Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
File:                     ih_PKB86N6VQ5kE32QhVCuiQIzo.mft (raw, json)
Hash identifier:          Ei7pUlSNePPqPbekS4MRAsv1urQYWkH/cGsD5RAAtO0=
Subject key identifier:   A0:C1:85:E8:00:95:C8:3F:D3:2F:0E:75:D8:34:AE:6B:0D:41:38:B1
Authority key identifier: 8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A
Certificate issuer:       /CN=F36A3983AF/serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
Certificate serial:       02CF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
Manifest number:          02CE
Signing time:             Sun 11 Oct 2026 04:37:51 +0000
Manifest this update:     Sun 11 Oct 2026 04:37:51 +0000
Manifest next update:     Tue 13 Oct 2026 04:37:51 +0000
Files and hashes:         1: ih_PKB86N6VQ5kE32QhVCuiQIzo.crl (hash: Sxfi1EidEoh2XcPsxxm4p5X2Wgu8nwFCuJZn7Df/fmk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 04:37:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A3983AF, serialNumber=8A1FCF281F3A37A550E64137D908550AE890233A
        Validity
            Not Before: Oct 11 04:37:51 2026 GMT
            Not After : Oct 13 04:37:51 2026 GMT
        Subject: CN=6acb129f-9435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:01:c1:d2:dc:17:38:b9:8f:fc:b0:de:31:
                    10:39:90:43:4b:bc:6a:a8:4c:87:e7:f8:38:65:66:
                    40:8d:73:42:76:ee:40:11:21:bb:5a:50:4c:ff:28:
                    fb:35:ab:ef:0c:e3:28:27:26:fb:3d:43:4d:94:20:
                    41:c3:38:01:19:86:72:a9:34:7d:68:ac:db:f9:f1:
                    c6:8c:1a:05:a1:1e:41:f0:f6:e9:e4:a6:ae:51:35:
                    ca:ab:0a:7d:3a:75:94:78:eb:08:5a:f6:28:0d:be:
                    09:93:f9:52:61:ac:ea:c5:53:ee:fe:43:4c:ee:8c:
                    4e:bc:14:89:b3:e9:04:c3:cd:b4:0e:00:e4:db:b4:
                    0f:27:0b:f9:c5:07:3e:b7:17:89:c5:32:64:a6:50:
                    56:d2:da:a6:0f:dc:c8:9c:4e:05:48:0a:1a:b9:d7:
                    f6:fe:05:4e:66:ac:d0:2f:56:be:6c:14:38:13:b7:
                    18:d7:e4:98:21:d1:62:45:44:da:5e:94:96:02:c3:
                    54:89:f2:bb:05:50:23:25:3c:e6:21:47:53:44:d4:
                    61:0b:83:64:49:31:ce:2a:9d:fa:cf:af:45:80:33:
                    af:5c:8e:72:94:74:cc:bb:57:5c:4b:7d:b2:1c:65:
                    20:37:a3:28:56:ec:6b:25:75:c6:d1:cb:6f:b2:aa:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:C1:85:E8:00:95:C8:3F:D3:2F:0E:75:D8:34:AE:6B:0D:41:38:B1
            X509v3 Authority Key Identifier:
                keyid:8A:1F:CF:28:1F:3A:37:A5:50:E6:41:37:D9:08:55:0A:E8:90:23:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ih_PKB86N6VQ5kE32QhVCuiQIzo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A3983/09B8183E9B9C11EFA012F94F762E951A/ih_PKB86N6VQ5kE32QhVCuiQIzo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:f3:ba:30:3d:bb:ae:b8:96:74:5d:85:61:7e:7c:64:9f:12:
         1e:88:1c:0d:53:c7:88:bc:bf:91:5e:fb:53:96:3e:41:bb:4b:
         97:cb:54:c3:1d:8e:05:80:9e:cf:30:6b:eb:e9:bd:c2:c7:af:
         1a:03:6a:0b:1f:b4:ba:c2:31:e8:cd:69:de:b7:79:49:93:e0:
         27:01:67:a8:e4:d0:02:bc:3b:b9:23:f8:35:9f:ba:7c:ff:8e:
         3b:d6:9e:c0:5d:f0:d1:11:e9:29:71:5a:b7:e6:eb:49:b5:bc:
         4d:32:30:86:f7:45:97:37:bf:22:47:18:28:ff:39:35:45:dc:
         00:22:78:1e:63:82:11:07:ac:75:0d:41:b5:98:80:38:c4:27:
         8a:22:6a:5e:e5:3e:36:80:63:9e:ef:31:e5:b9:c9:d8:e4:44:
         be:0f:b4:d2:89:7f:f0:03:ee:06:a2:49:7f:a4:15:4e:eb:1f:
         1e:60:5d:51:51:ec:51:02:f4:42:6e:ac:c5:4c:b9:27:d2:45:
         02:04:e9:d9:37:22:c2:52:1c:a6:1b:c6:56:2f:32:35:73:20:
         4a:69:c8:05:9f:cb:de:e8:ae:df:17:8e:0a:9d:82:8d:dd:e4:
         24:79:fc:4b:b5:8b:c5:02:6d:7b:05:8a:aa:50:56:f3:75:06:
         ec:78:0c:ed
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAs8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTM5ODNBRjExMC8GA1UEBRMoOEExRkNGMjgxRjNBMzdBNTUwRTY0MTM3RDkwODU1
MEFFODkwMjMzQTAeFw0yNjEwMTEwNDM3NTFaFw0yNjEwMTMwNDM3NTFaMBgxFjAU
BgNVBAMTDTZhY2IxMjlmLTk0MzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiawHB0twXOLmP/LDeMRA5kENLvGqoTIfn+DhlZkCNc0J27kARIbtaUEz/
KPs1q+8M4ygnJvs9Q02UIEHDOAEZhnKpNH1orNv58caMGgWhHkHw9unkpq5RNcqr
Cn06dZR46wha9igNvgmT+VJhrOrFU+7+Q0zujE68FImz6QTDzbQOAOTbtA8nC/nF
Bz63F4nFMmSmUFbS2qYP3MicTgVIChq51/b+BU5mrNAvVr5sFDgTtxjX5Jgh0WJF
RNpelJYCw1SJ8rsFUCMlPOYhR1NE1GELg2RJMc4qnfrPr0WAM69cjnKUdMy7V1xL
fbIcZSA3oyhW7GsldcbRy2+yquvlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUoMGF
6ACVyD/TLw512DSuaw1BOLEwHwYDVR0jBBgwFoAUih/PKB86N6VQ5kE32QhVCuiQ
IzowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkEzOTgzLzA5QjgxODNFOUI5QzExRUZBMDEyRjk0Rjc2MkU5NTFBL2loX1BL
Qjg2TjZWUTVrRTMyUWhWQ3VpUUl6by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2loX1BLQjg2TjZWUTVrRTMyUWhWQ3VpUUl6by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTM5ODMvMDlCODE4M0U5QjlDMTFFRkEwMTJGOTRGNzYy
RTk1MUEvaWhfUEtCODZONlZRNWtFMzJRaFZDdWlRSXpvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAn87owPbuuuJZ0XYVhfnxknxIeiBwN
U8eIvL+RXvtTlj5Bu0uXy1TDHY4FgJ7PMGvr6b3Cx68aA2oLH7S6wjHozWnet3lJ
k+AnAWeo5NACvDu5I/g1n7p8/4471p7AXfDREekpcVq35utJtbxNMjCG90WXN78i
Rxgo/zk1RdwAIngeY4IRB6x1DUG1mIA4xCeKImpe5T42gGOe7zHlucnY5ES+D7TS
iX/wA+4Gokl/pBVO6x8eYF1RUexRAvRCbqzFTLkn0kUCBOnZNyLCUhymG8ZWLzI1
cyBKacgFn8ve6K7fF44KnYKN3eQkefxLtYvFAm17BYqqUFbzdQbseAzt
-----END CERTIFICATE-----