Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
File:                     D4kdL9FUeF3D5rPHlmdkbAu09W0.mft (raw, json)
Hash identifier:          GgQWMRQAQXNCBt0IFCxWLy2LY53qeqtE/sGPGB4k1x4=
Subject key identifier:   DE:56:79:87:D6:31:8B:34:97:C8:82:CD:44:91:64:91:3D:E8:0A:F8
Authority key identifier: 0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D
Certificate issuer:       /CN=F3641110AF/serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
Certificate serial:       E6
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
Manifest number:          DD
Signing time:             Fri 25 Sep 2026 05:29:24 +0000
Manifest this update:     Fri 25 Sep 2026 05:29:23 +0000
Manifest next update:     Sun 27 Sep 2026 05:29:23 +0000
Files and hashes:         1: D4kdL9FUeF3D5rPHlmdkbAu09W0.crl (hash: adnz9T36ZvXkqrKEGY/ErA1i2/wzQb4qAqu85/EuTGU=)
                          2: 70AA590E1E2B11F196DC24ADDAE4EC9C.roa (hash: uMkdtVFtuvQqxiv3P3QzJvhJoUMANuEicE2OUjLsOMI=)
                          3: A90F75EA1E2B11F1A74454ADDAE4EC9C.roa (hash: l0pI77i/3rExThBukFhyhrFHwyUmiyAZc83nnRzr++8=)
                          4: F6E916CC1E2B11F1B79D80B0DAE4EC9C.roa (hash: C6BbRAJGJhQ26iah4zjRl/7QOH2SLtDjfPiGNF+cAyk=)
                          5: CBEEA3561E2B11F1961C59ADDAE4EC9C.roa (hash: pvY9TQ8JUnIxht52zhSA0rWfrxaSQC/iSnp5NKbibUM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 05:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3641110AF, serialNumber=0F891D2FD154785DC3E6B3C79667646C0BB4F56D
        Validity
            Not Before: Sep 25 05:29:23 2026 GMT
            Not After : Sep 27 05:29:23 2026 GMT
        Subject: CN=6ab606b4-40ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:b8:9e:27:1f:09:e3:63:56:b3:93:7b:1b:
                    39:ef:b6:8c:22:2c:f1:9d:3c:e2:7d:d6:60:24:59:
                    5d:dd:5a:5d:9f:07:cc:2e:23:7c:4f:63:18:fc:c7:
                    2b:65:e7:98:42:79:e5:c7:59:54:54:f6:30:e0:fe:
                    54:37:ae:a1:0c:e2:e3:7b:bf:41:11:85:f3:3f:08:
                    46:5c:46:ca:50:6b:03:be:cd:8c:95:ba:68:1c:5a:
                    da:a2:91:c1:35:68:5b:bf:86:02:d5:81:6a:47:ed:
                    69:7a:f0:6c:9a:2c:79:70:cc:84:d4:e5:18:2c:bb:
                    a8:c0:9f:4b:3f:4e:2c:87:1b:13:b2:3f:d3:5b:82:
                    ff:22:13:0d:6d:b3:09:d3:f7:cb:47:9e:ba:40:25:
                    16:d7:25:09:41:f1:34:77:a8:8f:3c:60:e4:7e:06:
                    32:15:f7:96:53:5f:4c:7a:96:6a:39:89:00:83:51:
                    64:34:ee:69:68:13:ef:f9:de:68:f5:b9:ec:3a:1a:
                    ef:7c:a3:de:86:5d:8c:4d:af:eb:ac:84:35:ec:f1:
                    84:07:06:7a:36:fc:eb:63:e5:ca:35:92:38:f6:cc:
                    da:fe:84:ff:1c:99:a3:cd:60:9f:91:db:61:d4:d3:
                    bf:a9:2a:8a:89:2c:3b:61:08:f7:e6:b2:84:6f:59:
                    1a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:56:79:87:D6:31:8B:34:97:C8:82:CD:44:91:64:91:3D:E8:0A:F8
