Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
File:                     PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft (raw, json)
Hash identifier:          0E5F8kzs148OFeQUP/Wp4EY8Md4IsWPKXQeNMWf9c0c=
Subject key identifier:   9D:8F:ED:19:AA:D1:E7:8F:26:80:6B:F0:25:4D:0E:45:DE:CE:DA:9A
Authority key identifier: 3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4
Certificate issuer:       /CN=F3698125AF/serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
Certificate serial:       0460
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
Manifest number:          045F
Signing time:             Sat 14 Nov 2026 03:48:43 +0000
Manifest this update:     Sat 14 Nov 2026 03:48:42 +0000
Manifest next update:     Mon 16 Nov 2026 03:48:42 +0000
Files and hashes:         1: PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl (hash: OK3Up1tmZMhpJnJIMl+ChXJU5sg2+G+9Ceeu/WTs+Hg=)
                          2: 7505B06024CD11EF9410DD1A7DDC24C2.roa (hash: vn59PtsA74MEKr6H9TKVqZemfFNq5OYAs+pWATJBHgA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AF, serialNumber=3C79F0FCBBB0C041C8B4F6DEE103B02519516EF4
        Validity
            Not Before: Nov 14 03:48:42 2026 GMT
            Not After : Nov 16 03:48:42 2026 GMT
        Subject: CN=6af7da1b-6ee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:00:10:08:d3:ab:88:d7:17:ca:90:3a:fb:1d:
                    8b:a3:74:db:ca:e1:52:34:36:7c:2d:2e:cc:d8:ce:
                    3d:a3:df:11:a9:9f:47:f2:99:b7:ba:c6:0e:db:9f:
                    b7:8c:b0:a6:1a:d3:5a:92:93:fe:f7:9b:b1:ec:74:
                    f2:54:13:83:f0:11:d0:54:5d:34:61:9b:06:7f:4f:
                    b3:d1:23:20:56:3f:1b:73:07:ba:37:d7:50:ca:8a:
                    3c:8c:d5:80:5c:09:37:56:59:e7:0b:ed:b4:2f:c2:
                    4f:b4:db:24:69:fc:3e:85:f4:0a:3a:b6:af:24:fb:
                    59:46:6b:33:f8:c3:7d:61:e6:ca:bc:5b:75:d9:5b:
                    5f:74:32:43:32:2f:d9:0a:59:50:13:31:10:af:c9:
                    35:c0:72:8e:8f:79:bc:f7:26:c5:88:eb:70:d0:ab:
                    b9:e2:cc:2e:fd:00:b9:f3:4b:09:34:de:28:0a:55:
                    5c:41:0c:2d:97:1f:8e:1a:26:da:99:aa:d2:9c:4f:
                    a3:63:1b:f5:44:51:92:70:7f:c6:fd:03:77:7c:e0:
                    c6:56:15:91:8c:1b:d2:60:7e:cf:40:96:53:1e:6f:
                    e0:7d:26:ca:eb:31:4e:44:7b:d0:5f:68:29:b2:8b:
                    52:81:c7:e6:24:47:59:7e:f9:d5:79:fb:84:75:db:
                    23:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:8F:ED:19:AA:D1:E7:8F:26:80:6B:F0:25:4D:0E:45:DE:CE:DA:9A
            X509v3 Authority Key Identifier:
                keyid:3C:79:F0:FC:BB:B0:C0:41:C8:B4:F6:DE:E1:03:B0:25:19:51:6E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/PHnw_LuwwEHItPbe4QOwJRlRbvQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/9ED7EB1E838411EEAF8131354AD9E6FC/PHnw_LuwwEHItPbe4QOwJRlRbvQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a9:02:87:ec:74:50:1e:52:22:4a:43:9d:f3:ed:a6:1d:05:
         95:06:53:89:e0:20:eb:87:a1:dd:8a:68:0d:64:62:45:0a:66:
         aa:ad:e3:ca:fc:ca:93:ea:c0:19:81:ee:ba:c7:ac:1f:0a:d1:
         ad:65:3b:7c:75:f8:13:e0:70:05:98:9b:0f:f6:db:8d:9f:fb:
         04:3e:25:5a:1f:16:74:f7:2a:8b:f9:f4:6a:fd:c6:d1:88:44:
         be:4e:ae:a0:54:d6:f8:4f:f6:43:a7:1e:df:ef:69:5d:64:31:
         a8:d0:a7:5f:81:c9:1b:d6:d2:cd:b8:2c:f0:50:46:22:4f:73:
         c1:2e:a8:99:ff:69:ee:a6:ab:52:77:30:fe:01:57:8f:66:9a:
         a4:ad:8a:43:64:06:a6:7a:e5:df:e7:82:bf:dd:31:a0:a4:97:
         2d:e2:e7:b0:e0:53:6c:8b:11:0f:a9:a5:ac:44:44:8c:ad:2d:
         47:d5:1c:60:70:7c:3a:18:e0:d6:f3:88:84:6c:a3:f1:2c:65:
         42:58:12:cd:d7:8f:fc:55:ea:35:af:c9:4d:f6:b6:ec:51:f7:
         1c:97:2e:50:e3:6e:77:01:cd:f1:bd:30:64:9b:2a:08:31:67:
         64:b2:bc:a5:86:58:ee:7d:e7:b7:8f:ff:19:b9:16:68:c0:71:
         16:d7:9b:05
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBGAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OTgxMjVBRjExMC8GA1UEBRMoM0M3OUYwRkNCQkIwQzA0MUM4QjRGNkRFRTEwM0Iw
MjUxOTUxNkVGNDAeFw0yNjExMTQwMzQ4NDJaFw0yNjExMTYwMzQ4NDJaMBgxFjAU
BgNVBAMTDTZhZjdkYTFiLTZlZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDpABAI06uI1xfKkDr7HYujdNvK4VI0NnwtLszYzj2j3xGpn0fymbe6xg7b
n7eMsKYa01qSk/73m7HsdPJUE4PwEdBUXTRhmwZ/T7PRIyBWPxtzB7o311DKijyM
1YBcCTdWWecL7bQvwk+02yRp/D6F9Ao6tq8k+1lGazP4w31h5sq8W3XZW190MkMy
L9kKWVATMRCvyTXAco6Pebz3JsWI63DQq7nizC79ALnzSwk03igKVVxBDC2XH44a
JtqZqtKcT6NjG/VEUZJwf8b9A3d84MZWFZGMG9Jgfs9AllMeb+B9JsrrMU5Ee9Bf
aCmyi1KBx+YkR1l++dV5+4R12yNXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUnY/t
GarR548mgGvwJU0ORd7O2powHwYDVR0jBBgwFoAUPHnw/LuwwEHItPbe4QOwJRlR
bvQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjk4MTI1LzlFRDdFQjFFODM4NDExRUVBRjgxMzEzNTRBRDlFNkZDL1BIbndf
THV3d0VISXRQYmU0UU93SlJsUmJ2US5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1BIbndfTHV3d0VISXRQYmU0UU93SlJsUmJ2US5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OTgxMjUvOUVEN0VCMUU4Mzg0MTFFRUFGODEzMTM1NEFE
OUU2RkMvUEhud19MdXd3RUhJdFBiZTRRT3dKUmxSYnZRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB5qQKH7HRQHlIiSkOd8+2mHQWVBlOJ
4CDrh6HdimgNZGJFCmaqrePK/MqT6sAZge66x6wfCtGtZTt8dfgT4HAFmJsP9tuN
n/sEPiVaHxZ09yqL+fRq/cbRiES+Tq6gVNb4T/ZDpx7f72ldZDGo0Kdfgckb1tLN
uCzwUEYiT3PBLqiZ/2nupqtSdzD+AVePZpqkrYpDZAameuXf54K/3TGgpJct4uew
4FNsixEPqaWsRESMrS1H1RxgcHw6GODW84iEbKPxLGVCWBLN14/8Veo1r8lN9rbs
Ufccly5Q4253Ac3xvTBkmyoIMWdksrylhljufee3j/8ZuRZowHEW15sF
-----END CERTIFICATE-----