Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
File:                     Hn0bbhJkcIQEOHneXdkHkKatUAs.mft (raw, json)
Hash identifier:          gNYYZmTk63GW8O6Fc1xdEAuHQ2yHI+/pr8PhO10JCDY=
Subject key identifier:   C8:CF:4E:41:E0:E9:EF:C2:A9:FC:31:B6:BB:F2:7F:54:DF:A4:39:01
Authority key identifier: 1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B
Certificate issuer:       /CN=F3662123AF/serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
Certificate serial:       0594
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
Manifest number:          0592
Signing time:             Sat 14 Nov 2026 03:11:06 +0000
Manifest this update:     Sat 14 Nov 2026 03:11:05 +0000
Manifest next update:     Mon 16 Nov 2026 03:11:05 +0000
Files and hashes:         1: Hn0bbhJkcIQEOHneXdkHkKatUAs.crl (hash: rM0vSOJ9BjzOmoB0bNCHaXA3yoBAPqp9hoRI1ORXY08=)
                          2: 27EE2B4290B311F09FE99A99DAE4EC9C.roa (hash: 08bdIyeGAvENvyYR9kdIYMQj8xo49Was4u9/sqMLubc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1428 (0x594)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3662123AF, serialNumber=1E7D1B6E12647084043879DE5DD90790A6AD500B
        Validity
            Not Before: Nov 14 03:11:05 2026 GMT
            Not After : Nov 16 03:11:05 2026 GMT
        Subject: CN=6af7d14a-e60c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8d:92:79:03:54:eb:09:8b:37:23:8b:64:74:
                    b2:cf:02:91:60:71:5d:29:56:5e:4e:32:69:f3:76:
                    7a:4f:9e:13:51:ca:81:4a:2f:32:3f:4b:5a:73:12:
                    54:d2:47:03:ea:db:0c:77:87:1f:ed:f1:01:0a:85:
                    7b:a8:79:1a:e2:93:d5:1c:6a:69:3a:c5:5e:3e:20:
                    c2:68:7d:5d:7c:58:b3:c2:dd:91:e9:31:f8:51:5c:
                    14:de:91:ee:af:e4:2f:e7:ec:50:ec:fe:0a:ba:fc:
                    22:bc:0c:09:73:de:38:54:0b:bd:02:b8:43:98:09:
                    7a:1b:26:15:f2:a8:5e:fc:3b:ab:a1:a9:97:ff:d0:
                    c8:18:61:34:54:d4:b6:cb:75:1c:92:d7:e9:36:85:
                    fb:fa:cd:50:78:37:3d:c0:6c:35:39:88:1a:f1:4d:
                    e7:8e:47:d3:01:53:72:a7:1a:c2:46:85:89:11:ca:
                    3d:92:13:bb:9b:52:ed:40:87:29:8c:36:2a:a5:bc:
                    82:61:58:5f:34:fd:ea:fc:3c:2c:6e:5d:55:a8:5b:
                    60:d0:bb:7a:1d:63:61:d8:fc:46:50:7e:06:f0:0b:
                    ea:a0:cf:04:ae:88:4e:97:9f:b9:3d:51:89:4d:c5:
                    c9:92:b9:38:3c:e1:59:51:20:3b:ac:4b:53:76:68:
                    94:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CF:4E:41:E0:E9:EF:C2:A9:FC:31:B6:BB:F2:7F:54:DF:A4:39:01
            X509v3 Authority Key Identifier:
