Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
File:                     aaGydU0sb2tHJmd6cgRQI2vS7NE.mft (raw, json)
Hash identifier:          mvVeVnWErNgKecfpf3NZKOHpSDqIQ2j34QJb5lxFdVg=
Subject key identifier:   BF:63:36:C0:FA:1B:B8:80:25:ED:D6:6A:0E:30:1A:CC:ED:0C:40:BB
Authority key identifier: 69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1
Certificate issuer:       /CN=F3641DDCAF/serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
Certificate serial:       01C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
Manifest number:          01C7
Signing time:             Sun 27 Sep 2026 05:00:00 +0000
Manifest this update:     Sun 27 Sep 2026 04:59:59 +0000
Manifest next update:     Tue 29 Sep 2026 04:59:59 +0000
Files and hashes:         1: aaGydU0sb2tHJmd6cgRQI2vS7NE.crl (hash: UIGZhg6ydpLXOeXTTnIHAp/k8WHDl6NTzbkN8yUzyPE=)
                          2: 73B4059658CE11F0B51042EFDAE4EC9C.roa (hash: LH5vIdf+4h9q3kvMURVZYnoRUhO4LGq7NT3aZO9J2wU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 456 (0x1c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3641DDCAF, serialNumber=69A1B2754D2C6F6B4726677A720450236BD2ECD1
        Validity
            Not Before: Sep 27 04:59:59 2026 GMT
            Not After : Sep 29 04:59:59 2026 GMT
        Subject: CN=6ab8a2cf-6b8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:66:48:4f:a4:d7:6f:74:29:47:6f:9e:d9:ff:
                    dd:ad:34:50:84:c0:4d:c6:07:5d:d8:70:74:56:b5:
                    88:e8:49:0b:a3:a8:3c:58:1e:05:74:2b:45:47:db:
                    8d:87:bd:0d:da:15:da:f6:1a:21:7c:fd:a8:26:d9:
                    60:c9:3f:2b:9c:be:2a:35:f4:3c:e0:c4:0b:ee:bf:
                    3e:88:35:05:ac:d4:a3:41:f6:63:bd:fb:79:4c:64:
                    c0:6f:f2:c4:bc:f6:ab:76:6f:38:bb:74:d8:22:d1:
                    8c:33:7a:20:f8:07:56:2a:56:cc:8a:d2:95:b9:e5:
                    c6:f6:c4:e5:57:51:4a:37:5f:0b:7c:81:dc:45:a0:
                    43:a7:86:99:7c:8e:04:cd:d9:79:ab:e8:75:73:a3:
                    51:6f:26:c3:59:e9:ef:25:1b:22:27:43:74:0c:65:
                    08:b5:0a:61:8d:ed:df:03:7a:64:1f:fa:45:71:68:
                    46:1b:55:fc:47:9f:15:eb:94:96:d3:d9:b1:21:89:
                    64:e4:23:70:74:07:12:b3:40:f2:87:8f:95:b3:6b:
                    c4:ed:93:c9:01:68:64:fe:a6:de:0c:0a:e9:97:a4:
                    c8:da:33:9f:13:f1:6f:5d:6e:08:b2:79:e4:d8:32:
                    0b:50:96:89:96:b0:28:58:da:68:35:38:db:0e:74:
                    26:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:63:36:C0:FA:1B:B8:80:25:ED:D6:6A:0E:30:1A:CC:ED:0C:40:BB
            X509v3 Authority Key Identifier:
                keyid:69:A1:B2:75:4D:2C:6F:6B:47:26:67:7A:72:04:50:23:6B:D2:EC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aaGydU0sb2tHJmd6cgRQI2vS7NE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3641DDC/91BE992658CD11F086BF7CEADAE4EC9C/aaGydU0sb2tHJmd6cgRQI2vS7NE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:13:2f:78:0f:b2:f4:80:2d:6d:36:1f:b4:59:31:ed:b4:41:
         7b:8e:01:bc:a6:5f:f9:40:c8:8c:a9:06:36:33:82:3b:80:f3:
         1c:6d:cb:c8:ce:41:5a:34:74:81:84:d7:65:58:fb:2c:b2:8f:
         2f:ed:d2:0e:58:de:1f:17:34:1e:b5:6e:d4:4a:4a:43:9e:6e:
         8a:20:16:c1:f7:4c:9a:c5:50:3f:7d:0a:35:10:95:7c:5d:39:
         74:2c:64:58:ff:37:c7:7a:53:82:84:33:5c:79:f1:70:93:70:
         1e:5e:19:0b:7d:bc:a2:6c:ce:25:38:a7:97:47:90:3e:d9:f2:
         8b:09:08:9f:be:c6:3e:db:f3:82:2c:cc:a6:48:60:d8:ba:03:
         fa:d7:72:d1:ca:e1:73:24:34:cf:7e:0b:58:02:86:6b:b3:36:
         02:1a:ad:6b:5c:b5:11:eb:22:83:66:63:6e:bc:3c:0d:1a:c9:
         6b:02:41:74:e6:ac:4d:48:71:87:78:92:aa:9c:05:5c:d8:2e:
         ce:24:de:dd:84:0e:82:ce:fd:f4:50:1c:83:47:e3:c0:35:a2:
         75:0a:32:5b:79:f8:9e:ac:1f:5a:14:a9:ec:40:15:8c:c5:2a:
         c6:c3:3f:79:c7:39:78:02:11:62:c8:ca:88:7d:fa:0c:b1:9e:
         17:a0:d3:83
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAcgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDFERENBRjExMC8GA1UEBRMoNjlBMUIyNzU0RDJDNkY2QjQ3MjY2NzdBNzIwNDUw
MjM2QkQyRUNEMTAeFw0yNjA5MjcwNDU5NTlaFw0yNjA5MjkwNDU5NTlaMBgxFjAU
BgNVBAMTDTZhYjhhMmNmLTZiOGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDNZkhPpNdvdClHb57Z/92tNFCEwE3GB13YcHRWtYjoSQujqDxYHgV0K0VH
242HvQ3aFdr2GiF8/agm2WDJPyucvio19DzgxAvuvz6INQWs1KNB9mO9+3lMZMBv
8sS89qt2bzi7dNgi0YwzeiD4B1YqVsyK0pW55cb2xOVXUUo3Xwt8gdxFoEOnhpl8
jgTN2Xmr6HVzo1FvJsNZ6e8lGyInQ3QMZQi1CmGN7d8DemQf+kVxaEYbVfxHnxXr
lJbT2bEhiWTkI3B0BxKzQPKHj5Wza8Ttk8kBaGT+pt4MCumXpMjaM58T8W9dbgiy
eeTYMgtQlomWsChY2mg1ONsOdCYxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUv2M2
wPobuIAl7dZqDjAazO0MQLswHwYDVR0jBBgwFoAUaaGydU0sb2tHJmd6cgRQI2vS
7NEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQxRERDLzkxQkU5OTI2NThDRDExRjA4NkJGN0NFQURBRTRFQzlDL2FhR3lk
VTBzYjJ0SEptZDZjZ1JRSTJ2UzdORS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FhR3lkVTBzYjJ0SEptZDZjZ1JRSTJ2UzdORS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDFEREMvOTFCRTk5MjY1OENEMTFGMDg2QkY3Q0VBREFF
NEVDOUMvYWFHeWRVMHNiMnRISm1kNmNnUlFJMnZTN05FLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB3Ey94D7L0gC1tNh+0WTHttEF7jgG8
pl/5QMiMqQY2M4I7gPMcbcvIzkFaNHSBhNdlWPssso8v7dIOWN4fFzQetW7USkpD
nm6KIBbB90yaxVA/fQo1EJV8XTl0LGRY/zfHelOChDNcefFwk3AeXhkLfbyibM4l
OKeXR5A+2fKLCQifvsY+2/OCLMymSGDYugP613LRyuFzJDTPfgtYAoZrszYCGq1r
XLUR6yKDZmNuvDwNGslrAkF05qxNSHGHeJKqnAVc2C7OJN7dhA6Czv30UByDR+PA
NaJ1CjJbefierB9aFKnsQBWMxSrGwz95xzl4AhFiyMqIffoMsZ4XoNOD
-----END CERTIFICATE-----