Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
File:                     xtzY6Teskg9K_SJ71pwLimdpcZA.mft (raw, json)
Hash identifier:          4RVKax2ChZV5kO6FoAhricHQGro27gDeg6AJN1YKWaU=
Subject key identifier:   4D:27:2F:7C:D3:36:B2:51:49:94:2E:D5:4B:A5:58:26:88:E4:2B:FB
Authority key identifier: C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90
Certificate issuer:       /CN=F3642C0FAF/serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
Certificate serial:       067A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
Manifest number:          067A
Signing time:             Thu 24 Sep 2026 02:41:46 +0000
Manifest this update:     Thu 24 Sep 2026 02:41:45 +0000
Manifest next update:     Sat 26 Sep 2026 02:41:45 +0000
Files and hashes:         1: xtzY6Teskg9K_SJ71pwLimdpcZA.crl (hash: kLCMZkJfGVxX3zHU8BpCBTXY7jPMCBS1/EQtti5F5d8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:41:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1658 (0x67a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3642C0FAF, serialNumber=C6DCD8E937AC920F4AFD227BD69C0B8A67697190
        Validity
            Not Before: Sep 24 02:41:45 2026 GMT
            Not After : Sep 26 02:41:45 2026 GMT
        Subject: CN=6ab48dea-a4db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e9:12:ed:c1:c8:8f:97:60:d8:b9:52:cc:a0:
                    37:fb:07:dd:7e:2e:1d:a4:f8:b8:00:3e:ee:74:0a:
                    7b:be:7e:5e:52:4d:57:cb:9e:d5:c3:35:fc:cf:7f:
                    a7:09:5b:63:9d:93:88:07:7b:cb:fc:a3:6a:4d:24:
                    86:4b:3a:c7:2d:ae:ab:ce:e7:bd:38:1d:86:ed:92:
                    5a:aa:6f:f9:1a:10:06:28:ee:00:98:21:ea:66:eb:
                    44:66:53:8a:e4:6f:89:b4:36:1d:ef:83:9f:41:73:
                    49:66:96:45:51:49:83:9f:c9:11:74:50:01:61:57:
                    14:09:12:f0:14:ed:11:94:70:0f:8e:76:31:1f:ab:
                    d2:38:81:3d:90:32:35:29:b4:d6:67:0e:ca:ca:e6:
                    8b:21:69:c7:17:1a:ba:b2:f9:28:2f:9a:58:28:0b:
                    d6:2b:1c:30:5b:d4:f5:49:e6:b7:1f:34:12:25:d6:
                    23:8e:5e:34:8d:02:77:35:5d:12:43:de:62:36:aa:
                    5c:4f:c0:4d:e9:e2:ef:0e:fb:e5:86:e7:e5:d0:87:
                    10:0b:c6:22:fc:de:a8:ac:a2:3b:41:33:36:6b:49:
                    6c:54:8e:9d:7f:3f:73:b8:4b:ce:35:07:1c:fa:92:
                    78:0e:37:c3:4c:70:62:28:59:bb:b3:46:f0:d6:e8:
                    4c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:27:2F:7C:D3:36:B2:51:49:94:2E:D5:4B:A5:58:26:88:E4:2B:FB
            X509v3 Authority Key Identifier:
