Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
File:                     Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft (raw, json)
Hash identifier:          Vot+q2qc7BAQhFBJ2g6aQDdTf3073zE547QrSewtD5M=
Subject key identifier:   86:06:5E:90:57:65:09:55:4A:A2:31:FF:39:31:65:8B:E9:2C:47:DD
Authority key identifier: 57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20
Certificate issuer:       /CN=F36280C9AF/serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
Certificate serial:       01CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
Manifest number:          01C3
Signing time:             Sat 14 Nov 2026 05:07:23 +0000
Manifest this update:     Sat 14 Nov 2026 05:07:23 +0000
Manifest next update:     Mon 16 Nov 2026 05:07:23 +0000
Files and hashes:         1: Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl (hash: hiwc7h9ub0689ucDrXcNtxaOOESh1+83iiB8Ek2fkTc=)
                          2: 611421F4963611F1931026A9CE1D38B0.roa (hash: tWLHDOBkRMEzQ3q95dvL/0lstFSuE+RsrJDK/J7YVe8=)
                          3: 75FD7FDC965611F1BD8175EACE1D38B0.roa (hash: A++E8QHj4hLBa8riAmj4iXBzww6dIixtvtgIi87wQME=)
                          4: 997B259C963611F185D10DABCE1D38B0.roa (hash: VUPSKE+i4O/810Cyv4p8XUMEeYicWchejkyI7vEvZBk=)
                          5: 02C2AD14963611F18EF006A9CE1D38B0.roa (hash: 7yVk5ub6iRzjmfjduXsEWGHprN8WJb/0ehVAu7gjU0c=)
                          6: CD46F55C965611F1A1D42EEECE1D38B0.roa (hash: ZwoPyYleTm8OIOtZdDUeO9ZjDDm126xieIwJh5NqR2U=)
                          7: A1D222A8755811F19E5F6DAFCE1D38B0.roa (hash: 8lf/svP1VF+sA26loOVd0lxvdI5wOxWStMGhERk0FVI=)
                          8: 7A8E9D30755211F1A6F15909CF1D38B0.roa (hash: q6y+hzQYmx0hO6P1zdgO/Rqo1yAI57rkaFbZAachqLo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 459 (0x1cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36280C9AF, serialNumber=5739E9D2932AD85BCC2240813BF3AB3942843020
        Validity
            Not Before: Nov 14 05:07:23 2026 GMT
            Not After : Nov 16 05:07:23 2026 GMT
        Subject: CN=6af7ec8b-5d6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:32:58:fb:46:1a:23:40:c0:9f:7b:be:0a:d3:
                    25:93:d1:62:ee:d6:9d:95:e0:92:3b:92:ac:82:18:
                    6f:43:ca:ab:07:a2:56:c8:aa:d4:f0:81:ca:6a:cc:
                    3a:c3:d9:09:17:26:c5:c2:fd:7c:0e:5b:27:2d:67:
                    3a:60:fc:73:a5:9d:8a:f6:31:c1:ff:02:fd:0d:b5:
                    f8:1a:22:ea:99:87:e1:e5:9b:68:d2:7b:33:7b:27:
                    8a:11:4d:c6:d4:76:35:2a:e5:b1:45:45:1d:42:66:
                    d1:24:b4:1c:ec:8d:ce:9c:57:1a:21:95:d7:4f:e2:
                    d8:35:0e:30:dc:19:f1:bd:ff:ad:1b:a9:e0:a7:ff:
                    e2:3e:00:0f:db:2e:15:17:54:82:93:9b:5d:be:6a:
                    b8:5b:20:09:d4:04:8a:ec:2f:47:e1:af:12:eb:b1:
                    07:8a:5c:de:cf:98:f6:c5:03:c0:12:a1:53:90:53:
                    f9:5b:a9:9e:3c:9d:8c:ff:37:f3:11:b9:68:65:47:
                    49:d1:c3:b6:e7:93:53:2d:32:bb:b0:24:75:19:88:
                    54:1b:d4:88:d1:7d:71:b3:60:4d:1b:43:35:e9:5a:
