Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
File:                     JLpRXiIce3jm_t013ct_c3pPMiE.mft (raw, json)
Hash identifier:          5pdzvRuRkjpMiM0IeNnMof+t2GQ2/ewvJJyd3PxWNtg=
Subject key identifier:   06:6D:CC:7A:7C:D1:90:E4:04:BD:71:0D:E1:B0:AB:FB:74:F6:FA:28
Authority key identifier: 24:BA:51:5E:22:1C:7B:78:E6:FE:DD:35:DD:CB:7F:73:7A:4F:32:21
Certificate issuer:       /CN=F36A6EA0AR/serialNumber=24BA515E221C7B78E6FEDD35DDCB7F737A4F3221
Certificate serial:       012A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/JLpRXiIce3jm_t013ct_c3pPMiE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
Manifest number:          0129
Signing time:             Tue 22 Sep 2026 05:17:12 +0000
Manifest this update:     Tue 22 Sep 2026 05:17:12 +0000
Manifest next update:     Thu 24 Sep 2026 05:17:12 +0000
Files and hashes:         1: JLpRXiIce3jm_t013ct_c3pPMiE.crl (hash: T7scQBrUUtRvgqOfkk9bf7dWdZWg8mGIrZvl3bGzSwg=)
                          2: 60AB4C7CD34C11F0BCAFF7AFDAE4EC9C.roa (hash: uLF46C2w7GxR+RjRekTp0NOCaiBr/IY0Xs0woPFGw7Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
                          rsync://rpki.afrinic.net/repository/arin/JLpRXiIce3jm_t013ct_c3pPMiE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:26:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 298 (0x12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A6EA0AR, serialNumber=24BA515E221C7B78E6FEDD35DDCB7F737A4F3221
        Validity
            Not Before: Sep 22 05:17:12 2026 GMT
            Not After : Sep 24 05:17:12 2026 GMT
        Subject: CN=6ab20f58-aedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:70:c0:c0:0c:2d:8e:6a:1b:2f:60:34:40:7c:
                    99:da:63:93:14:2a:8d:67:a5:36:c6:da:6d:06:ea:
                    de:d0:ff:d0:2d:c5:3c:8f:44:f2:41:78:d5:63:3b:
                    b8:48:31:f9:44:63:fd:a9:c4:e6:f6:3b:72:35:a4:
                    0b:ef:ce:df:ce:93:0b:26:75:2c:93:b6:2f:ee:b2:
                    aa:2c:2c:f1:b7:19:20:7b:e1:0e:59:10:18:f7:31:
                    7a:39:b8:ac:48:34:62:9a:a8:d9:79:c5:7c:fe:ea:
                    87:e8:93:fa:c5:3b:6f:25:01:7c:20:85:66:d6:d3:
                    c9:97:5d:2c:1c:c2:43:61:f7:07:23:85:58:f3:e2:
                    35:00:6d:1f:04:e7:c8:ab:da:5d:f2:29:af:39:50:
                    bb:0e:f0:a2:86:f0:23:a6:2b:57:1e:3d:87:f5:16:
                    64:63:51:ea:f7:50:a3:a7:78:6b:94:d1:80:c3:92:
                    46:25:8e:d6:6e:03:0a:36:de:1d:91:e5:d1:0e:e2:
                    75:ee:77:a9:d2:50:6c:cc:40:a2:14:76:ba:20:58:
                    50:d0:49:8f:0d:df:89:b8:fc:c9:7e:0d:6f:0b:c7:
                    28:50:87:c1:b7:83:a2:77:0f:30:9c:ce:20:e4:5f:
                    b7:65:ad:47:a5:ff:2e:e9:59:fc:ad:0d:bc:65:ad:
                    b9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:6D:CC:7A:7C:D1:90:E4:04:BD:71:0D:E1:B0:AB:FB:74:F6:FA:28
