Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
File:                     mHDlywkkDsWdzHR_wANn6a86DM0.mft (raw, json)
Hash identifier:          Lb0cq9ukN/xVY8+eBBG0SWx8jCsrW/c7pBwHfpL3hEw=
Subject key identifier:   86:99:AC:07:A9:BB:8B:20:5D:66:AC:DE:F2:AB:13:58:15:52:F9:25
Authority key identifier: 98:70:E5:CB:09:24:0E:C5:9D:CC:74:7F:C0:03:67:E9:AF:3A:0C:CD
Certificate issuer:       /CN=F3692D54AF/serialNumber=9870E5CB09240EC59DCC747FC00367E9AF3A0CCD
Certificate serial:       86
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
Manifest number:          85
Signing time:             Sun 27 Sep 2026 05:39:36 +0000
Manifest this update:     Sun 27 Sep 2026 05:39:35 +0000
Manifest next update:     Tue 29 Sep 2026 05:39:35 +0000
Files and hashes:         1: mHDlywkkDsWdzHR_wANn6a86DM0.crl (hash: TJ1DHqzBb4MPkDc2lHLzzATIWGra6a/EU7BB84LQWmo=)
                          2: 16CB630E537511F180D8AAD7CE1D38B0.roa (hash: JKBLviW+yQWqYEf8gUdXTrj2d3ebFwRg37GifKHB/Ok=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3692D54AF, serialNumber=9870E5CB09240EC59DCC747FC00367E9AF3A0CCD
        Validity
            Not Before: Sep 27 05:39:35 2026 GMT
            Not After : Sep 29 05:39:35 2026 GMT
        Subject: CN=6ab8ac18-f6d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3f:79:ee:ea:98:66:5a:31:d4:79:d0:83:de:
                    63:52:10:0a:b5:bf:ea:1b:90:c4:a1:42:67:24:50:
                    e3:14:0f:c9:1f:e8:0a:6f:e7:3c:3c:0a:d6:60:4f:
                    54:d2:0a:76:52:55:4e:b5:d6:60:eb:cf:2c:35:18:
                    a5:72:e5:4f:08:e0:af:29:02:c1:db:b4:d8:5f:70:
                    cf:a3:bb:e1:6b:b6:70:e9:35:25:76:47:1c:16:62:
                    67:c2:b8:40:cf:a7:91:3f:13:7b:0f:5d:29:aa:54:
                    ca:90:47:99:a4:74:ec:e0:60:e4:1a:3c:75:3f:b7:
                    ec:bf:7a:56:7d:48:ea:cf:e5:6d:3c:4a:43:01:6d:
                    5a:9f:c6:7d:01:04:f8:47:d1:91:77:0a:27:d6:2e:
                    0d:be:04:4b:85:70:db:54:86:8d:3d:55:d1:29:ba:
                    ce:94:03:d5:18:8a:87:84:f4:80:04:10:4e:ea:9c:
                    c9:ae:91:b7:6c:7f:bb:96:5e:93:1f:74:b3:05:b1:
                    90:0f:87:3f:53:03:b6:60:d3:58:c1:36:c8:91:d5:
                    3a:c7:ad:18:80:4d:d6:31:a5:d8:47:b1:c4:8a:89:
                    30:3a:3b:d9:c1:75:95:d8:b0:0b:b9:36:b3:4e:cb:
                    62:d9:53:4d:63:e6:b7:e3:d9:6c:03:eb:56:fd:6b:
                    dd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:99:AC:07:A9:BB:8B:20:5D:66:AC:DE:F2:AB:13:58:15:52:F9:25
            X509v3 Authority Key Identifier:
                keyid:98:70:E5:CB:09:24:0E:C5:9D:CC:74:7F:C0:03:67:E9:AF:3A:0C:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/mHDlywkkDsWdzHR_wANn6a86DM0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3692D54/29C7BAE6537211F19966B8C5CE1D38B0/mHDlywkkDsWdzHR_wANn6a86DM0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:46:b5:db:29:42:f2:03:73:06:6f:17:1e:36:2a:9b:74:01:
         41:51:40:9b:74:79:58:46:6e:42:e6:cf:83:d6:89:a9:72:fb:
         98:c3:cb:d3:35:99:01:f7:53:b2:10:af:e7:ab:6a:95:5a:14:
         15:89:60:06:2d:8b:81:9f:c0:c3:f9:74:e0:47:4d:b4:ba:85:
         6e:35:a4:9c:88:cc:86:27:57:99:76:93:e3:42:b7:59:73:d0:
         b9:62:a5:f6:89:55:ae:da:f6:9e:b6:6c:78:e2:05:54:29:4e:
         8e:04:b5:9b:8f:12:e5:85:a9:f5:2b:3a:28:22:fd:49:75:a9:
         2e:80:a9:d2:d0:6d:ab:cd:05:57:d6:72:30:ec:2c:c1:68:a6:
         e9:2b:8d:42:14:d9:8f:6b:de:4b:e1:4e:9d:bc:81:d6:93:82:
         db:a3:1c:3e:95:61:0e:b4:5c:03:ab:c4:a8:88:d9:0d:dc:73:
         3f:4e:ce:5e:1b:4c:3e:fe:35:df:f9:a9:12:66:c3:29:b5:4b:
         99:24:fe:bc:9e:18:95:45:b2:3b:9c:49:8b:54:04:8a:42:ba:
         70:41:4d:c3:e2:ce:0e:2a:82:d5:1a:94:c6:99:6d:f4:1b:ed:
         e0:37:9b:72:35:3c:5f:7e:12:18:d9:13:a8:ac:1f:ad:a0:01:
         44:4c:35:40
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAIYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTJENTRBRjExMC8GA1UEBRMoOTg3MEU1Q0IwOTI0MEVDNTlEQ0M3NDdGQzAwMzY3
RTlBRjNBMENDRDAeFw0yNjA5MjcwNTM5MzVaFw0yNjA5MjkwNTM5MzVaMBgxFjAU
BgNVBAMTDTZhYjhhYzE4LWY2ZDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDLP3nu6phmWjHUedCD3mNSEAq1v+obkMShQmckUOMUD8kf6Apv5zw8CtZg
T1TSCnZSVU611mDrzyw1GKVy5U8I4K8pAsHbtNhfcM+ju+FrtnDpNSV2RxwWYmfC
uEDPp5E/E3sPXSmqVMqQR5mkdOzgYOQaPHU/t+y/elZ9SOrP5W08SkMBbVqfxn0B
BPhH0ZF3CifWLg2+BEuFcNtUho09VdEpus6UA9UYioeE9IAEEE7qnMmukbdsf7uW
XpMfdLMFsZAPhz9TA7Zg01jBNsiR1TrHrRiATdYxpdhHscSKiTA6O9nBdZXYsAu5
NrNOy2LZU01j5rfj2WwD61b9a92zAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhpms
B6m7iyBdZqze8qsTWBVS+SUwHwYDVR0jBBgwFoAUmHDlywkkDsWdzHR/wANn6a86
DM0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjkyRDU0LzI5QzdCQUU2NTM3MjExRjE5OTY2QjhDNUNFMUQzOEIwL21IRGx5
d2trRHNXZHpIUl93QU5uNmE4NkRNMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL21IRGx5d2trRHNXZHpIUl93QU5uNmE4NkRNMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTJENTQvMjlDN0JBRTY1MzcyMTFGMTk5NjZCOEM1Q0Ux
RDM4QjAvbUhEbHl3a2tEc1dkekhSX3dBTm42YTg2RE0wLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCTRrXbKULyA3MGbxceNiqbdAFBUUCb
dHlYRm5C5s+D1ompcvuYw8vTNZkB91OyEK/nq2qVWhQViWAGLYuBn8DD+XTgR020
uoVuNaSciMyGJ1eZdpPjQrdZc9C5YqX2iVWu2vaetmx44gVUKU6OBLWbjxLlhan1
KzooIv1JdakugKnS0G2rzQVX1nIw7CzBaKbpK41CFNmPa95L4U6dvIHWk4Lboxw+
lWEOtFwDq8SoiNkN3HM/Ts5eG0w+/jXf+akSZsMptUuZJP68nhiVRbI7nEmLVASK
QrpwQU3D4s4OKoLVGpTGmW30G+3gN5tyNTxffhIY2ROorB+toAFETDVA
-----END CERTIFICATE-----