Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
File:                     ZsmzRf1S4DCcordufO0LUGyNAZs.mft (raw, json)
Hash identifier:          ofMKhrnCSdpyeqqznpNWL1efAARVLkS9Iyu5fhElCZ8=
Subject key identifier:   53:52:9B:98:94:12:30:B5:89:42:CF:01:CD:96:B7:AC:8F:DD:18:93
Authority key identifier: 66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B
Certificate issuer:       /CN=F36A2F84AF/serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
Certificate serial:       07BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
Manifest number:          07BC
Signing time:             Sun 15 Nov 2026 02:16:11 +0000
Manifest this update:     Sun 15 Nov 2026 02:16:10 +0000
Manifest next update:     Tue 17 Nov 2026 02:16:10 +0000
Files and hashes:         1: ZsmzRf1S4DCcordufO0LUGyNAZs.crl (hash: n7y7htoQZ6sz5qGq0C6jzSvN9hYEY8dOQKK2Ln636Nc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1980 (0x7bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AF, serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
        Validity
            Not Before: Nov 15 02:16:10 2026 GMT
            Not After : Nov 17 02:16:10 2026 GMT
        Subject: CN=6af915eb-4b20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:c2:21:46:73:52:45:16:92:a5:57:8f:00:
                    7e:53:29:e5:77:bc:63:f1:f7:d0:fd:28:95:a0:6d:
                    d8:0b:0d:c5:d1:4c:ce:e5:da:e3:c3:49:c0:76:24:
                    ba:db:17:1e:a1:da:d1:78:a4:f9:2c:2e:f7:fd:ee:
                    b5:d5:8f:92:77:ce:35:67:ee:08:ad:9d:91:8d:14:
                    02:d9:7f:07:bd:34:ec:d4:72:72:69:d6:14:1a:0d:
                    97:27:81:05:54:27:1d:53:2f:16:f2:4e:7b:9b:f9:
                    a8:99:31:7b:d0:fe:f9:fe:57:8a:8b:19:5a:3e:50:
                    d3:93:ae:14:a0:e6:de:7d:83:29:39:4a:41:6a:a7:
                    54:38:85:f8:9d:31:4f:68:b1:65:5c:7d:5a:03:be:
                    ed:c8:ac:42:1f:91:4b:1f:0c:3d:9c:ac:6b:0c:34:
                    4b:da:10:75:d0:dd:98:30:97:e3:02:40:3b:c0:2e:
                    37:2d:2e:3e:de:cd:97:93:1f:fb:52:be:82:c2:d0:
                    0e:14:a3:68:b0:76:06:9e:54:79:ee:ab:0d:c2:e3:
                    d5:05:b2:2e:77:b3:89:a7:c4:65:2a:41:3f:cd:a6:
                    99:2c:29:76:c7:17:49:59:6f:47:08:45:30:46:cf:
                    4f:61:21:9e:b6:77:aa:ba:d7:bc:8b:21:68:45:05:
                    12:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:52:9B:98:94:12:30:B5:89:42:CF:01:CD:96:B7:AC:8F:DD:18:93
            X509v3 Authority Key Identifier:
                keyid:66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:bd:5d:89:b3:b8:23:40:ac:75:9a:74:98:40:4e:b9:b0:6d:
         ad:31:63:7c:b5:11:7d:27:01:1f:71:23:78:7f:84:8c:25:10:
         ce:40:bf:22:92:92:91:df:5b:fa:05:70:31:8a:92:bd:45:be:
         50:2e:27:9d:c0:77:00:11:fb:a4:db:b2:91:25:b1:25:7e:6f:
         f0:8a:f2:0c:51:45:39:90:de:3a:71:0f:76:a6:77:9c:08:98:
         4c:01:8a:f2:4f:10:60:3e:cd:f8:52:46:b8:98:8f:46:c5:4b:
         cc:17:bb:77:79:af:0a:cd:2a:8f:15:44:3e:ec:33:91:67:3d:
         91:91:c1:ab:c1:4b:fc:2c:76:99:d1:f7:73:2a:16:f5:76:79:
         05:41:6a:13:4e:b6:3b:d1:5b:50:d6:d8:9d:43:cf:51:15:a9:
         90:ef:f5:59:94:85:48:f4:90:45:40:20:c4:22:c1:fd:31:19:
         4c:f9:26:f9:64:e0:10:4c:f0:61:95:7c:f5:19:8d:6a:62:31:
         ba:9f:04:14:d6:b6:a5:16:bd:56:b0:91:27:e1:8d:07:f2:86:
         98:9c:70:93:b4:b4:de:2e:23:d4:f1:3c:cd:3e:f1:64:29:14:
         ac:53:af:f0:e6:cc:3b:38:45:22:e8:eb:9b:36:f2:ac:30:5c:
         fd:bf:66:30
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB7wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTJGODRBRjExMC8GA1UEBRMoNjZDOUIzNDVGRDUyRTAzMDlDQTJCNzZFN0NFRDBC
NTA2QzhEMDE5QjAeFw0yNjExMTUwMjE2MTBaFw0yNjExMTcwMjE2MTBaMBgxFjAU
BgNVBAMTDTZhZjkxNWViLTRiMjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDESMIhRnNSRRaSpVePAH5TKeV3vGPx99D9KJWgbdgLDcXRTM7l2uPDScB2
JLrbFx6h2tF4pPksLvf97rXVj5J3zjVn7gitnZGNFALZfwe9NOzUcnJp1hQaDZcn
gQVUJx1TLxbyTnub+aiZMXvQ/vn+V4qLGVo+UNOTrhSg5t59gyk5SkFqp1Q4hfid
MU9osWVcfVoDvu3IrEIfkUsfDD2crGsMNEvaEHXQ3Zgwl+MCQDvALjctLj7ezZeT
H/tSvoLC0A4Uo2iwdgaeVHnuqw3C49UFsi53s4mnxGUqQT/NppksKXbHF0lZb0cI
RTBGz09hIZ62d6q617yLIWhFBRLJAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUU1Kb
mJQSMLWJQs8BzZa3rI/dGJMwHwYDVR0jBBgwFoAUZsmzRf1S4DCcordufO0LUGyN
AZswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEyRjg0Lzg3MDAxNzA4RUVBRjExRUI5QTdFM0UyQUQ4QTAxNENFL1pzbXpS
ZjFTNERDY29yZHVmTzBMVUd5TkFacy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1pzbXpSZjFTNERDY29yZHVmTzBMVUd5TkFacy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTJGODQvODcwMDE3MDhFRUFGMTFFQjlBN0UzRTJBRDhB
MDE0Q0UvWnNtelJmMVM0RENjb3JkdWZPMExVR3lOQVpzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBAvV2Js7gjQKx1mnSYQE65sG2tMWN8
tRF9JwEfcSN4f4SMJRDOQL8ikpKR31v6BXAxipK9Rb5QLiedwHcAEfuk27KRJbEl
fm/wivIMUUU5kN46cQ92pnecCJhMAYryTxBgPs34Uka4mI9GxUvMF7t3ea8KzSqP
FUQ+7DORZz2RkcGrwUv8LHaZ0fdzKhb1dnkFQWoTTrY70VtQ1tidQ89RFamQ7/VZ
lIVI9JBFQCDEIsH9MRlM+Sb5ZOAQTPBhlXz1GY1qYjG6nwQU1ralFr1WsJEn4Y0H
8oaYnHCTtLTeLiPU8TzNPvFkKRSsU6/w5sw7OEUi6OubNvKsMFz9v2Yw
-----END CERTIFICATE-----