                keyid:C6:DC:D8:E9:37:AC:92:0F:4A:FD:22:7B:D6:9C:0B:8A:67:69:71:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/xtzY6Teskg9K_SJ71pwLimdpcZA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3642C0F/464B3886C07911EC8A680AD55A40D577/xtzY6Teskg9K_SJ71pwLimdpcZA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:9e:23:91:dc:e7:ae:8a:96:86:22:25:46:8e:dc:c4:4d:0c:
         bd:36:a6:75:e8:cc:25:4d:f2:46:67:d0:1c:1d:0f:8c:bb:71:
         a8:8d:fc:fb:2c:8f:bb:05:0d:88:c1:e7:57:b4:2e:34:17:12:
         c5:ee:47:f2:46:af:b3:86:f4:af:db:7e:42:3f:2a:a6:9e:2d:
         67:79:4d:b7:46:df:c7:39:ac:8d:11:d3:07:98:50:97:1c:aa:
         0e:19:2f:47:59:90:59:fa:8a:86:28:69:3e:bf:fc:88:76:34:
         41:1a:85:ab:b7:f9:09:79:a9:15:0b:6e:8a:3d:07:71:7c:fa:
         9d:5d:48:b1:ef:91:94:6c:20:8c:c4:35:93:8d:bb:24:8e:5b:
         e5:88:d2:81:c6:7f:c4:3c:23:70:36:eb:ac:c0:8d:3f:04:2e:
         ee:2d:9d:17:8c:eb:e4:9c:91:92:29:df:93:ab:a1:49:3d:62:
         8d:02:20:a6:70:e3:79:a7:a0:2f:ea:e8:c9:65:7c:45:00:9b:
         39:ac:0a:40:fb:ba:0c:8d:07:fb:80:b2:6f:50:dd:f4:8f:dd:
         79:3e:4c:e2:b4:80:82:81:ff:b2:8c:e1:c3:af:73:b7:bd:7d:
         84:bd:b0:3f:d0:97:45:e0:c8:f4:fa:80:75:09:e5:1d:15:b5:
         bf:e1:2f:68
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBnowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDJDMEZBRjExMC8GA1UEBRMoQzZEQ0Q4RTkzN0FDOTIwRjRBRkQyMjdCRDY5QzBC
OEE2NzY5NzE5MDAeFw0yNjA5MjQwMjQxNDVaFw0yNjA5MjYwMjQxNDVaMBgxFjAU
BgNVBAMTDTZhYjQ4ZGVhLWE0ZGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDW6RLtwciPl2DYuVLMoDf7B91+Lh2k+LgAPu50Cnu+fl5STVfLntXDNfzP
f6cJW2Odk4gHe8v8o2pNJIZLOsctrqvO5704HYbtklqqb/kaEAYo7gCYIepm60Rm
U4rkb4m0Nh3vg59Bc0lmlkVRSYOfyRF0UAFhVxQJEvAU7RGUcA+OdjEfq9I4gT2Q
MjUptNZnDsrK5oshaccXGrqy+SgvmlgoC9YrHDBb1PVJ5rcfNBIl1iOOXjSNAnc1
XRJD3mI2qlxPwE3p4u8O++WG5+XQhxALxiL83qisojtBMzZrSWxUjp1/P3O4S841
Bxz6kngON8NMcGIoWbuzRvDW6EyVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTScv
fNM2slFJlC7VS6VYJojkK/swHwYDVR0jBBgwFoAUxtzY6Teskg9K/SJ71pwLimdp
cZAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQyQzBGLzQ2NEIzODg2QzA3OTExRUM4QTY4MEFENTVBNDBENTc3L3h0elk2
VGVza2c5S19TSjcxcHdMaW1kcGNaQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3h0elk2VGVza2c5S19TSjcxcHdMaW1kcGNaQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDJDMEYvNDY0QjM4ODZDMDc5MTFFQzhBNjgwQUQ1NUE0
MEQ1NzcveHR6WTZUZXNrZzlLX1NKNzFwd0xpbWRwY1pBLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBoniOR3OeuipaGIiVGjtzETQy9NqZ1
6MwlTfJGZ9AcHQ+Mu3Gojfz7LI+7BQ2IwedXtC40FxLF7kfyRq+zhvSv235CPyqm
ni1neU23Rt/HOayNEdMHmFCXHKoOGS9HWZBZ+oqGKGk+v/yIdjRBGoWrt/kJeakV
C26KPQdxfPqdXUix75GUbCCMxDWTjbskjlvliNKBxn/EPCNwNuuswI0/BC7uLZ0X
jOvknJGSKd+Tq6FJPWKNAiCmcON5p6Av6ujJZXxFAJs5rApA+7oMjQf7gLJvUN30
j915PkzitICCgf+yjOHDr3O3vX2EvbA/0JdF4Mj0+oB1CeUdFbW/4S9o
-----END CERTIFICATE-----