026 GMT
            Not After : Oct 18 04:19:04 2026 GMT
        Subject: CN=6ad1a5b9-7f48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4a:cc:d7:98:ad:e9:d1:39:41:43:c9:c7:23:
                    34:9f:cc:97:66:70:0a:0c:5a:e4:41:5d:1f:18:ee:
                    0e:a5:e0:a2:97:1f:69:b2:01:a1:99:1c:6f:87:b4:
                    82:78:4f:fc:0f:76:c9:7f:f9:49:a1:dd:75:f4:aa:
                    7c:05:82:f1:5a:f5:eb:2c:3e:a2:18:ff:c1:1c:c5:
                    1a:27:3a:4a:7e:c2:4b:cd:66:de:61:ee:03:95:b8:
                    57:14:1a:76:c2:37:6c:ee:39:21:9b:da:d5:3d:32:
                    41:7a:aa:b9:98:a0:b9:38:24:0b:f6:b9:d3:d2:ee:
                    3f:ea:77:86:3d:cf:7d:c4:03:77:67:2c:d8:3b:a2:
                    e8:fc:11:d5:a8:87:b3:d3:69:a1:e2:81:5f:81:6f:
                    c4:fa:49:bf:6b:15:45:0a:d4:24:ae:0a:f1:10:fe:
                    30:d9:27:5a:f6:10:57:8c:30:70:be:47:e9:dd:39:
                    e5:c8:b2:7d:61:9b:fc:ac:b3:d0:9d:9b:dd:ec:03:
                    3e:23:9a:8d:6c:07:6c:52:3d:39:a0:ce:c7:3f:a6:
                    41:5e:ba:ce:b6:ef:72:fd:4f:a7:fa:05:5b:0f:76:
                    a4:af:73:a1:96:c3:d2:ab:77:9d:86:86:72:e8:e6:
                    db:a5:4e:b4:df:75:59:a6:8d:df:6c:a2:a9:36:7a:
                    fc:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B6:75:C2:A6:09:2F:D9:8E:59:24:1D:FC:B9:BA:4E:41:B2:4D:22
            X509v3 Authority Key Identifier:
                keyid:0A:B8:2A:49:81:60:7D:9B:33:69:DC:77:6D:B0:87:3D:A0:D7:5B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CrgqSYFgfZszadx3bbCHPaDXW0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3619C2D/A3800BAE482011EFB826B541762E951A/CrgqSYFgfZszadx3bbCHPaDXW0o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:93:86:dc:40:1f:33:ff:78:30:6c:4c:8e:f4:9b:4f:87:4c:
         17:48:02:0a:cb:d0:ba:34:8d:aa:50:cc:bd:81:4f:74:20:cc:
         62:75:5c:16:d0:04:03:75:dc:6a:6c:4c:ae:e0:8b:65:c8:8c:
         17:49:85:67:da:7a:44:66:71:37:88:fc:ae:ec:bf:b2:39:12:
         10:bf:88:6f:68:42:8c:81:87:40:3d:90:80:48:c6:1c:fd:a0:
         44:30:8d:2d:87:12:38:33:2b:93:75:df:a0:5e:5f:b0:9f:31:
         aa:da:6a:51:8a:e5:bd:4d:ab:6a:65:f0:45:50:79:a9:13:76:
         86:bd:a7:8f:72:3c:a0:fe:7f:0e:3a:f4:89:36:9e:e8:f6:c4:
         08:92:8a:3e:96:56:7b:50:a2:a0:5f:d4:f6:19:2c:8f:71:80:
         ca:51:cd:fa:2e:50:49:53:c4:a5:5f:71:7c:b0:6e:9f:b9:5d:
         c4:5b:93:0e:88:a6:6d:95:31:56:b9:d5:76:95:19:ed:0d:29:
         20:f2:3b:b2:9d:8e:43:23:f1:33:2a:20:21:09:0f:39:d2:a3:
         e3:59:30:bf:bd:61:e3:a4:c4:6b:c0:8c:9b:f9:4a:14:31:7a:
         a9:f8:d0:02:7c:bd:54:a8:f2:66:4e:9f:7f:55:11:03:03:34:
         10:1d:25:32
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA0YwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTlDMkRBRjExMC8GA1UEBRMoMEFCODJBNDk4MTYwN0Q5QjMzNjlEQzc3NkRCMDg3
M0RBMEQ3NUI0QTAeFw0yNjEwMTYwNDE5MDRaFw0yNjEwMTgwNDE5MDRaMBgxFjAU
BgNVBAMTDTZhZDFhNWI5LTdmNDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDBSszXmK3p0TlBQ8nHIzSfzJdmcAoMWuRBXR8Y7g6l4KKXH2myAaGZHG+H
tIJ4T/wPdsl/+Umh3XX0qnwFgvFa9essPqIY/8EcxRonOkp+wkvNZt5h7gOVuFcU
GnbCN2zuOSGb2tU9MkF6qrmYoLk4JAv2udPS7j/qd4Y9z33EA3dnLNg7ouj8EdWo
h7PTaaHigV+Bb8T6Sb9rFUUK1CSuCvEQ/jDZJ1r2EFeMMHC+R+ndOeXIsn1hm/ys
s9Cdm93sAz4jmo1sB2xSPTmgzsc/pkFeus6273L9T6f6BVsPdqSvc6GWw9Krd52G
hnLo5tulTrTfdVmmjd9soqk2evyNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUqbZ1
wqYJL9mOWSQd/Lm6TkGyTSIwHwYDVR0jBBgwFoAUCrgqSYFgfZszadx3bbCHPaDX
W0owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjE5QzJEL0EzODAwQkFFNDgyMDExRUZCODI2QjU0MTc2MkU5NTFBL0NyZ3FT
WUZnZlpzemFkeDNiYkNIUGFEWFcwby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NyZ3FTWUZnZlpzemFkeDNiYkNIUGFEWFcwby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTlDMkQvQTM4MDBCQUU0ODIwMTFFRkI4MjZCNTQxNzYy
RTk1MUEvQ3JncVNZRmdmWnN6YWR4M2JiQ0hQYURYVzBvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDak4bcQB8z/3gwbEyO9JtPh0wXSAIK
y9C6NI2qUMy9gU90IMxidVwW0AQDddxqbEyu4ItlyIwXSYVn2npEZnE3iPyu7L+y
ORIQv4hvaEKMgYdAPZCASMYc/aBEMI0thxI4MyuTdd+gXl+wnzGq2mpRiuW9Tatq
ZfBFUHmpE3aGvaePcjyg/n8OOvSJNp7o9sQIkoo+llZ7UKKgX9T2GSyPcYDKUc36
LlBJU8SlX3F8sG6fuV3EW5MOiKZtlTFWudV2lRntDSkg8juynY5DI/EzKiAhCQ85
0qPjWTC/vWHjpMRrwIyb+UoUMXqp+NACfL1UqPJmTp9/VREDAzQQHSUy
-----END CERTIFICATE-----