Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363B903/ACA6BFA602B511F1834352B4DAE4EC9C/Y0dCjPdKu3rC000FbUGGRy8utkc.mft
File:                     Y0dCjPdKu3rC000FbUGGRy8utkc.mft (raw, json)
Hash identifier:          NRbFS4R7+d5MHcyw39MEkWdIgc0MyTFj5N8ed/tMg+A=
Subject key identifier:   9D:1B:1F:40:C0:FF:CD:7F:6B:5C:31:7B:83:4B:1B:03:F2:BA:E0:60
Authority key identifier: 63:47:42:8C:F7:4A:BB:7A:C2:D3:4D:05:6D:41:86:47:2F:2E:B6:47
Certificate issuer:       /CN=F363B903AF/serialNumber=6347428CF74ABB7AC2D34D056D4186472F2EB647
Certificate serial:       011F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Y0dCjPdKu3rC000FbUGGRy8utkc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363B903/ACA6BFA602B511F1834352B4DAE4EC9C/Y0dCjPdKu3rC000FbUGGRy8utkc.mft
Manifest number:          011E
Signing time:             Sun 15 Nov 2026 05:24:45 +0000
Manifest this update:     Sun 15 Nov 2026 05:24:44 +0000
Manifest next update:     Tue 17 Nov 2026 05:24:44 +0000
Files and hashes:         1: Y0dCjPdKu3rC000FbUGGRy8utkc.crl (hash: NbRv6EC+HxR21joITQQHepi6W63tQSgOv3QFBHBDmaw=)
                          2: 87EF089202B711F1A91575BEDAE4EC9C.roa (hash: MpB9DmQ10mBfJX28iqXEaZfI2QbtXiMSDQmaNSAHGOM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363B903/ACA6BFA602B511F1834352B4DAE4EC9C/Y0dCjPdKu3rC000FbUGGRy8utkc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363B903/ACA6BFA602B511F1834352B4DAE4EC9C/Y0dCjPdKu3rC000FbUGGRy8utkc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Y0dCjPdKu3rC000FbUGGRy8utkc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363B903AF, serialNumber=6347428CF74ABB7AC2D34D056D4186472F2EB647
        Validity
            Not Before: Nov 15 05:24:44 2026 GMT
            Not After : Nov 17 05:24:44 2026 GMT
        Subject: CN=6af9421c-651b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b4:24:04:54:58:b1:a9:17:39:2f:00:24:0b:
                    1e:a5:86:7b:87:43:25:9d:11:49:fd:29:6f:33:79:
                    af:6e:02:10:0d:f5:c6:77:e8:ae:36:c8:63:54:f2:
                    3c:f6:42:c2:16:c1:9f:81:09:ea:35:6a:2c:02:0b:
                    4a:f9:38:e8:5b:b0:49:a4:b8:93:5d:10:d0:a4:fc:
                    2e:78:ee:3c:19:06:65:de:f3:41:5b:b7:1b:fe:54:
                    c8:bc:4c:1d:aa:6b:fe:93:85:b2:8b:16:71:ad:5a:
                    99:0d:02:85:bc:83:b9:84:69:af:37:31:ef:f6:48:
                    df:43:6a:ec:d3:5b:af:f4:26:c4:54:f0:a9:c0:bc:
                    ce:cd:c3:91:bd:63:d8:cc:43:3f:5b:77:df:42:bd:
                    7a:3f:c9:63:b8:5d:74:40:03:12:4e:b3:68:59:66:
                    94:c7:6b:de:73:02:f9:43:dd:a3:a7:27:34:68:d9:
                    19:64:ca:5c:06:c4:28:24:06:d5:ef:93:27:83:49:
                    27:64:f3:ae:fc:b9:06:06:3f:a6:15:f8:56:34:7b:
                    de:28:bf:c3:db:15:fb:34:72:2c:93:6d:4d:a3:93:
                    35:bd:5e:b6:fe:a5:b3:d4:31:ad:0e:f1:26:ad:49:
                    40:de:c0:91:3b:4e:44:0c:da:fe:b7:fe:40:4f:8f:
                    38:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1B:1F:40:C0:FF:CD:7F:6B:5C:31:7B:83:4B:1B:03:F2:BA:E0:60
