Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.mft
File:                     KrDy-gyWo3s8ZFOURZffPfDF0bc.mft (raw, json)
Hash identifier:          w73vMmhGNjfgQsmlGDJZHSeKFx9Mn+VL3dyV19BdNJQ=
Subject key identifier:   75:C3:0A:58:4E:FB:C0:B8:4D:3C:6B:B5:DB:DF:23:50:AE:52:C0:50
Authority key identifier: 2A:B0:F2:FA:0C:96:A3:7B:3C:64:53:94:45:97:DF:3D:F0:C5:D1:B7
Certificate issuer:       /CN=F3639B8CAF/serialNumber=2AB0F2FA0C96A37B3C6453944597DF3DF0C5D1B7
Certificate serial:       01B5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/KrDy-gyWo3s8ZFOURZffPfDF0bc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.mft
Manifest number:          01B4
Signing time:             Sun 15 Nov 2026 05:07:43 +0000
Manifest this update:     Sun 15 Nov 2026 05:07:42 +0000
Manifest next update:     Tue 17 Nov 2026 05:07:42 +0000
Files and hashes:         1: KrDy-gyWo3s8ZFOURZffPfDF0bc.crl (hash: NePF0o3qjsfBNwCk/+2Nyop1tj1ESkjLYpdmZ9iswO0=)
                          2: 224E010A8EF911F08110F6F0DAE4EC9C.roa (hash: q4S/Fbxq3yG0xFEOwYvKuxGf0Ynd7Ff6WDMdEih5OjM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/KrDy-gyWo3s8ZFOURZffPfDF0bc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 437 (0x1b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3639B8CAF, serialNumber=2AB0F2FA0C96A37B3C6453944597DF3DF0C5D1B7
        Validity
            Not Before: Nov 15 05:07:42 2026 GMT
            Not After : Nov 17 05:07:42 2026 GMT
        Subject: CN=6af93e1f-bb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b5:c2:93:52:ab:14:59:81:7b:a8:95:3e:ec:
                    0b:8f:01:92:07:2b:19:b0:c5:a7:9e:c4:ac:05:70:
                    5d:0e:7e:95:df:fe:2f:28:32:81:1c:44:18:f9:30:
                    82:6b:df:aa:c4:53:e2:31:32:36:a4:e8:6e:03:32:
                    81:14:e3:8d:62:91:64:54:e4:65:5a:cc:94:9e:cc:
                    33:f7:e5:e7:01:96:9b:c7:a2:50:f8:64:91:f3:59:
                    d4:ab:2a:a6:83:81:fa:e6:c9:c0:84:84:54:3d:01:
                    dd:c6:bd:dc:6a:b1:fd:14:50:3b:36:1f:7c:60:13:
                    48:a3:7c:a2:e6:ff:72:62:0a:bc:11:3a:10:7d:08:
                    c0:6e:df:f7:92:73:2b:ef:6c:c0:98:67:b2:c1:cc:
                    12:af:bb:54:fc:97:0d:31:d7:b8:5b:73:fb:06:c3:
                    69:a8:94:e2:89:14:00:6f:e5:0b:6a:35:99:32:3a:
                    83:c7:49:c7:59:f0:78:e1:e7:88:d3:49:fb:2c:a7:
                    59:0b:11:c6:f9:50:c4:e1:47:b3:c5:77:0f:31:94:
                    2c:ff:20:fa:81:ea:80:60:f4:5e:67:f9:92:4d:be:
                    d1:0b:1b:fe:59:a8:39:1f:ad:c3:81:06:7a:98:44:
                    e6:aa:66:04:1d:78:66:c9:09:bf:b4:1f:74:1d:d8:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C3:0A:58:4E:FB:C0:B8:4D:3C:6B:B5:DB:DF:23:50:AE:52:C0:50
            X509v3 Authority Key Identifier:
