Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
File:                     C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft (raw, json)
Hash identifier:          jFCCXh2eWrxm7Us9aFTPc6QTHOlFVaJHNrXf4ZROQmg=
Subject key identifier:   C7:BE:9C:87:E2:B1:3E:EC:1D:5C:65:59:5A:45:EE:A0:02:3D:AD:CD
Authority key identifier: 0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F
Certificate issuer:       /CN=F3645501AF/serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
Certificate serial:       095E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
Manifest number:          0959
Signing time:             Thu 24 Sep 2026 01:48:56 +0000
Manifest this update:     Thu 24 Sep 2026 01:48:56 +0000
Manifest next update:     Sat 26 Sep 2026 01:48:56 +0000
Files and hashes:         1: C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl (hash: 7gWxHEkMTJMM6cN++R/V6NVi74ugWnfupqyzu/esB7c=)
                          2: C69507C6303111F08DE721DEDAE4EC9C.roa (hash: n1LnT/xuX8ossK6e1Qu5ErVwbY8lo9OUKGVmWsM35RE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 01:48:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2398 (0x95e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645501AF, serialNumber=0BBA40F550DE49EEC572917124EE008A24C44D0F
        Validity
            Not Before: Sep 24 01:48:56 2026 GMT
            Not After : Sep 26 01:48:56 2026 GMT
        Subject: CN=6ab48188-4e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:1b:90:b5:8e:a0:3d:42:88:43:de:c7:f0:
                    9c:28:06:9c:ed:bf:a1:b4:b3:7e:6f:c9:2c:13:a8:
                    e8:8b:9c:a0:69:ee:53:55:d3:51:8a:f6:ca:54:cc:
                    8a:0b:f1:e1:64:d6:03:e4:46:52:72:fd:6c:44:21:
                    a1:8f:b1:51:d0:d7:c3:4a:9a:20:1f:e1:fc:a7:72:
                    2e:fc:5f:17:1d:7a:99:3f:fb:66:f6:79:64:6a:6f:
                    37:50:21:e6:ce:c9:98:41:5c:a5:3f:02:11:4d:54:
                    d4:70:82:c3:b7:a9:e8:55:8a:cb:b0:ef:d3:17:21:
                    f2:c3:8e:9e:5c:c2:d2:33:ad:e4:40:79:0d:cc:9a:
                    df:4f:03:dd:0b:6b:8d:69:9b:ee:ef:42:dd:47:64:
                    c4:fa:3c:6f:35:88:06:7d:85:25:8a:47:7a:b5:6a:
                    e4:8b:bd:29:de:12:01:98:49:ed:fe:00:59:44:d3:
                    4a:66:2a:50:23:95:11:ec:cd:82:ea:0a:dc:e2:94:
                    eb:bc:0a:f4:eb:b1:a9:64:95:cc:d8:e4:6b:39:99:
                    c2:a6:1f:ca:1b:1c:14:0b:3a:d0:2b:c0:64:19:44:
                    f8:3f:c9:fe:fd:1f:04:9e:59:d5:fb:f0:b3:45:cb:
                    6b:a3:bb:c4:4f:d9:7f:08:84:29:eb:e5:1d:bf:d3:
                    cc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BE:9C:87:E2:B1:3E:EC:1D:5C:65:59:5A:45:EE:A0:02:3D:AD:CD
            X509v3 Authority Key Identifier:
                keyid:0B:BA:40:F5:50:DE:49:EE:C5:72:91:71:24:EE:00:8A:24:C4:4D:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/C7pA9VDeSe7FcpFxJO4AiiTETQ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645501/9CDFC738915111EAA5A73044F8AEA228/C7pA9VDeSe7FcpFxJO4AiiTETQ8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e6:90:41:00:76:64:21:66:59:44:72:0e:ee:cb:15:02:b7:
         e1:74:5b:81:64:75:37:98:d2:79:50:7a:31:93:55:30:7e:43:
         83:f9:2c:2a:08:94:b3:2b:17:a2:3f:63:4f:d2:63:e5:05:b6:
         db:bf:38:f7:c9:fe:5e:e8:4c:dd:58:44:48:d5:5f:20:31:b3:
         84:24:8b:90:de:f4:be:29:90:80:56:b7:bb:d2:52:72:3f:83:
         64:86:ce:2f:69:d6:db:d6:4f:aa:ea:ce:93:a4:47:94:ff:3b:
         86:b1:ce:47:ae:8f:b1:98:6c:1c:d6:be:7f:aa:4a:d9:f2:d7:
         1c:b3:b5:8a:be:40:a0:29:75:4e:54:29:69:4b:6f:7c:71:5e:
         49:33:a1:85:d9:77:1b:2b:37:17:95:59:a8:9d:77:9a:6e:c2:
         09:e3:a0:2b:7e:da:ac:67:dc:34:71:23:da:1e:aa:2a:d5:e2:
         11:f9:13:d2:37:c1:95:00:98:b7:7d:cc:25:9b:d4:41:55:57:
         d6:32:b4:77:d7:ed:1b:7b:ce:b8:52:10:d1:f3:00:cf:d2:b9:
         a0:6e:32:fa:c4:47:da:2c:2e:0f:28:34:59:7b:d8:19:21:88:
         0c:86:e9:45:37:b3:8e:77:45:fa:b1:63:4f:84:dd:99:16:40:
         c5:41:d6:01
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCV4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU1MDFBRjExMC8GA1UEBRMoMEJCQTQwRjU1MERFNDlFRUM1NzI5MTcxMjRFRTAw
OEEyNEM0NEQwRjAeFw0yNjA5MjQwMTQ4NTZaFw0yNjA5MjYwMTQ4NTZaMBgxFjAU
BgNVBAMTDTZhYjQ4MTg4LTRlN2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDE7BuQtY6gPUKIQ97H8JwoBpztv6G0s35vySwTqOiLnKBp7lNV01GK9spU
zIoL8eFk1gPkRlJy/WxEIaGPsVHQ18NKmiAf4fynci78Xxcdepk/+2b2eWRqbzdQ
IebOyZhBXKU/AhFNVNRwgsO3qehVisuw79MXIfLDjp5cwtIzreRAeQ3Mmt9PA90L
a41pm+7vQt1HZMT6PG81iAZ9hSWKR3q1auSLvSneEgGYSe3+AFlE00pmKlAjlRHs
zYLqCtzilOu8CvTrsalklczY5Gs5mcKmH8obHBQLOtArwGQZRPg/yf79HwSeWdX7
8LNFy2uju8RP2X8IhCnr5R2/08zjAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUx76c
h+KxPuwdXGVZWkXuoAI9rc0wHwYDVR0jBBgwFoAUC7pA9VDeSe7FcpFxJO4AiiTE
TQ8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NTAxLzlDREZDNzM4OTE1MTExRUFBNUE3MzA0NEY4QUVBMjI4L0M3cEE5
VkRlU2U3RmNwRnhKTzRBaWlURVRROC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0M3cEE5VkRlU2U3RmNwRnhKTzRBaWlURVRROC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU1MDEvOUNERkM3Mzg5MTUxMTFFQUE1QTczMDQ0RjhB
RUEyMjgvQzdwQTlWRGVTZTdGY3BGeEpPNEFpaVRFVFE4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB15pBBAHZkIWZZRHIO7ssVArfhdFuB
ZHU3mNJ5UHoxk1UwfkOD+SwqCJSzKxeiP2NP0mPlBbbbvzj3yf5e6EzdWERI1V8g
MbOEJIuQ3vS+KZCAVre70lJyP4Nkhs4vadbb1k+q6s6TpEeU/zuGsc5Hro+xmGwc
1r5/qkrZ8tccs7WKvkCgKXVOVClpS298cV5JM6GF2XcbKzcXlVmonXeabsIJ46Ar
ftqsZ9w0cSPaHqoq1eIR+RPSN8GVAJi3fcwlm9RBVVfWMrR31+0be864UhDR8wDP
0rmgbjL6xEfaLC4PKDRZe9gZIYgMhulFN7OOd0X6sWNPhN2ZFkDFQdYB
-----END CERTIFICATE-----