Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
File:                     7CqGNogipH8Tl9jc5XNMUwJyyWU.mft (raw, json)
Hash identifier:          roHZkAp5BiLG5b+NwHUfEES2eatjpBoZsbM5DAFfC8Q=
Subject key identifier:   B5:FC:F3:F1:A0:C5:8A:8F:6B:3D:EE:71:3A:F6:37:E6:EA:FB:4B:77
Authority key identifier: EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65
Certificate issuer:       /CN=F366DC11AF/serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
Certificate serial:       0974
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
Manifest number:          096A
Signing time:             Tue 13 Oct 2026 01:48:24 +0000
Manifest this update:     Tue 13 Oct 2026 01:48:24 +0000
Manifest next update:     Thu 15 Oct 2026 01:48:24 +0000
Files and hashes:         1: 7CqGNogipH8Tl9jc5XNMUwJyyWU.crl (hash: pgym0wWA6+a4Cw4dLwSxfPRttopdT3skDoEuVA0fT8I=)
                          2: CDF267EC962A11F1AB7D3EE4CE1D38B0.roa (hash: zg4XInn5ZQ7pmwsSgpxt4x0fVKl2OnqlLN2rg8imuTQ=)
                          3: 6500DE068A6511F1B08DB3DFCE1D38B0.roa (hash: 29MXciPH3Gu1aj7UAPI2yNVj/TEMvdY5Ea0HCVpZx8U=)
                          4: F2BE981A967811EA8430035BF8AEA228.roa (hash: dllLDZtxzSgyYd/WqilpdpG05+LSe4K0PZ7Qf+hqmSQ=)
                          5: 341C8B76E6A811EAB16AE924F8AEA228.roa (hash: n6dIOaYQglTdS7hxNkLDiY5bWezfODiv8ADCJeufuHM=)
                          6: 9AAE541C962B11F1804FAEE8CE1D38B0.roa (hash: riwA4TgoDLmktylC5BL11hz6/LujdhFjN4PMwkUkvcc=)
                          7: 21EBF2FA808E11EFA13738B8762E951A.roa (hash: lyLTmMKZ2ESJbQ4/CGDElnvp4KAGPEgfFJbkcYzjAzw=)
                          8: 91B3C2A696FE11F1A55481EDCE1D38B0.roa (hash: wViezgn3zihY7XOFaUx0wP080kC6nNBg/ZnQQ9dh0pE=)
                          9: ECD9C68A96FE11F1B071A5EDCE1D38B0.roa (hash: hOsh3Ee+3Hcy2mA/n2V5pl9ECsGPo5cO1HSfr+TCQcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 01:48:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2420 (0x974)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366DC11AF, serialNumber=EC2A86368822A47F1397D8DCE5734C530272C965
        Validity
            Not Before: Oct 13 01:48:24 2026 GMT
            Not After : Oct 15 01:48:24 2026 GMT
        Subject: CN=6acd8de8-d3fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:5e:00:d5:c2:e2:ac:23:5a:e8:5a:33:0f:e1:
                    3d:a0:3a:03:11:9e:4e:03:f5:f0:2f:12:56:ec:ea:
                    2b:4b:fd:04:58:66:30:b7:94:5e:5f:d0:b0:9e:52:
                    d0:1c:b3:03:13:fc:7a:71:8b:cc:91:17:0b:59:51:
                    d5:d9:f1:de:06:3d:f2:c9:7b:39:0d:82:36:01:58:
                    9f:3a:b2:db:b0:50:1b:79:14:ff:23:01:65:7e:fb:
                    29:3d:9b:de:f3:dc:55:06:78:be:46:77:73:e9:df:
                    53:46:f0:7e:4c:70:3e:7b:5f:52:7e:46:19:16:a8:
                    37:4b:32:b9:0c:7f:20:08:c6:8e:e8:f0:96:32:e3:
                    a3:31:b5:4d:06:51:ff:91:22:f3:2d:68:3b:58:86:
                    1a:cd:b7:12:56:45:b5:a2:d7:b1:44:8b:c4:10:74:
                    b9:cc:1e:6a:9e:83:35:02:b3:02:16:1c:14:00:4e:
                    bf:fd:ec:16:4c:47:88:3a:6e:62:44:58:e0:19:2b:
                    e4:e4:71:83:31:7e:fa:da:28:bd:af:77:ed:e9:d7:
