Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
File:                     fdXEm3fH1Lf97amkdPdSEWYtoRw.mft (raw, json)
Hash identifier:          Y2LkO+E0IGzyC7bHuMojLeqza+Wpjd/vV3HTvqg65KU=
Subject key identifier:   4E:2E:57:CB:5B:40:80:1E:5B:97:52:79:59:87:95:1E:E5:95:EE:0A
Authority key identifier: 7D:D5:C4:9B:77:C7:D4:B7:FD:ED:A9:A4:74:F7:52:11:66:2D:A1:1C
Certificate issuer:       /CN=F36B32D3AF/serialNumber=7DD5C49B77C7D4B7FDEDA9A474F75211662DA11C
Certificate serial:       1C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
Manifest number:          1C
Signing time:             Wed 23 Sep 2026 05:52:18 +0000
Manifest this update:     Wed 23 Sep 2026 05:52:17 +0000
Manifest next update:     Fri 25 Sep 2026 05:52:17 +0000
Files and hashes:         1: fdXEm3fH1Lf97amkdPdSEWYtoRw.crl (hash: nlJmq1p4RdJRRMIigmwpnpoo9+rIiTa33gLS7m+QVQ0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B32D3AF, serialNumber=7DD5C49B77C7D4B7FDEDA9A474F75211662DA11C
        Validity
            Not Before: Sep 23 05:52:17 2026 GMT
            Not After : Sep 25 05:52:17 2026 GMT
        Subject: CN=6ab36912-ccd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:9c:8c:ca:77:69:3b:fd:91:e1:1a:82:bd:
                    74:3b:c4:e8:c6:fe:a6:fb:71:9c:cd:d4:b2:4e:5c:
                    9d:c7:ef:eb:6d:3a:a1:ca:32:72:73:0d:6f:3f:d9:
                    33:8f:c8:bd:61:30:9f:23:72:90:8b:bb:00:e8:10:
                    bc:9e:5e:4b:fc:1f:91:fc:a2:d4:90:fa:e0:d4:6d:
                    f0:4c:73:2c:10:6b:c6:49:24:d2:62:0d:05:a8:70:
                    6c:16:23:83:03:83:0f:8f:f6:fd:85:7f:6d:59:ae:
                    e8:c9:18:7f:62:59:7e:69:7d:d0:2b:db:2e:18:52:
                    e3:10:6b:eb:15:4f:e4:c8:ca:3a:d2:b9:6e:14:61:
                    77:9e:44:86:77:b2:1d:a8:2a:f9:ad:6d:0c:b1:b5:
                    01:f1:ec:b7:99:67:95:ab:ab:71:aa:a1:a9:a1:70:
                    53:ee:de:3b:11:e0:26:56:dd:fb:bb:ba:5b:05:2d:
                    71:8e:8a:30:68:f2:85:69:68:62:9a:5d:69:8a:be:
                    13:3c:43:7e:5e:47:ce:fa:9d:ee:5c:22:91:64:87:
                    23:02:26:55:8e:2f:94:e7:8b:c6:eb:09:83:aa:67:
                    9a:c0:24:b0:05:71:a1:fa:35:09:47:d1:32:db:55:
                    38:05:43:37:d3:26:bf:b5:07:03:4a:57:01:e7:ce:
                    19:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2E:57:CB:5B:40:80:1E:5B:97:52:79:59:87:95:1E:E5:95:EE:0A
            X509v3 Authority Key Identifier:
                keyid:7D:D5:C4:9B:77:C7:D4:B7:FD:ED:A9:A4:74:F7:52:11:66:2D:A1:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/fdXEm3fH1Lf97amkdPdSEWYtoRw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B32D3/ADEBDFCAA1E511F190BCDCCACE1D38B0/fdXEm3fH1Lf97amkdPdSEWYtoRw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ae:f3:cf:19:d4:4f:6e:7f:a2:e2:09:f1:6b:fa:c6:c9:7d:
         dd:31:81:e5:b7:1a:8d:fd:d7:36:fb:a5:a4:5d:83:e3:d5:4d:
         05:b4:e1:05:fe:10:c6:c0:d6:3f:d5:4b:e5:5f:e7:2b:54:57:
         d3:5c:5e:bf:8d:bb:ff:c0:53:46:7c:28:dc:5e:5c:d1:d9:22:
         c4:cd:eb:77:a5:1b:3a:d1:01:c4:07:bf:d1:af:12:4c:3b:9f:
         52:15:09:44:26:00:e1:9d:99:8a:cc:a5:5e:f8:69:8c:d4:ce:
         da:c9:f2:1f:f7:f7:98:6c:f7:53:a4:11:62:fa:94:75:58:5f:
         d4:b4:b2:90:af:97:d8:53:8a:29:02:04:dd:bf:d5:4c:7f:4d:
         32:e1:c9:84:1f:71:04:89:43:8f:5e:9c:65:ba:ab:a2:44:ca:
         17:ab:5e:ce:35:3b:31:f2:cd:76:ec:f7:28:68:47:47:51:b3:
         f0:6e:29:9b:2e:50:0f:b4:23:65:9d:53:b1:2e:ad:5f:61:e0:
         67:e6:e2:8f:b7:52:b1:bf:84:5b:8e:6e:ed:21:87:77:8e:d1:
         6e:60:b1:eb:87:a6:04:4f:d3:91:1e:bc:80:87:3c:64:dd:7f:
         61:c6:34:69:f4:fd:ab:09:82:24:5e:50:16:19:71:80:00:2b:
         29:71:d5:45
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBHDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
MzJEM0FGMTEwLwYDVQQFEyg3REQ1QzQ5Qjc3QzdENEI3RkRFREE5QTQ3NEY3NTIx
MTY2MkRBMTFDMB4XDTI2MDkyMzA1NTIxN1oXDTI2MDkyNTA1NTIxN1owGDEWMBQG
A1UEAxMNNmFiMzY5MTItY2NkMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALFfnIzKd2k7/ZHhGoK9dDvE6Mb+pvtxnM3Usk5cncfv6206ocoycnMNbz/Z
M4/IvWEwnyNykIu7AOgQvJ5eS/wfkfyi1JD64NRt8ExzLBBrxkkk0mINBahwbBYj
gwODD4/2/YV/bVmu6MkYf2JZfml90CvbLhhS4xBr6xVP5MjKOtK5bhRhd55Ehney
Hagq+a1tDLG1AfHst5lnlaurcaqhqaFwU+7eOxHgJlbd+7u6WwUtcY6KMGjyhWlo
YppdaYq+EzxDfl5Hzvqd7lwikWSHIwImVY4vlOeLxusJg6pnmsAksAVxofo1CUfR
MttVOAVDN9Mmv7UHA0pXAefOGWcCAwEAAaOCArgwggK0MB0GA1UdDgQWBBROLlfL
W0CAHluXUnlZh5Ue5ZXuCjAfBgNVHSMEGDAWgBR91cSbd8fUt/3tqaR091IRZi2h
HDAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjMyRDMvQURFQkRGQ0FBMUU1MTFGMTkwQkNEQ0NBQ0UxRDM4QjAvZmRYRW0z
ZkgxTGY5N2Fta2RQZFNFV1l0b1J3LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvZmRYRW0zZkgxTGY5N2Fta2RQZFNFV1l0b1J3LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzZCMzJEMy9BREVCREZDQUExRTUxMUYxOTBCQ0RDQ0FDRTFE
MzhCMC9mZFhFbTNmSDFMZjk3YW1rZFBkU0VXWXRvUncubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBALau888Z1E9uf6LiCfFr+sbJfd0xgeW3
Go391zb7paRdg+PVTQW04QX+EMbA1j/VS+Vf5ytUV9NcXr+Nu//AU0Z8KNxeXNHZ
IsTN63elGzrRAcQHv9GvEkw7n1IVCUQmAOGdmYrMpV74aYzUztrJ8h/395hs91Ok
EWL6lHVYX9S0spCvl9hTiikCBN2/1Ux/TTLhyYQfcQSJQ49enGW6q6JEyherXs41
OzHyzXbs9yhoR0dRs/BuKZsuUA+0I2WdU7EurV9h4Gfm4o+3UrG/hFuObu0hh3eO
0W5gseuHpgRP05EevICHPGTdf2HGNGn0/asJgiReUBYZcYAAKylx1UU=
-----END CERTIFICATE-----