                keyid:2A:B0:F2:FA:0C:96:A3:7B:3C:64:53:94:45:97:DF:3D:F0:C5:D1:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/KrDy-gyWo3s8ZFOURZffPfDF0bc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3639B8C/81FF998E8EF311F0B1EF4DCEDAE4EC9C/KrDy-gyWo3s8ZFOURZffPfDF0bc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:19:a5:0c:46:8d:07:4a:18:cf:c4:9f:fc:14:5d:6d:a1:ad:
         fc:c3:ba:d7:f6:89:d4:6b:3e:cd:2e:25:ea:7e:bf:cf:0a:ee:
         d3:f1:c5:9c:83:27:69:39:5a:03:61:97:f2:50:5f:9c:2d:c3:
         ec:cb:04:38:ef:73:79:aa:fc:e8:75:2b:7d:5b:ef:a3:90:59:
         d1:a1:94:82:54:e9:e2:51:97:a7:b0:4c:47:c6:a9:7e:c3:7c:
         fa:0b:77:a5:20:61:db:d5:ea:e6:bb:3e:ca:b0:5b:57:31:65:
         dd:fd:cf:0c:e4:19:ec:d3:7a:df:02:ba:bb:41:58:5f:2f:36:
         ca:2f:22:65:62:cb:3f:1e:0a:82:3f:cd:14:c0:4b:fa:f4:c9:
         0a:d4:1d:e7:13:70:8a:e8:5b:fc:2d:08:0e:cc:d6:a1:d4:f7:
         c9:3f:c8:3a:5a:a7:da:c4:12:d4:7f:26:2d:05:96:f0:30:11:
         43:a8:14:df:50:b3:08:fb:1b:a5:29:90:63:c3:08:5a:db:74:
         3e:59:a4:0c:e4:92:9a:4c:20:fd:d2:90:15:4d:e1:33:f7:a6:
         ca:a8:ed:d1:7e:5a:61:08:e7:9b:66:de:5e:b9:a8:06:d6:7b:
         64:56:88:03:3d:ce:5d:c4:08:35:9e:f1:90:d9:fa:cb:92:c9:
         c0:a4:82:3d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAbUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzlCOENBRjExMC8GA1UEBRMoMkFCMEYyRkEwQzk2QTM3QjNDNjQ1Mzk0NDU5N0RG
M0RGMEM1RDFCNzAeFw0yNjExMTUwNTA3NDJaFw0yNjExMTcwNTA3NDJaMBgxFjAU
BgNVBAMTDTZhZjkzZTFmLWJiMTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCrtcKTUqsUWYF7qJU+7AuPAZIHKxmwxaeexKwFcF0OfpXf/i8oMoEcRBj5
MIJr36rEU+IxMjak6G4DMoEU441ikWRU5GVazJSezDP35ecBlpvHolD4ZJHzWdSr
KqaDgfrmycCEhFQ9Ad3Gvdxqsf0UUDs2H3xgE0ijfKLm/3JiCrwROhB9CMBu3/eS
cyvvbMCYZ7LBzBKvu1T8lw0x17hbc/sGw2molOKJFABv5QtqNZkyOoPHScdZ8Hjh
54jTSfssp1kLEcb5UMThR7PFdw8xlCz/IPqB6oBg9F5n+ZJNvtELG/5ZqDkfrcOB
BnqYROaqZgQdeGbJCb+0H3Qd2LprAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUdcMK
WE77wLhNPGu1298jUK5SwFAwHwYDVR0jBBgwFoAUKrDy+gyWo3s8ZFOURZffPfDF
0bcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjM5QjhDLzgxRkY5OThFOEVGMzExRjBCMUVGNERDRURBRTRFQzlDL0tyRHkt
Z3lXbzNzOFpGT1VSWmZmUGZERjBiYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0tyRHktZ3lXbzNzOFpGT1VSWmZmUGZERjBiYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MzlCOEMvODFGRjk5OEU4RUYzMTFGMEIxRUY0RENFREFF
NEVDOUMvS3JEeS1neVdvM3M4WkZPVVJaZmZQZkRGMGJjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvGaUMRo0HShjPxJ/8FF1toa38w7rX
9onUaz7NLiXqfr/PCu7T8cWcgydpOVoDYZfyUF+cLcPsywQ473N5qvzodSt9W++j
kFnRoZSCVOniUZensExHxql+w3z6C3elIGHb1ermuz7KsFtXMWXd/c8M5Bns03rf
Arq7QVhfLzbKLyJlYss/HgqCP80UwEv69MkK1B3nE3CK6Fv8LQgOzNah1PfJP8g6
WqfaxBLUfyYtBZbwMBFDqBTfULMI+xulKZBjwwha23Q+WaQM5JKaTCD90pAVTeEz
96bKqO3RflphCOebZt5euagG1ntkVogDPc5dxAg1nvGQ2frLksnApII9
-----END CERTIFICATE-----