                keyid:1E:7D:1B:6E:12:64:70:84:04:38:79:DE:5D:D9:07:90:A6:AD:50:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Hn0bbhJkcIQEOHneXdkHkKatUAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3662123/0F3617B29D2811ED8302EC8AF1222468/Hn0bbhJkcIQEOHneXdkHkKatUAs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:50:3c:77:c8:15:33:7c:6e:43:a5:e5:d3:b7:7c:5f:45:0c:
         a5:63:b2:d9:72:8c:8b:f9:12:71:d0:ab:70:30:9b:33:7b:0f:
         51:87:4a:01:5e:b0:45:0b:33:fb:d3:4a:df:48:be:76:ab:2f:
         1c:e1:08:09:94:3e:9f:4d:b4:78:59:e5:51:c2:79:ba:2f:63:
         10:f6:8f:d3:e2:cc:aa:37:3d:67:be:f6:ba:97:83:07:b6:cb:
         aa:22:9a:45:bf:3e:00:d6:fd:7e:ba:e1:74:77:89:50:73:c9:
         dc:0c:e7:98:fd:ff:e2:22:e4:f1:ee:a5:f9:74:3c:10:70:6d:
         98:6c:91:35:41:c1:57:b8:b0:1d:79:c6:b1:05:ce:3d:86:16:
         9d:42:a8:05:41:99:59:9f:da:4c:57:d8:bc:35:53:c4:8d:fb:
         e6:35:7a:fd:87:95:37:0f:81:eb:8a:73:d5:3e:84:fe:46:8f:
         c9:7f:94:f3:24:09:17:fb:a0:f0:fc:43:c2:76:37:76:4f:d9:
         47:b8:68:e8:c7:61:36:46:a3:6f:73:a1:b9:82:c7:b4:98:17:
         35:c9:bc:ba:56:fd:18:3a:85:e5:63:17:8d:e3:26:4f:4b:1e:
         8b:d8:a0:8e:b0:3a:21:7a:ad:a5:a3:60:fc:4a:91:07:db:41:
         20:a0:f8:d7
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBZQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NjIxMjNBRjExMC8GA1UEBRMoMUU3RDFCNkUxMjY0NzA4NDA0Mzg3OURFNUREOTA3
OTBBNkFENTAwQjAeFw0yNjExMTQwMzExMDVaFw0yNjExMTYwMzExMDVaMBgxFjAU
BgNVBAMTDTZhZjdkMTRhLWU2MGMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpjZJ5A1TrCYs3I4tkdLLPApFgcV0pVl5OMmnzdnpPnhNRyoFKLzI/S1pz
ElTSRwPq2wx3hx/t8QEKhXuoeRrik9Ucamk6xV4+IMJofV18WLPC3ZHpMfhRXBTe
ke6v5C/n7FDs/gq6/CK8DAlz3jhUC70CuEOYCXobJhXyqF78O6uhqZf/0MgYYTRU
1LbLdRyS1+k2hfv6zVB4Nz3AbDU5iBrxTeeOR9MBU3KnGsJGhYkRyj2SE7ubUu1A
hymMNiqlvIJhWF80/er8PCxuXVWoW2DQu3odY2HY/EZQfgbwC+qgzwSuiE6Xn7k9
UYlNxcmSuTg84VlRIDusS1N2aJSDAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUyM9O
QeDp78Kp/DG2u/J/VN+kOQEwHwYDVR0jBBgwFoAUHn0bbhJkcIQEOHneXdkHkKat
UAswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjYyMTIzLzBGMzYxN0IyOUQyODExRUQ4MzAyRUM4QUYxMjIyNDY4L0huMGJi
aEprY0lRRU9IbmVYZGtIa0thdFVBcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0huMGJiaEprY0lRRU9IbmVYZGtIa0thdFVBcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NjIxMjMvMEYzNjE3QjI5RDI4MTFFRDgzMDJFQzhBRjEy
MjI0NjgvSG4wYmJoSmtjSVFFT0huZVhka0hrS2F0VUFzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBfUDx3yBUzfG5DpeXTt3xfRQylY7LZ
coyL+RJx0KtwMJszew9Rh0oBXrBFCzP700rfSL52qy8c4QgJlD6fTbR4WeVRwnm6
L2MQ9o/T4syqNz1nvva6l4MHtsuqIppFvz4A1v1+uuF0d4lQc8ncDOeY/f/iIuTx
7qX5dDwQcG2YbJE1QcFXuLAdecaxBc49hhadQqgFQZlZn9pMV9i8NVPEjfvmNXr9
h5U3D4HrinPVPoT+Ro/Jf5TzJAkX+6Dw/EPCdjd2T9lHuGjox2E2RqNvc6G5gse0
mBc1yby6Vv0YOoXlYxeN4yZPSx6L2KCOsDoheq2lo2D8SpEH20EgoPjX
-----END CERTIFICATE-----