                    88:dc:49:96:24:df:d5:ab:bf:8c:a0:15:75:c6:fd:
                    ab:2f:c3:12:5d:07:b1:de:42:e3:25:10:af:ce:6e:
                    ff:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:06:5E:90:57:65:09:55:4A:A2:31:FF:39:31:65:8B:E9:2C:47:DD
            X509v3 Authority Key Identifier:
                keyid:57:39:E9:D2:93:2A:D8:5B:CC:22:40:81:3B:F3:AB:39:42:84:30:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vznp0pMq2FvMIkCBO_OrOUKEMCA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36280C9/892916D0895911F0B0F640C1DAE4EC9C/Vznp0pMq2FvMIkCBO_OrOUKEMCA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:cf:90:36:fe:ea:f7:df:47:38:67:07:c2:a6:57:f0:f1:47:
         21:94:ce:e2:9a:fd:65:3a:9d:5d:e8:ac:bc:e4:c5:ab:12:4a:
         84:6b:b6:9b:08:55:03:88:a1:ff:63:9c:36:42:95:dc:af:dd:
         23:07:ea:91:cd:52:33:f2:28:ac:31:3a:16:1c:e6:08:03:91:
         5b:f5:8b:68:2a:73:73:5c:19:dc:66:10:b7:81:3a:38:b2:30:
         ef:28:d6:ab:db:76:75:dd:ef:b5:4f:b6:2a:bb:7f:5a:c5:eb:
         77:6e:e4:b8:01:9c:87:b8:69:6f:bc:ba:95:79:4f:a5:9c:b8:
         31:8c:1c:87:f4:80:5e:6a:58:06:ea:27:bd:26:f4:f5:5f:0b:
         a3:72:94:57:90:41:36:52:00:f2:64:9b:6c:6c:db:97:f2:32:
         9d:09:32:79:52:c5:3d:86:a5:cf:e6:78:86:99:e0:14:85:79:
         1f:fa:64:26:f5:c4:a5:ce:be:19:14:19:35:f4:82:ca:58:b1:
         e6:53:78:a0:40:fc:59:cd:e7:90:bf:e6:20:93:a5:80:98:1b:
         35:73:5a:7d:90:b0:57:08:16:93:18:dc:57:52:a5:eb:4b:e7:
         8a:9c:b1:ca:49:e0:ac:2f:a4:72:f1:78:91:44:e0:7d:9b:d6:
         1b:20:df:27
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAcswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjgwQzlBRjExMC8GA1UEBRMoNTczOUU5RDI5MzJBRDg1QkNDMjI0MDgxM0JGM0FC
Mzk0Mjg0MzAyMDAeFw0yNjExMTQwNTA3MjNaFw0yNjExMTYwNTA3MjNaMBgxFjAU
BgNVBAMTDTZhZjdlYzhiLTVkNmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwMlj7RhojQMCfe74K0yWT0WLu1p2V4JI7kqyCGG9DyqsHolbIqtTwgcpq
zDrD2QkXJsXC/XwOWyctZzpg/HOlnYr2McH/Av0NtfgaIuqZh+Hlm2jSezN7J4oR
TcbUdjUq5bFFRR1CZtEktBzsjc6cVxohlddP4tg1DjDcGfG9/60bqeCn/+I+AA/b
LhUXVIKTm12+arhbIAnUBIrsL0fhrxLrsQeKXN7PmPbFA8ASoVOQU/lbqZ48nYz/
N/MRuWhlR0nRw7bnk1MtMruwJHUZiFQb1IjRfXGzYE0bQzXpWojcSZYk39Wrv4yg
FXXG/asvwxJdB7HeQuMlEK/Obv/3AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhgZe
kFdlCVVKojH/OTFli+ksR90wHwYDVR0jBBgwFoAUVznp0pMq2FvMIkCBO/OrOUKE
MCAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI4MEM5Lzg5MjkxNkQwODk1OTExRjBCMEY2NDBDMURBRTRFQzlDL1Z6bnAw
cE1xMkZ2TUlrQ0JPX09yT1VLRU1DQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1Z6bnAwcE1xMkZ2TUlrQ0JPX09yT1VLRU1DQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjgwQzkvODkyOTE2RDA4OTU5MTFGMEIwRjY0MEMxREFF
NEVDOUMvVnpucDBwTXEyRnZNSWtDQk9fT3JPVUtFTUNBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBqz5A2/ur330c4ZwfCplfw8UchlM7i
mv1lOp1d6Ky85MWrEkqEa7abCFUDiKH/Y5w2QpXcr90jB+qRzVIz8iisMToWHOYI
A5Fb9YtoKnNzXBncZhC3gTo4sjDvKNar23Z13e+1T7Yqu39axet3buS4AZyHuGlv
vLqVeU+lnLgxjByH9IBealgG6ie9JvT1XwujcpRXkEE2UgDyZJtsbNuX8jKdCTJ5
UsU9hqXP5niGmeAUhXkf+mQm9cSlzr4ZFBk19ILKWLHmU3igQPxZzeeQv+Ygk6WA
mBs1c1p9kLBXCBaTGNxXUqXrS+eKnLHKSeCsL6Ry8XiRROB9m9YbIN8n
-----END CERTIFICATE-----