Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363FFC5/BB386782A11011F1B7BF56BECE1D38B0/pulYcAGN6pPun7eKOhyNdirGRWs.mft
File:                     pulYcAGN6pPun7eKOhyNdirGRWs.mft (raw, json)
Hash identifier:          5oZT+v2zsUORaBwUZSIVlITQR6sGg1KUPIAB0QGYNqo=
Subject key identifier:   1D:AC:77:07:AE:C8:5C:51:95:E1:FF:9F:5A:96:E4:E9:8B:9E:94:FB
Authority key identifier: A6:E9:58:70:01:8D:EA:93:EE:9F:B7:8A:3A:1C:8D:76:2A:C6:45:6B
Certificate issuer:       /CN=F363FFC5AF/serialNumber=A6E95870018DEA93EE9FB78A3A1C8D762AC6456B
Certificate serial:       20
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/pulYcAGN6pPun7eKOhyNdirGRWs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FFC5/BB386782A11011F1B7BF56BECE1D38B0/pulYcAGN6pPun7eKOhyNdirGRWs.mft
Manifest number:          1F
Signing time:             Tue 22 Sep 2026 05:50:59 +0000
Manifest this update:     Tue 22 Sep 2026 05:50:58 +0000
Manifest next update:     Thu 24 Sep 2026 05:50:58 +0000
Files and hashes:         1: pulYcAGN6pPun7eKOhyNdirGRWs.crl (hash: 5Bboiqebj4f9q61MeyD0xXC8sszUSfYKYh0K/LJHUFI=)
                          2: A767EC64A12E11F19E04B4EFCE1D38B0.roa (hash: vG84yYNf1ItAtuhWQH+e1kkaBAvw7cmalos1WQ62qpI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FFC5/BB386782A11011F1B7BF56BECE1D38B0/pulYcAGN6pPun7eKOhyNdirGRWs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FFC5/BB386782A11011F1B7BF56BECE1D38B0/pulYcAGN6pPun7eKOhyNdirGRWs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/pulYcAGN6pPun7eKOhyNdirGRWs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FFC5AF, serialNumber=A6E95870018DEA93EE9FB78A3A1C8D762AC6456B
        Validity
            Not Before: Sep 22 05:50:58 2026 GMT
            Not After : Sep 24 05:50:58 2026 GMT
        Subject: CN=6ab21743-72b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:62:9b:e5:1b:64:45:b9:3a:c3:14:e4:b1:ed:
                    98:63:ee:ae:06:c9:ed:66:3b:14:4c:34:28:02:f3:
                    d3:11:8c:7b:6f:cc:fc:72:03:ed:d8:f0:cf:80:28:
                    17:66:88:d4:41:b5:0d:4e:6e:c2:15:c1:74:ef:c3:
                    52:c7:ff:9f:4d:28:fe:91:40:dc:1b:b3:0b:e1:10:
                    a9:8d:65:81:79:f3:7c:78:a5:d1:08:de:6d:2c:41:
                    5e:1e:8d:1a:12:ff:88:94:73:57:47:c7:7e:64:6d:
                    07:8a:07:24:f1:33:f4:db:cc:38:d7:e0:ff:3d:b0:
                    8e:5f:92:0d:c6:9f:c2:d9:23:be:3e:5a:68:ea:b1:
                    d6:79:51:c5:7f:db:a2:b2:64:f6:ec:18:51:b9:a8:
                    98:2f:ff:d9:ce:80:fb:76:1d:80:51:a3:c3:d8:a8:
                    14:5b:1a:2a:8d:a3:a1:2b:eb:28:8e:94:c6:64:bf:
                    b5:c8:ee:ff:d2:4c:39:c3:d1:1e:f1:6d:da:d6:3c:
                    ea:4d:d2:14:f4:3a:68:ee:3e:60:c4:b9:84:18:43:
                    bf:d5:88:9f:31:76:25:6a:5b:d4:a2:53:0c:b6:c6:
                    2a:f9:a5:17:66:f0:81:f1:4a:35:a9:9d:80:9c:9d:
                    bf:cc:ee:e3:41:54:8f:46:f9:50:9d:dd:b0:df:8d:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AC:77:07:AE:C8:5C:51:95:E1:FF:9F:5A:96:E4:E9:8B:9E:94:FB
