Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
File:                     7CqGNogipH8Tl9jc5XNMUwJyyWU.mft (raw, json)
Hash identifier:          ZgswySaPxYeHKXjVwWgR6aEXMzUZOzUjX+IXtDOmp00=
Subject key identifier:   4C:86:59:E3:70:BA:71:60:CE:87:AD:C6:DF:82:12:66:A0:15:35:02
Authority key identifier: EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65
Certificate issuer:       /CN=F366DC11AF/serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
Certificate serial:       0972
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
Manifest number:          0968
Signing time:             Sun 11 Oct 2026 01:49:24 +0000
Manifest this update:     Sun 11 Oct 2026 01:49:23 +0000
Manifest next update:     Tue 13 Oct 2026 01:49:23 +0000
Files and hashes:         1: 7CqGNogipH8Tl9jc5XNMUwJyyWU.crl (hash: Q871IEvUjgI9W/oUZQekoMwwo+OzAqEa2Jy/L8e5ca8=)
                          2: CDF267EC962A11F1AB7D3EE4CE1D38B0.roa (hash: zg4XInn5ZQ7pmwsSgpxt4x0fVKl2OnqlLN2rg8imuTQ=)
                          3: 6500DE068A6511F1B08DB3DFCE1D38B0.roa (hash: 29MXciPH3Gu1aj7UAPI2yNVj/TEMvdY5Ea0HCVpZx8U=)
                          4: F2BE981A967811EA8430035BF8AEA228.roa (hash: dllLDZtxzSgyYd/WqilpdpG05+LSe4K0PZ7Qf+hqmSQ=)
                          5: 341C8B76E6A811EAB16AE924F8AEA228.roa (hash: n6dIOaYQglTdS7hxNkLDiY5bWezfODiv8ADCJeufuHM=)
                          6: 9AAE541C962B11F1804FAEE8CE1D38B0.roa (hash: riwA4TgoDLmktylC5BL11hz6/LujdhFjN4PMwkUkvcc=)
                          7: 21EBF2FA808E11EFA13738B8762E951A.roa (hash: lyLTmMKZ2ESJbQ4/CGDElnvp4KAGPEgfFJbkcYzjAzw=)
                          8: 91B3C2A696FE11F1A55481EDCE1D38B0.roa (hash: wViezgn3zihY7XOFaUx0wP080kC6nNBg/ZnQQ9dh0pE=)
                          9: ECD9C68A96FE11F1B071A5EDCE1D38B0.roa (hash: hOsh3Ee+3Hcy2mA/n2V5pl9ECsGPo5cO1HSfr+TCQcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2418 (0x972)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AF, serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
        Validity
            Not Before: Oct 11 01:49:23 2026 GMT
            Not After : Oct 13 01:49:23 2026 GMT
        Subject: CN=6acaeb23-54e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e2:93:3d:bd:47:1d:87:47:0a:76:03:b9:ab:
                    6e:c6:f1:40:7a:5f:e7:23:c9:93:d4:ae:a2:cd:65:
                    71:7e:96:84:9c:c3:d6:47:b2:42:68:98:58:29:b7:
                    bb:2b:86:d3:29:b0:57:d1:3a:ce:eb:a9:8d:3c:98:
                    c3:4c:1a:96:28:2a:af:cc:d6:2f:75:38:52:11:9b:
                    6a:c4:3b:a8:45:33:e0:ea:80:23:11:09:ba:cd:40:
                    da:4c:aa:5b:fb:64:c9:0e:86:3f:07:10:8a:7e:20:
                    ce:e6:56:56:93:ce:92:f4:fc:09:af:9f:56:bf:c7:
                    5b:57:a8:db:82:5a:33:e5:44:b3:f4:49:02:bd:63:
                    48:9f:b5:92:2f:1c:a3:46:9d:99:09:b7:c1:18:61:
                    bf:77:62:0e:c7:9c:ea:52:75:a2:44:05:7f:db:a4:
                    b8:02:6c:93:dd:3a:d8:f3:6d:7a:67:d3:1d:ce:99:
                    c1:bd:d1:72:85:0e:9b:2d:42:cd:dc:e8:50:85:9d:
                    b0:8f:06:54:f2:05:20:bb:e0:03:43:b3:03:c2:8b:
                    70:70:7c:a3:05:3a:bc:dc:d2:0a:49:08:50:df:e1:
                    5b:0a:e3:a8:7e:2e:39:39:1c:05:d1:85:87:92:40:
                    2f:b5:28:17:dc:aa:b1:7f:3e:d7:3b:72:15:fc:65:
                    84:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:86:59:E3:70:BA:71:60:CE:87:AD:C6:DF:82:12:66:A0:15:35:02
            X509v3 Authority Key Identifier:
                keyid:EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:e6:b6:c6:b5:e2:24:13:86:d8:fe:70:f6:55:80:85:3f:58:
         61:a1:b1:99:90:1b:bf:0b:27:e0:b0:d6:38:f3:35:a6:9a:dd:
         c8:ad:43:1f:30:3c:66:3e:97:5c:a3:1e:de:c9:67:a6:32:93:
         90:e8:91:8d:d7:da:db:75:da:6b:cf:42:37:b1:96:77:55:62:
         16:b7:08:98:64:69:68:5b:e6:3d:2f:06:aa:a0:b1:ca:11:70:
         54:af:b3:43:da:18:0d:de:98:9a:30:2b:b3:a1:b4:f6:fc:da:
         b3:14:b1:7a:eb:ba:dc:4f:81:46:d5:86:cc:e6:15:ff:01:73:
         8e:4d:b2:f7:0f:d9:b0:5a:34:72:8a:25:bb:17:c1:e3:62:95:
         e4:ff:1b:14:e0:ee:8d:42:99:81:fb:79:53:69:ff:3e:78:15:
         73:7f:f4:4c:a0:b6:df:40:db:91:aa:cf:59:cf:4b:14:ad:57:
         c8:ee:b1:f3:31:9c:50:76:92:52:dd:45:40:4d:40:09:a2:08:
         32:45:39:a0:91:3a:2a:ed:d4:73:90:a9:e5:65:fb:ac:f2:0e:
         30:9e:24:be:b8:b9:c6:98:01:34:ea:10:5e:02:cf:b3:db:6f:
         11:0a:54:ec:af:ba:a0:4a:35:b0:25:1a:18:12:49:f4:92:fd:
         2e:ff:9a:85
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCXIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkRDMTFBRjExMC8GA1UEBRMoRUMyQTg2MzY4ODIyQTQ3RjEzOTdEOERDRTU3MzRD
NTMwMjcyQzk2NTAeFw0yNjEwMTEwMTQ5MjNaFw0yNjEwMTMwMTQ5MjNaMBgxFjAU
BgNVBAMTDTZhY2FlYjIzLTU0ZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCX4pM9vUcdh0cKdgO5q27G8UB6X+cjyZPUrqLNZXF+loScw9ZHskJomFgp
t7srhtMpsFfROs7rqY08mMNMGpYoKq/M1i91OFIRm2rEO6hFM+DqgCMRCbrNQNpM
qlv7ZMkOhj8HEIp+IM7mVlaTzpL0/Amvn1a/x1tXqNuCWjPlRLP0SQK9Y0iftZIv
HKNGnZkJt8EYYb93Yg7HnOpSdaJEBX/bpLgCbJPdOtjzbXpn0x3OmcG90XKFDpst
Qs3c6FCFnbCPBlTyBSC74ANDswPCi3BwfKMFOrzc0gpJCFDf4VsK46h+Ljk5HAXR
hYeSQC+1KBfcqrF/Ptc7chX8ZYR5AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUTIZZ
43C6cWDOh63G34ISZqAVNQIwHwYDVR0jBBgwFoAU7CqGNogipH8Tl9jc5XNMUwJy
yWUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZEQzExLzhBODc5ODc4OTY3ODExRUFBNDkzNzI1QUY4QUVBMjI4LzdDcUdO
b2dpcEg4VGw5amM1WE5NVXdKeXlXVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdDcUdOb2dpcEg4VGw5amM1WE5NVXdKeXlXVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkRDMTEvOEE4Nzk4Nzg5Njc4MTFFQUE0OTM3MjVBRjhB
RUEyMjgvN0NxR05vZ2lwSDhUbDlqYzVYTk1Vd0p5eVdVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBr5rbGteIkE4bY/nD2VYCFP1hhobGZ
kBu/CyfgsNY48zWmmt3IrUMfMDxmPpdcox7eyWemMpOQ6JGN19rbddprz0I3sZZ3
VWIWtwiYZGloW+Y9LwaqoLHKEXBUr7ND2hgN3piaMCuzobT2/NqzFLF667rcT4FG
1YbM5hX/AXOOTbL3D9mwWjRyiiW7F8HjYpXk/xsU4O6NQpmB+3lTaf8+eBVzf/RM
oLbfQNuRqs9Zz0sUrVfI7rHzMZxQdpJS3UVATUAJoggyRTmgkToq7dRzkKnlZfus
8g4wniS+uLnGmAE06hBeAs+z228RClTsr7qgSjWwJRoYEkn0kv0u/5qF
-----END CERTIFICATE-----