Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
File:                     aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft (raw, json)
Hash identifier:          QNFf+WYp3+gu5xC3vZmDDCGrK56wu7VPZvhXRtb3EUs=
Subject key identifier:   39:ED:F8:36:CE:CB:92:CD:A7:10:72:8E:02:15:0A:30:5F:D9:D5:BE
Authority key identifier: 68:53:C4:E2:1B:5D:33:70:8B:0F:5E:AE:18:B7:89:FC:67:7C:81:08
Certificate issuer:       /CN=F36BB70AAF/serialNumber=6853C4E21B5D33708B0F5EAE18B789FC677C8108
Certificate serial:       95
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
Manifest number:          8F
Signing time:             Sat 14 Nov 2026 05:42:25 +0000
Manifest this update:     Sat 14 Nov 2026 05:42:24 +0000
Manifest next update:     Mon 16 Nov 2026 05:42:24 +0000
Files and hashes:         1: aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl (hash: acqjduf4AOHkMVbMeMALJ8VaBxNBh6FrPz2gkHEvsDc=)
                          2: B263604E7B9011F18B89CAB7CE1D38B0.roa (hash: agshf4kc1QeGwzwdxAbbchgJDxavR9643QWxtUo7IzQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 149 (0x95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BB70AAF, serialNumber=6853C4E21B5D33708B0F5EAE18B789FC677C8108
        Validity
            Not Before: Nov 14 05:42:24 2026 GMT
            Not After : Nov 16 05:42:24 2026 GMT
        Subject: CN=6af7f4c0-f02f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:26:34:38:af:14:5e:db:5d:80:d5:66:7a:97:
                    87:57:98:f6:dd:f0:27:fe:fd:4d:3c:97:84:d4:29:
                    d9:bc:7f:3e:c7:2f:1a:23:a0:2c:47:98:e7:02:be:
                    ec:1e:0b:8c:f3:3d:f6:a6:8c:10:c2:14:6c:76:e0:
                    68:cd:1f:46:60:c9:f2:0f:62:96:73:b0:96:9a:56:
                    0a:25:bf:7d:38:4b:d4:50:08:2c:b4:75:0b:c3:01:
                    4e:19:cd:23:00:47:78:de:72:31:91:a6:cb:bf:21:
                    51:69:98:e6:ee:c4:b9:67:c5:c9:7e:23:d0:f3:ab:
                    6b:bf:2c:a3:ea:df:3e:0e:5b:38:50:2a:b5:96:27:
                    61:52:17:ea:2c:93:2b:59:78:9a:db:6f:cf:67:b7:
                    7c:ea:04:21:45:0f:b7:2b:66:3f:7e:a2:be:71:5b:
                    8f:70:bf:ff:ae:a9:2c:04:8b:f6:dc:f2:3d:7c:8c:
                    5c:a7:f2:b0:cc:8d:e8:37:ae:83:ef:e7:ae:d8:74:
                    ab:16:ce:cb:fc:a0:a9:d1:4a:26:b3:c7:70:0e:ac:
                    ac:04:82:90:16:52:77:ea:c4:8d:e7:4b:b3:42:5b:
                    a5:35:df:2a:c3:cf:6f:d8:a0:ee:4d:58:8a:43:d1:
                    29:74:1a:09:ab:4a:b2:a0:2b:10:7c:85:83:90:48:
                    a1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:ED:F8:36:CE:CB:92:CD:A7:10:72:8E:02:15:0A:30:5F:D9:D5:BE
            X509v3 Authority Key Identifier:
                keyid:68:53:C4:E2:1B:5D:33:70:8B:0F:5E:AE:18:B7:89:FC:67:7C:81:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/aFPE4htdM3CLD16uGLeJ_Gd8gQg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BB70A/FFFFEBA0791611F1B9FF45F2CE1D38B0/aFPE4htdM3CLD16uGLeJ_Gd8gQg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c6:cf:5d:ce:b5:06:80:43:21:5d:36:97:10:7a:83:8c:96:
         65:b3:2c:55:c4:f5:28:08:3c:41:4c:0f:20:6e:93:c1:77:a7:
         b1:5b:98:b0:0c:63:63:e9:20:2b:ae:77:27:17:b7:48:a4:68:
         54:c4:56:9d:41:5c:f1:a8:a4:b1:42:a4:de:62:f7:4f:04:f2:
         41:e4:40:93:f3:13:be:8e:e7:d3:a0:ed:6b:e1:d8:be:b3:a3:
         48:41:7e:dd:11:51:6b:75:37:73:f8:bc:a5:c7:c3:3e:22:ca:
         30:90:b0:00:74:00:45:8f:76:9b:e3:4d:8e:e4:42:bc:c9:95:
         63:57:2c:66:5f:dd:ee:42:bf:02:04:3c:b1:68:4c:c7:e1:be:
         43:10:28:80:91:a4:9d:f0:3f:4c:cf:1d:bb:c9:01:98:16:27:
         b0:b9:28:3c:34:ef:6f:4c:55:72:20:df:1f:2b:4a:a8:98:4e:
         ed:c8:e7:5f:6a:4b:ee:7a:02:b9:46:7c:62:f4:cc:3b:2f:36:
         ec:76:8c:63:7d:7e:1c:40:11:b2:54:3c:f6:60:db:e8:d3:f2:
         45:95:49:bd:e8:fa:2b:91:df:95:3a:18:a3:d5:df:ed:08:7a:
         df:10:66:75:c7:2c:dd:56:48:24:3f:bd:7f:7a:cf:73:86:7b:
         8f:10:cd:c4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAJUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkI3MEFBRjExMC8GA1UEBRMoNjg1M0M0RTIxQjVEMzM3MDhCMEY1RUFFMThCNzg5
RkM2NzdDODEwODAeFw0yNjExMTQwNTQyMjRaFw0yNjExMTYwNTQyMjRaMBgxFjAU
BgNVBAMTDTZhZjdmNGMwLWYwMmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4JjQ4rxRe212A1WZ6l4dXmPbd8Cf+/U08l4TUKdm8fz7HLxojoCxHmOcC
vuweC4zzPfamjBDCFGx24GjNH0ZgyfIPYpZzsJaaVgolv304S9RQCCy0dQvDAU4Z
zSMAR3jecjGRpsu/IVFpmObuxLlnxcl+I9Dzq2u/LKPq3z4OWzhQKrWWJ2FSF+os
kytZeJrbb89nt3zqBCFFD7crZj9+or5xW49wv/+uqSwEi/bc8j18jFyn8rDMjeg3
roPv567YdKsWzsv8oKnRSiazx3AOrKwEgpAWUnfqxI3nS7NCW6U13yrDz2/YoO5N
WIpD0Sl0GgmrSrKgKxB8hYOQSKFlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUOe34
Ns7Lks2nEHKOAhUKMF/Z1b4wHwYDVR0jBBgwFoAUaFPE4htdM3CLD16uGLeJ/Gd8
gQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJCNzBBL0ZGRkZFQkEwNzkxNjExRjFCOUZGNDVGMkNFMUQzOEIwL2FGUEU0
aHRkTTNDTEQxNnVHTGVKX0dkOGdRZy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2FGUEU0aHRkTTNDTEQxNnVHTGVKX0dkOGdRZy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkI3MEEvRkZGRkVCQTA3OTE2MTFGMUI5RkY0NUYyQ0Ux
RDM4QjAvYUZQRTRodGRNM0NMRDE2dUdMZUpfR2Q4Z1FnLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBIxs9dzrUGgEMhXTaXEHqDjJZlsyxV
xPUoCDxBTA8gbpPBd6exW5iwDGNj6SArrncnF7dIpGhUxFadQVzxqKSxQqTeYvdP
BPJB5ECT8xO+jufToO1r4di+s6NIQX7dEVFrdTdz+Lylx8M+IsowkLAAdABFj3ab
402O5EK8yZVjVyxmX93uQr8CBDyxaEzH4b5DECiAkaSd8D9Mzx27yQGYFiewuSg8
NO9vTFVyIN8fK0qomE7tyOdfakvuegK5Rnxi9Mw7LzbsdoxjfX4cQBGyVDz2YNvo
0/JFlUm96Porkd+VOhij1d/tCHrfEGZ1xyzdVkgkP71/es9zhnuPEM3E
-----END CERTIFICATE-----