                    19:29:e4:57:a2:0a:6c:79:c7:0e:70:26:11:cb:f9:
                    af:ef:4e:92:71:7d:f9:4a:53:b0:d5:43:5b:80:12:
                    6d:4f:4f:e2:29:1b:2b:1d:e8:2a:2a:62:24:da:d4:
                    d4:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:FC:F3:F1:A0:C5:8A:8F:6B:3D:EE:71:3A:F6:37:E6:EA:FB:4B:77
            X509v3 Authority Key Identifier:
                keyid:EC:2A:86:36:88:22:A4:7F:13:97:D8:DC:E5:73:4C:53:02:72:C9:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7CqGNogipH8Tl9jc5XNMUwJyyWU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366DC11/8A879878967811EAA493725AF8AEA228/7CqGNogipH8Tl9jc5XNMUwJyyWU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:a8:6a:11:36:3a:0a:e1:76:f3:76:35:fd:1c:df:bf:5e:27:
         ac:dd:21:95:a0:88:40:3f:6d:2d:84:48:3e:0a:30:81:bf:7d:
         64:2a:a6:87:91:ec:1c:6a:63:f0:51:6e:4e:11:30:2c:b9:4e:
         de:58:49:33:54:a3:37:b1:26:6b:a0:ea:ae:e9:85:da:99:03:
         a3:65:cf:91:b1:ea:83:54:77:e7:de:6e:be:8e:dc:88:aa:d4:
         b3:30:d3:40:9d:e2:97:a9:af:45:36:2f:55:94:ac:10:78:a4:
         5e:39:31:cd:3f:3e:5e:ae:9a:fc:5b:54:3d:6b:e5:6d:c2:c5:
         cb:2e:cd:08:41:1f:bb:1d:88:62:b8:e2:53:8b:a1:13:fe:9e:
         52:4a:4b:f6:80:4d:82:76:54:59:77:ee:24:44:69:ae:cb:4b:
         24:1a:7d:64:b0:0e:48:18:1a:6c:35:2c:b3:6e:0b:cf:b5:15:
         02:86:5f:cf:46:c4:ce:26:b1:a4:1c:1f:39:00:58:87:01:ac:
         d6:21:2a:5b:c0:fd:12:45:82:fb:63:19:a5:79:eb:bd:ae:01:
         aa:d8:36:59:60:f4:a9:0f:72:67:ac:f1:8c:85:bc:5c:6d:78:
         2e:22:3e:02:46:84:87:8c:6d:2d:fe:c6:a7:61:7a:cb:b9:87:
         cb:a2:e1:c8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCXQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkRDMTFBRjExMC8GA1UEBRMoRUMyQTg2MzY4ODIyQTQ3RjEzOTdEOERDRTU3MzRD
NTMwMjcyQzk2NTAeFw0yNjEwMTMwMTQ4MjRaFw0yNjEwMTUwMTQ4MjRaMBgxFjAU
BgNVBAMTDTZhY2Q4ZGU4LWQzZmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDiXgDVwuKsI1roWjMP4T2gOgMRnk4D9fAvElbs6itL/QRYZjC3lF5f0LCe
UtAcswMT/Hpxi8yRFwtZUdXZ8d4GPfLJezkNgjYBWJ86stuwUBt5FP8jAWV++yk9
m97z3FUGeL5Gd3Pp31NG8H5McD57X1J+RhkWqDdLMrkMfyAIxo7o8JYy46MxtU0G
Uf+RIvMtaDtYhhrNtxJWRbWi17FEi8QQdLnMHmqegzUCswIWHBQATr/97BZMR4g6
bmJEWOAZK+TkcYMxfvraKL2vd+3p1xkp5FeiCmx5xw5wJhHL+a/vTpJxfflKU7DV
Q1uAEm1PT+IpGysd6CoqYiTa1NR1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUtfzz
8aDFio9rPe5xOvY35ur7S3cwHwYDVR0jBBgwFoAU7CqGNogipH8Tl9jc5XNMUwJy
yWUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZEQzExLzhBODc5ODc4OTY3ODExRUFBNDkzNzI1QUY4QUVBMjI4LzdDcUdO
b2dpcEg4VGw5amM1WE5NVXdKeXlXVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdDcUdOb2dpcEg4VGw5amM1WE5NVXdKeXlXVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkRDMTEvOEE4Nzk4Nzg5Njc4MTFFQUE0OTM3MjVBRjhB
RUEyMjgvN0NxR05vZ2lwSDhUbDlqYzVYTk1Vd0p5eVdVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCcqGoRNjoK4XbzdjX9HN+/Xies3SGV
oIhAP20thEg+CjCBv31kKqaHkewcamPwUW5OETAsuU7eWEkzVKM3sSZroOqu6YXa
mQOjZc+RseqDVHfn3m6+jtyIqtSzMNNAneKXqa9FNi9VlKwQeKReOTHNPz5erpr8
W1Q9a+VtwsXLLs0IQR+7HYhiuOJTi6ET/p5SSkv2gE2CdlRZd+4kRGmuy0skGn1k
sA5IGBpsNSyzbgvPtRUChl/PRsTOJrGkHB85AFiHAazWISpbwP0SRYL7Yxmleeu9
rgGq2DZZYPSpD3JnrPGMhbxcbXguIj4CRoSHjG0t/sanYXrLuYfLouHI
-----END CERTIFICATE-----