Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
File:                     7heW4OxZE9jIj7q68fgKRZzuOTk.mft (raw, json)
Hash identifier:          T1FYW3nYXvqevHBz07VfzZuH8oBLKMM7zmlwKEhJyN8=
Subject key identifier:   00:D7:10:E3:52:20:64:DB:47:61:4A:CE:39:52:99:72:81:47:72:9C
Authority key identifier: EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39
Certificate issuer:       /CN=F3687682AF/serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
Certificate serial:       03AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
Manifest number:          03A4
Signing time:             Tue 13 Oct 2026 04:08:32 +0000
Manifest this update:     Tue 13 Oct 2026 04:08:31 +0000
Manifest next update:     Thu 15 Oct 2026 04:08:31 +0000
Files and hashes:         1: 7heW4OxZE9jIj7q68fgKRZzuOTk.crl (hash: nETkW/rjO0eFsyCbhh6RXKQh70YzLAz9DVHRnQpaF6A=)
                          2: 0C6F6F06922F11F1B1D1BBC6CE1D38B0.roa (hash: GruJ7hwNmWDVt7uOFkMKZme53jzFS9pAeNoMWiD5IDw=)
                          3: BC30116296F211F18CC449A8CE1D38B0.roa (hash: ORQ7n3coekVtJLCpiwAISUj5z1s9Sm9EXvcBSK7c524=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 04:08:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 939 (0x3ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AF, serialNumber=EE1796E0EC5913D8C88FBABAF1F80A459CEE3939
        Validity
            Not Before: Oct 13 04:08:31 2026 GMT
            Not After : Oct 15 04:08:31 2026 GMT
        Subject: CN=6acdaec0-3bd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a2:4f:ba:50:48:b9:87:ea:6d:23:be:cb:c4:
                    44:8f:d2:29:b7:d7:d5:dd:1c:be:71:bd:72:c4:89:
                    b6:ba:94:13:9f:37:a7:10:be:11:90:33:93:0f:7a:
                    e1:07:fb:54:dc:53:cc:19:cb:bd:38:05:c3:e2:cd:
                    30:63:b4:0b:7a:5a:ce:cc:7a:be:20:53:66:3f:e4:
                    a4:32:78:71:b6:13:11:11:b1:8b:ee:85:89:b6:7a:
                    34:df:81:93:51:08:94:ca:eb:70:2b:e6:66:cd:90:
                    a2:44:55:5d:89:41:ff:e0:24:e5:32:c4:c6:cf:1e:
                    d1:a5:c5:08:56:86:6c:d4:6d:a8:dd:d8:b9:df:c6:
                    17:9f:16:8b:91:da:01:d9:34:70:57:0e:e3:51:59:
                    91:60:03:25:9e:2a:62:68:82:20:81:b9:9e:f2:09:
                    f8:9d:a1:1e:8e:eb:1d:18:5b:1f:bc:46:b5:ab:0c:
                    01:29:60:45:cc:f2:9f:69:ff:93:cf:c5:64:91:e7:
                    37:81:9a:62:72:ed:2e:8c:a2:ae:8b:52:be:ca:00:
                    58:7a:c4:49:e3:9e:93:e9:53:2c:9f:23:82:2e:d5:
                    a7:7b:37:3b:2e:dc:37:59:f5:e3:97:ca:0b:f6:16:
                    5a:73:b5:3d:87:28:8a:4f:d9:4d:28:96:0b:d1:a0:
                    b8:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:D7:10:E3:52:20:64:DB:47:61:4A:CE:39:52:99:72:81:47:72:9C
            X509v3 Authority Key Identifier:
                keyid:EE:17:96:E0:EC:59:13:D8:C8:8F:BA:BA:F1:F8:0A:45:9C:EE:39:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/7heW4OxZE9jIj7q68fgKRZzuOTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/DB80ADB8009211EF9BC14D0D017001B1/7heW4OxZE9jIj7q68fgKRZzuOTk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:c8:ab:ad:9a:26:b8:bb:a5:a3:d9:1a:b2:a4:97:89:81:13:
         bb:86:89:0b:3b:58:6b:66:d2:b5:9a:a7:29:61:f9:9f:2a:1d:
         01:3d:a0:16:88:7c:b3:31:e1:09:b5:9d:40:23:a8:5d:8c:fc:
         34:a2:91:71:e8:f5:46:33:a4:0c:05:da:9d:8a:06:1b:b2:76:
         7e:ae:fa:75:61:21:9a:f1:fc:a7:6a:17:f6:d5:ee:b0:39:2f:
         de:01:9c:40:73:a4:f0:41:82:c7:c5:4d:68:c3:43:e1:56:90:
         04:52:6b:d4:fd:a3:8e:59:f7:48:16:f0:42:45:8f:5c:32:5d:
         75:fa:74:d7:ff:fe:b4:41:4f:ed:06:c7:75:45:78:3b:de:53:
         b6:7b:5b:96:82:d3:81:96:93:8d:eb:e7:47:f7:6e:82:63:7f:
         7a:ed:24:9c:83:8c:f7:b9:59:fa:df:b4:c9:df:5e:a1:32:95:
         dc:83:db:75:47:76:24:75:76:00:cf:17:cb:d3:f5:ac:a0:f8:
         74:66:1a:b1:80:0e:c5:aa:41:dc:4e:d9:ae:4e:a2:9a:2c:e1:
         bc:b8:25:5b:f8:86:c7:ac:95:2d:91:7b:86:84:9a:9d:fe:65:
         bc:06:6c:82:10:18:64:29:77:ae:66:c3:8c:00:57:17:ab:5b:
         49:eb:e7:35
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA6swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
ODc2ODJBRjExMC8GA1UEBRMoRUUxNzk2RTBFQzU5MTNEOEM4OEZCQUJBRjFGODBB
NDU5Q0VFMzkzOTAeFw0yNjEwMTMwNDA4MzFaFw0yNjEwMTUwNDA4MzFaMBgxFjAU
BgNVBAMTDTZhY2RhZWMwLTNiZDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCkok+6UEi5h+ptI77LxESP0im319XdHL5xvXLEiba6lBOfN6cQvhGQM5MP
euEH+1TcU8wZy704BcPizTBjtAt6Ws7Mer4gU2Y/5KQyeHG2ExERsYvuhYm2ejTf
gZNRCJTK63Ar5mbNkKJEVV2JQf/gJOUyxMbPHtGlxQhWhmzUbajd2LnfxhefFouR
2gHZNHBXDuNRWZFgAyWeKmJogiCBuZ7yCfidoR6O6x0YWx+8RrWrDAEpYEXM8p9p
/5PPxWSR5zeBmmJy7S6Moq6LUr7KAFh6xEnjnpPpUyyfI4Iu1ad7Nzsu3DdZ9eOX
ygv2FlpztT2HKIpP2U0olgvRoLgzAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUANcQ
41IgZNtHYUrOOVKZcoFHcpwwHwYDVR0jBBgwFoAU7heW4OxZE9jIj7q68fgKRZzu
OTkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjg3NjgyL0RCODBBREI4MDA5MjExRUY5QkMxNEQwRDAxNzAwMUIxLzdoZVc0
T3haRTlqSWo3cTY4ZmdLUlp6dU9Uay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzdoZVc0T3haRTlqSWo3cTY4ZmdLUlp6dU9Uay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2ODc2ODIvREI4MEFEQjgwMDkyMTFFRjlCQzE0RDBEMDE3
MDAxQjEvN2hlVzRPeFpFOWpJajdxNjhmZ0tSWnp1T1RrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwyKutmia4u6Wj2RqypJeJgRO7hokL
O1hrZtK1mqcpYfmfKh0BPaAWiHyzMeEJtZ1AI6hdjPw0opFx6PVGM6QMBdqdigYb
snZ+rvp1YSGa8fynahf21e6wOS/eAZxAc6TwQYLHxU1ow0PhVpAEUmvU/aOOWfdI
FvBCRY9cMl11+nTX//60QU/tBsd1RXg73lO2e1uWgtOBlpON6+dH926CY3967SSc
g4z3uVn637TJ316hMpXcg9t1R3YkdXYAzxfL0/WsoPh0ZhqxgA7FqkHcTtmuTqKa
LOG8uCVb+IbHrJUtkXuGhJqd/mW8BmyCEBhkKXeuZsOMAFcXq1tJ6+c1
-----END CERTIFICATE-----