            X509v3 Authority Key Identifier:
                keyid:A6:E9:58:70:01:8D:EA:93:EE:9F:B7:8A:3A:1C:8D:76:2A:C6:45:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FFC5/BB386782A11011F1B7BF56BECE1D38B0/pulYcAGN6pPun7eKOhyNdirGRWs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/pulYcAGN6pPun7eKOhyNdirGRWs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FFC5/BB386782A11011F1B7BF56BECE1D38B0/pulYcAGN6pPun7eKOhyNdirGRWs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bb:a9:2e:14:c4:40:fc:e4:cc:60:c3:e6:a3:c9:18:64:26:
         07:99:f3:4d:4e:da:5a:95:2c:25:bf:b1:09:c6:c4:11:7f:e3:
         20:20:d6:f1:12:c0:0a:dc:2a:06:87:f0:aa:10:03:59:58:d3:
         ee:3c:3b:db:0c:e0:af:1a:ea:36:4c:33:c9:f0:96:f1:14:6a:
         4b:70:5f:d9:ab:fe:f5:86:87:55:77:e8:63:df:1f:94:a4:4d:
         12:e8:26:0d:39:c3:e3:ee:64:98:70:d0:cb:ca:74:ce:87:8c:
         26:49:c1:d4:3b:66:7d:7a:c9:e6:f7:1a:dd:f9:54:af:1d:43:
         5c:4f:3d:97:d5:49:ba:84:22:9d:a9:29:92:dc:44:61:bf:c9:
         e8:60:f7:ca:57:a0:cf:e8:8d:fe:b5:65:f8:c7:a3:81:d0:eb:
         a4:c5:e7:3b:c2:36:1f:39:5e:96:c0:0b:d3:38:a0:94:ef:f0:
         9b:a8:7b:13:f3:c4:dd:17:ca:24:fa:b9:79:aa:d1:9a:d8:9f:
         6e:d3:6f:57:ff:be:ea:71:01:e5:66:be:86:dd:a5:ab:c7:2b:
         e9:8a:9e:0b:77:e1:9a:94:76:f4:8d:73:74:00:7c:26:43:4a:
         b6:db:19:ce:2e:cf:d5:6f:6f:41:0c:fe:06:bd:07:ec:6d:57:
         be:d9:25:f0
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBIDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzYz
RkZDNUFGMTEwLwYDVQQFEyhBNkU5NTg3MDAxOERFQTkzRUU5RkI3OEEzQTFDOEQ3
NjJBQzY0NTZCMB4XDTI2MDkyMjA1NTA1OFoXDTI2MDkyNDA1NTA1OFowGDEWMBQG
A1UEAxMNNmFiMjE3NDMtNzJiOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALhim+UbZEW5OsMU5LHtmGPurgbJ7WY7FEw0KALz0xGMe2/M/HID7djwz4Ao
F2aI1EG1DU5uwhXBdO/DUsf/n00o/pFA3BuzC+EQqY1lgXnzfHil0QjebSxBXh6N
GhL/iJRzV0fHfmRtB4oHJPEz9NvMONfg/z2wjl+SDcafwtkjvj5aaOqx1nlRxX/b
orJk9uwYUbmomC//2c6A+3YdgFGjw9ioFFsaKo2joSvrKI6UxmS/tcju/9JMOcPR
HvFt2tY86k3SFPQ6aO4+YMS5hBhDv9WInzF2JWpb1KJTDLbGKvmlF2bwgfFKNamd
gJydv8zu40FUj0b5UJ3dsN+N05kCAwEAAaOCArgwggK0MB0GA1UdDgQWBBQdrHcH
rshcUZXh/59aluTpi56U+zAfBgNVHSMEGDAWgBSm6VhwAY3qk+6ft4o6HI12KsZF
azAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2M0ZGQzUvQkIzODY3ODJBMTEwMTFGMUI3QkY1NkJFQ0UxRDM4QjAvcHVsWWNB
R042cFB1bjdlS09oeU5kaXJHUldzLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvcHVsWWNBR042cFB1bjdlS09oeU5kaXJHUldzLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzYzRkZDNS9CQjM4Njc4MkExMTAxMUYxQjdCRjU2QkVDRTFE
MzhCMC9wdWxZY0FHTjZwUHVuN2VLT2h5TmRpckdSV3MubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIe7qS4UxED85Mxgw+ajyRhkJgeZ801O
2lqVLCW/sQnGxBF/4yAg1vESwArcKgaH8KoQA1lY0+48O9sM4K8a6jZMM8nwlvEU
aktwX9mr/vWGh1V36GPfH5SkTRLoJg05w+PuZJhw0MvKdM6HjCZJwdQ7Zn16yeb3
Gt35VK8dQ1xPPZfVSbqEIp2pKZLcRGG/yehg98pXoM/ojf61ZfjHo4HQ66TF5zvC
Nh85XpbAC9M4oJTv8JuoexPzxN0XyiT6uXmq0ZrYn27Tb1f/vupxAeVmvobdpavH
K+mKngt34ZqUdvSNc3QAfCZDSrbbGc4uz9Vvb0EM/ga9B+xtV77ZJfA=
-----END CERTIFICATE-----