            X509v3 Authority Key Identifier:
                keyid:24:BA:51:5E:22:1C:7B:78:E6:FE:DD:35:DD:CB:7F:73:7A:4F:32:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/JLpRXiIce3jm_t013ct_c3pPMiE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A6EA0/32854CA2D0F511F08D6CBD84DAE4EC9C/JLpRXiIce3jm_t013ct_c3pPMiE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c2:d7:29:ef:61:7e:e2:51:f0:1f:7c:11:d2:46:db:81:0f:
         25:42:ed:7c:69:61:18:07:2f:7e:ef:06:63:ed:25:31:d0:c1:
         4b:c7:a4:ff:af:cc:2b:29:19:d7:1c:21:51:30:94:c0:6c:0d:
         b9:e2:0d:c5:de:01:72:ca:34:57:31:f6:14:9f:df:14:bc:bc:
         b9:34:86:5c:63:7d:4b:10:1b:16:bd:f3:d1:80:4f:74:44:f8:
         25:09:46:33:1a:c3:fc:89:9b:e1:02:de:69:8c:03:82:d4:1c:
         e4:5a:26:11:f0:c6:55:db:19:7a:7e:bd:1d:ba:d6:bd:f5:5c:
         ad:51:75:8b:56:c2:e5:e8:c2:ba:39:5a:02:9a:76:2e:9b:40:
         91:d5:1f:9d:b4:62:42:7c:01:67:75:24:e1:78:d2:89:8e:1f:
         d8:4e:c3:d4:12:42:3e:bd:be:ab:86:d1:91:6a:d2:12:25:a2:
         28:ba:3a:87:f1:cb:98:9c:54:3b:25:11:df:a0:2f:d6:fb:ea:
         f9:d3:c9:7b:ee:a6:db:58:59:9a:97:d9:ad:5d:e1:9d:bd:b5:
         c4:b6:82:52:73:86:11:7a:53:af:1b:fe:8d:cb:38:f9:e9:74:
         47:89:b1:65:be:64:42:20:79:8a:95:ce:41:aa:b1:94:c1:5d:
         86:7f:df:42
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICASowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTZFQTBBUjExMC8GA1UEBRMoMjRCQTUxNUUyMjFDN0I3OEU2RkVERDM1RERDQjdG
NzM3QTRGMzIyMTAeFw0yNjA5MjIwNTE3MTJaFw0yNjA5MjQwNTE3MTJaMBgxFjAU
BgNVBAMTDTZhYjIwZjU4LWFlZGQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDqcMDADC2OahsvYDRAfJnaY5MUKo1npTbG2m0G6t7Q/9AtxTyPRPJBeNVj
O7hIMflEY/2pxOb2O3I1pAvvzt/OkwsmdSyTti/usqosLPG3GSB74Q5ZEBj3MXo5
uKxINGKaqNl5xXz+6ofok/rFO28lAXwghWbW08mXXSwcwkNh9wcjhVjz4jUAbR8E
58ir2l3yKa85ULsO8KKG8COmK1cePYf1FmRjUer3UKOneGuU0YDDkkYljtZuAwo2
3h2R5dEO4nXud6nSUGzMQKIUdrogWFDQSY8N34m4/Ml+DW8LxyhQh8G3g6J3DzCc
ziDkX7dlrUel/y7pWfytDbxlrblJAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUBm3M
enzRkOQEvXEN4bCr+3T2+igwHwYDVR0jBBgwFoAUJLpRXiIce3jm/t013ct/c3pP
MiEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkE2RUEwLzMyODU0Q0EyRDBGNTExRjA4RDZDQkQ4NERBRTRFQzlDL0pMcFJY
aUljZTNqbV90MDEzY3RfYzNwUE1pRS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0pMcFJYaUljZTNqbV90MDEzY3RfYzNwUE1pRS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QTZFQTAvMzI4NTRDQTJEMEY1MTFGMDhENkNCRDg0REFFNEVD
OUMvSkxwUlhpSWNlM2ptX3QwMTNjdF9jM3BQTWlFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAVwtcp72F+4lHwH3wR0kbbgQ8lQu18aWEY
By9+7wZj7SUx0MFLx6T/r8wrKRnXHCFRMJTAbA254g3F3gFyyjRXMfYUn98UvLy5
NIZcY31LEBsWvfPRgE90RPglCUYzGsP8iZvhAt5pjAOC1BzkWiYR8MZV2xl6fr0d
uta99VytUXWLVsLl6MK6OVoCmnYum0CR1R+dtGJCfAFndSTheNKJjh/YTsPUEkI+
vb6rhtGRatISJaIoujqH8cuYnFQ7JRHfoC/W++r508l77qbbWFmal9mtXeGdvbXE
toJSc4YRelOvG/6Nyzj56XRHibFlvmRCIHmKlc5BqrGUwV2Gf99C
-----END CERTIFICATE-----