            X509v3 Authority Key Identifier:
                keyid:0F:89:1D:2F:D1:54:78:5D:C3:E6:B3:C7:96:67:64:6C:0B:B4:F5:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/D4kdL9FUeF3D5rPHlmdkbAu09W0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641110/59627DEC193711F18063378ADAE4EC9C/D4kdL9FUeF3D5rPHlmdkbAu09W0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:bc:c3:71:70:bd:95:1c:a6:72:90:27:1e:58:0d:34:19:
         ef:d1:20:96:75:77:4a:ab:1b:18:f9:2e:f1:8a:52:95:37:e5:
         e5:19:a1:11:03:62:10:3f:b4:8a:30:2a:36:7c:2e:3e:e9:d8:
         6f:8b:a8:83:d9:7d:65:ad:89:73:59:a5:5b:b0:3c:a2:e0:f5:
         c0:76:2c:cd:d3:13:6b:44:0d:cd:64:16:a4:cf:cc:03:28:32:
         ed:87:59:71:f6:a3:43:04:b6:31:ba:af:64:3b:9f:8b:01:c9:
         6a:4e:cb:dd:16:b7:2f:62:09:6e:7b:85:ae:04:16:1a:99:ee:
         bf:3b:f0:9b:af:6e:75:45:28:41:9d:a9:ca:cb:91:f9:2c:38:
         f8:8f:71:98:28:66:aa:5d:ac:8c:7b:39:3c:90:e7:80:53:09:
         dc:21:55:88:fe:51:6d:07:aa:7d:98:16:7c:10:f7:2f:35:4f:
         97:87:b8:52:64:8b:fa:bc:fd:21:34:75:85:c0:6c:dc:92:e3:
         3a:f7:9f:8a:a3:06:3d:19:b3:be:73:b4:30:6e:cb:33:c6:53:
         ae:e8:e1:90:a9:fc:b6:cf:26:2a:76:9f:47:f0:c1:7c:59:f6:
         07:84:9e:a6:0d:9d:17:a2:29:06:6e:ae:e7:0b:0b:b4:a0:c6:
         95:3e:f6:0e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDExMTBBRjExMC8GA1UEBRMoMEY4OTFEMkZEMTU0Nzg1REMzRTZCM0M3OTY2NzY0
NkMwQkI0RjU2RDAeFw0yNjA5MjUwNTI5MjNaFw0yNjA5MjcwNTI5MjNaMBgxFjAU
BgNVBAMTDTZhYjYwNmI0LTQwYWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC5I7ieJx8J42NWs5N7GznvtowiLPGdPOJ91mAkWV3dWl2fB8wuI3xPYxj8
xytl55hCeeXHWVRU9jDg/lQ3rqEM4uN7v0ERhfM/CEZcRspQawO+zYyVumgcWtqi
kcE1aFu/hgLVgWpH7Wl68GyaLHlwzITU5Rgsu6jAn0s/TiyHGxOyP9Nbgv8iEw1t
swnT98tHnrpAJRbXJQlB8TR3qI88YOR+BjIV95ZTX0x6lmo5iQCDUWQ07mloE+/5
3mj1uew6Gu98o96GXYxNr+ushDXs8YQHBno2/Otj5co1kjj2zNr+hP8cmaPNYJ+R
22HU07+pKoqJLDthCPfmsoRvWRoHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU3lZ5
h9YxizSXyILNRJFkkT3oCvgwHwYDVR0jBBgwFoAUD4kdL9FUeF3D5rPHlmdkbAu0
9W0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQxMTEwLzU5NjI3REVDMTkzNzExRjE4MDYzMzc4QURBRTRFQzlDL0Q0a2RM
OUZVZUYzRDVyUEhsbWRrYkF1MDlXMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0Q0a2RMOUZVZUYzRDVyUEhsbWRrYkF1MDlXMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDExMTAvNTk2MjdERUMxOTM3MTFGMTgwNjMzNzhBREFF
NEVDOUMvRDRrZEw5RlVlRjNENXJQSGxtZGtiQXUwOVcwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAjTLzDcXC9lRymcpAnHlgNNBnv0SCW
dXdKqxsY+S7xilKVN+XlGaERA2IQP7SKMCo2fC4+6dhvi6iD2X1lrYlzWaVbsDyi
4PXAdizN0xNrRA3NZBakz8wDKDLth1lx9qNDBLYxuq9kO5+LAclqTsvdFrcvYglu
e4WuBBYame6/O/Cbr251RShBnanKy5H5LDj4j3GYKGaqXayMezk8kOeAUwncIVWI
/lFtB6p9mBZ8EPcvNU+Xh7hSZIv6vP0hNHWFwGzckuM695+KowY9GbO+c7Qwbssz
xlOu6OGQqfy2zyYqdp9H8MF8WfYHhJ6mDZ0XoikGbq7nCwu0oMaVPvYO
-----END CERTIFICATE-----