Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File:                     PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier:          +893Nv9M1+5Cmou1cKWNpEUKHmvcP9HJf17cG/N5kw4=
Subject key identifier:   6E:5A:44:35:90:3F:B1:EC:7E:FE:65:39:C7:EB:E0:04:B5:B7:D6:3D
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer:       /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial:       042D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number:          042C
Signing time:             Thu 24 Sep 2026 03:50:02 +0000
Manifest this update:     Thu 24 Sep 2026 03:50:01 +0000
Manifest next update:     Sat 26 Sep 2026 03:50:01 +0000
Files and hashes:         1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: eQunNnKp8TifzAuPM19w5rh7z1aLJ4zAfk73ploNeIQ=)
                          2: 7505B06024CD11EF9410DD1A7DDC24C2.roa (hash: vn59PtsA74MEKr6H9TKVqZemfFNq5OYAs+pWATJBHgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:50:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1069 (0x42d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AF, serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
        Validity
            Not Before: Sep 24 03:50:01 2026 GMT
            Not After : Sep 26 03:50:01 2026 GMT
        Subject: CN=6ab49dea-48f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c6:9e:b7:65:a2:34:37:79:bd:ff:69:dc:6c:
                    b9:15:b0:40:fe:26:91:53:ea:6f:85:5f:82:37:ac:
                    ed:16:73:09:a4:f8:e8:dc:81:f7:f5:41:42:ea:08:
                    5d:50:33:a5:28:be:00:07:55:d7:51:91:e6:be:e0:
                    0e:5c:3a:b4:12:a7:5b:cc:98:32:0c:f3:26:11:03:
                    52:ae:24:c3:1b:2b:41:24:be:58:a6:03:19:4e:59:
                    c3:de:34:17:83:aa:1a:df:88:ea:29:06:7c:b2:dd:
                    05:94:97:81:5c:41:10:6d:74:0b:13:34:af:c8:f3:
                    3c:f6:fb:fe:f1:f6:aa:9c:f7:4c:17:01:3f:60:42:
                    f2:9d:02:36:82:8f:ce:1b:05:c7:f9:41:72:b7:ce:
                    e0:f3:fc:bb:86:a2:c4:68:84:ed:72:5f:4b:54:d0:
                    34:c2:28:52:d7:93:e8:34:59:e8:f7:89:9c:dd:56:
                    38:dd:fd:a8:69:c3:e3:00:03:3a:67:8d:14:0a:41:
                    84:83:a0:b5:cb:8a:2c:6d:55:08:49:ee:a1:27:1e:
                    71:1d:6b:46:79:44:17:07:9a:61:79:e0:d6:c6:c2:
                    11:19:5e:a2:97:4c:33:55:bb:ab:fa:8e:19:ea:41:
                    4e:a9:cb:ad:8a:df:8e:88:26:89:03:b3:09:91:9c:
                    aa:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:5A:44:35:90:3F:B1:EC:7E:FE:65:39:C7:EB:E0:04:B5:B7:D6:3D
            X509v3 Authority Key Identifier:
                keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:6f:2f:0d:fb:3e:4b:d9:01:31:13:17:41:de:72:07:21:e9:
         e7:91:a8:0b:70:b6:9f:8e:d0:fc:67:7d:29:15:f4:12:36:e4:
         d8:79:59:04:11:08:83:fc:13:59:49:f7:7a:1c:09:68:b2:2e:
         79:4d:3e:8c:4d:d1:58:ea:b8:30:16:94:05:38:ad:fc:86:7f:
         4f:c2:66:77:bd:e2:1d:bc:36:df:87:9d:75:74:c2:99:26:4b:
         0a:75:b1:24:c6:ef:df:11:00:a5:fd:0e:c4:4e:b0:bd:9a:42:
         d8:0b:95:35:11:34:6d:ee:d1:bc:0e:b6:91:a5:40:8a:89:8a:
         bc:70:cf:e2:71:64:2d:89:97:ae:37:f1:e3:24:f4:2e:65:78:
         ce:51:fa:6c:3a:49:ba:4f:65:ce:7d:25:99:d1:31:7f:ad:1f:
         f4:ad:0f:71:89:8f:26:d4:35:d0:af:59:fd:69:b6:4b:df:ae:
         2e:b3:51:0e:f7:d4:b8:61:d0:64:46:71:a4:1c:4d:bf:22:52:
         8a:d4:94:26:ba:ec:9b:6d:ec:36:83:33:9b:44:00:e4:5b:5d:
         0b:79:c9:53:ac:30:ee:03:10:42:c6:14:e3:c3:08:4d:72:0a:
         ce:3e:19:b1:d0:00:df:68:86:2d:01:c2:ef:17:d9:7b:08:24:
         76:77:a5:7f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBC0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTgxMjVBRjExMC8GA1UEBRMoM0M3OUYwRkNCQkIwQzA0MUM4QjRGNkRFRTEwM0Iw
MjUxOTUxNkVGNDAeFw0yNjA5MjQwMzUwMDFaFw0yNjA5MjYwMzUwMDFaMBgxFjAU
BgNVBAMTDTZhYjQ5ZGVhLTQ4ZjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDXxp63ZaI0N3m9/2ncbLkVsED+JpFT6m+FX4I3rO0Wcwmk+Ojcgff1QULq
CF1QM6UovgAHVddRkea+4A5cOrQSp1vMmDIM8yYRA1KuJMMbK0EkvlimAxlOWcPe
NBeDqhrfiOopBnyy3QWUl4FcQRBtdAsTNK/I8zz2+/7x9qqc90wXAT9gQvKdAjaC
j84bBcf5QXK3zuDz/LuGosRohO1yX0tU0DTCKFLXk+g0Wej3iZzdVjjd/ahpw+MA
AzpnjRQKQYSDoLXLiixtVQhJ7qEnHnEda0Z5RBcHmmF54NbGwhEZXqKXTDNVu6v6
jhnqQU6py62K346IJokDswmRnKpLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUblpE
NZA/sex+/mU5x+vgBLW31j0wHwYDVR0jBBgwFoAUPHnw/LuwwEHItPbe4QOwJRlR
bvQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4MTI1LzlFRDdFQjFFODM4NDExRUVBRjgxMzEzNTRBRDlFNkZDL1BIbndf
THV3d0VISXRQYmU0UU93SlJsUmJ2US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BIbndfTHV3d0VISXRQYmU0UU93SlJsUmJ2US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTgxMjUvOUVEN0VCMUU4Mzg0MTFFRUFGODEzMTM1NEFE
OUU2RkMvUEhud19MdXd3RUhJdFBiZTRRT3dKUmxSYnZRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBDby8N+z5L2QExExdB3nIHIennkagL
cLafjtD8Z30pFfQSNuTYeVkEEQiD/BNZSfd6HAlosi55TT6MTdFY6rgwFpQFOK38
hn9PwmZ3veIdvDbfh511dMKZJksKdbEkxu/fEQCl/Q7ETrC9mkLYC5U1ETRt7tG8
DraRpUCKiYq8cM/icWQtiZeuN/HjJPQuZXjOUfpsOkm6T2XOfSWZ0TF/rR/0rQ9x
iY8m1DXQr1n9abZL364us1EO99S4YdBkRnGkHE2/IlKK1JQmuuybbew2gzObRADk
W10LeclTrDDuAxBCxhTjwwhNcgrOPhmx0ADfaIYtAcLvF9l7CCR2d6V/
-----END CERTIFICATE-----