            X509v3 Authority Key Identifier:
                keyid:63:47:42:8C:F7:4A:BB:7A:C2:D3:4D:05:6D:41:86:47:2F:2E:B6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363B903/ACA6BFA602B511F1834352B4DAE4EC9C/Y0dCjPdKu3rC000FbUGGRy8utkc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Y0dCjPdKu3rC000FbUGGRy8utkc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363B903/ACA6BFA602B511F1834352B4DAE4EC9C/Y0dCjPdKu3rC000FbUGGRy8utkc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:65:ff:c1:08:90:b8:9c:cc:66:9d:0b:8c:40:d6:c1:8c:41:
         93:ad:db:83:ad:6b:09:92:48:76:d3:46:0f:e5:9c:e3:90:6f:
         97:2f:60:04:71:4a:cb:a7:9e:26:8f:6b:76:33:15:44:93:fc:
         5e:12:29:5e:cc:22:2a:7b:d3:d0:22:7a:8e:21:ff:f6:f9:f1:
         cd:f6:6f:aa:7f:e8:80:ff:3c:03:d7:97:72:01:57:7f:27:4c:
         d9:92:6a:cc:b1:a7:30:52:8c:d9:84:50:85:a8:ab:48:71:92:
         f6:25:75:53:39:44:16:40:db:5f:7b:75:ae:c0:d5:76:11:42:
         98:68:7c:6a:23:30:65:9d:1b:7a:e3:54:d0:89:2e:32:20:1e:
         5b:71:b4:0a:52:c4:a5:54:83:66:d8:8a:e1:ba:5b:06:47:a8:
         4b:c8:75:c5:67:b5:18:f7:7a:3c:e6:1d:26:8d:14:ce:8c:b4:
         45:34:5f:8c:df:80:77:73:5a:93:e9:2b:e4:f4:c5:48:0b:69:
         8a:0e:33:9f:5e:f0:f0:f7:7a:72:94:cb:8e:ec:2b:dd:04:97:
         a3:03:a5:ab:43:63:bc:a1:0f:4c:c7:06:9b:cb:ce:37:76:e6:
         20:49:65:b0:4f:a4:15:66:6b:f2:9b:73:e7:73:d5:52:3d:70:
         cf:c9:43:b4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
M0I5MDNBRjExMC8GA1UEBRMoNjM0NzQyOENGNzRBQkI3QUMyRDM0RDA1NkQ0MTg2
NDcyRjJFQjY0NzAeFw0yNjExMTUwNTI0NDRaFw0yNjExMTcwNTI0NDRaMBgxFjAU
BgNVBAMTDTZhZjk0MjFjLTY1MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwtCQEVFixqRc5LwAkCx6lhnuHQyWdEUn9KW8zea9uAhAN9cZ36K42yGNU
8jz2QsIWwZ+BCeo1aiwCC0r5OOhbsEmkuJNdENCk/C547jwZBmXe80Fbtxv+VMi8
TB2qa/6ThbKLFnGtWpkNAoW8g7mEaa83Me/2SN9DauzTW6/0JsRU8KnAvM7Nw5G9
Y9jMQz9bd99CvXo/yWO4XXRAAxJOs2hZZpTHa95zAvlD3aOnJzRo2RlkylwGxCgk
BtXvkyeDSSdk8678uQYGP6YV+FY0e94ov8PbFfs0ciyTbU2jkzW9Xrb+pbPUMa0O
8SatSUDewJE7TkQM2v63/kBPjzgNAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnRsf
QMD/zX9rXDF7g0sbA/K64GAwHwYDVR0jBBgwFoAUY0dCjPdKu3rC000FbUGGRy8u
tkcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjNCOTAzL0FDQTZCRkE2MDJCNTExRjE4MzQzNTJCNERBRTRFQzlDL1kwZENq
UGRLdTNyQzAwMEZiVUdHUnk4dXRrYy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1kwZENqUGRLdTNyQzAwMEZiVUdHUnk4dXRrYy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2M0I5MDMvQUNBNkJGQTYwMkI1MTFGMTgzNDM1MkI0REFF
NEVDOUMvWTBkQ2pQZEt1M3JDMDAwRmJVR0dSeTh1dGtjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB/Zf/BCJC4nMxmnQuMQNbBjEGTrduD
rWsJkkh200YP5ZzjkG+XL2AEcUrLp54mj2t2MxVEk/xeEilezCIqe9PQInqOIf/2
+fHN9m+qf+iA/zwD15dyAVd/J0zZkmrMsacwUozZhFCFqKtIcZL2JXVTOUQWQNtf
e3WuwNV2EUKYaHxqIzBlnRt641TQiS4yIB5bcbQKUsSlVINm2IrhulsGR6hLyHXF
Z7UY93o85h0mjRTOjLRFNF+M34B3c1qT6Svk9MVIC2mKDjOfXvDw93pylMuO7Cvd
BJejA6WrQ2O8oQ9Mxwaby843duYgSWWwT6QVZmvym3Pnc9VSPXDPyUO0
-----END CERTIFICATE-----