Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
File:                     wDEb4pGTolThzVxYy7dlalArlVo.mft (raw, json)
Hash identifier:          8fiTHJa/fYcwEmd8ioGYwQmZlaJp3QO62SLrJYRoa/0=
Subject key identifier:   43:71:AF:CE:D4:87:F5:89:10:EF:4F:E7:C5:1A:9F:11:36:D9:44:28
Authority key identifier: C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A
Certificate issuer:       /CN=F36C2FCAAF/serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
Certificate serial:       017D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
Manifest number:          017D
Signing time:             Sun 11 Oct 2026 05:12:03 +0000
Manifest this update:     Sun 11 Oct 2026 05:12:02 +0000
Manifest next update:     Tue 13 Oct 2026 05:12:02 +0000
Files and hashes:         1: wDEb4pGTolThzVxYy7dlalArlVo.crl (hash: l9dEp5MLKWH4bgRcmVvmJyX/CyTKV9YiuejzpMvj+aA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 13 Oct 2026 00:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 381 (0x17d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C2FCAAF, serialNumber=C0311BE29193A254E1CD5C58CBB7656A502B955A
        Validity
            Not Before: Oct 11 05:12:02 2026 GMT
            Not After : Oct 13 05:12:02 2026 GMT
        Subject: CN=6acb1aa3-dd4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b2:17:78:d6:db:4c:96:04:7d:b1:c5:22:35:
                    57:ff:2b:43:66:bf:32:b1:73:dd:b1:70:8f:ee:dd:
                    cb:cd:b4:61:93:ee:ba:5e:f4:f0:65:1e:29:51:77:
                    46:bf:84:34:63:d9:a0:19:82:f2:a8:36:53:f4:a3:
                    e7:45:ff:05:c6:d9:06:80:dc:37:29:2c:c0:a0:b6:
                    6d:2a:9e:07:5e:c4:0f:70:80:89:ba:32:75:9e:42:
                    71:0e:aa:66:b0:f7:c7:50:3f:10:3d:61:d8:4d:ef:
                    ac:10:02:6a:4d:bf:68:3a:d4:50:f1:32:f9:86:d9:
                    80:28:64:67:fe:d3:70:7d:19:48:0d:56:e8:a6:1e:
                    09:fd:5d:d5:28:c9:c6:7b:dd:c1:34:d4:65:cd:46:
                    44:25:4e:af:34:eb:1b:1a:05:33:30:45:4a:a8:ee:
                    3e:62:45:52:4a:46:49:92:d5:6d:c8:d8:76:e8:5f:
                    49:0c:0b:d7:73:0b:f6:65:fe:f2:b6:f3:9b:30:37:
                    e7:ca:89:8b:b9:dd:cf:bd:3f:00:05:17:84:db:b2:
                    ce:d5:0f:3b:4d:6a:f1:df:68:cb:ba:cb:5e:91:d4:
                    c3:46:47:4e:16:50:b4:b5:9a:9a:42:4e:97:b5:fe:
                    af:1b:7f:f7:ba:da:f7:1f:74:f0:39:3d:28:b8:a3:
                    c9:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:71:AF:CE:D4:87:F5:89:10:EF:4F:E7:C5:1A:9F:11:36:D9:44:28
            X509v3 Authority Key Identifier:
                keyid:C0:31:1B:E2:91:93:A2:54:E1:CD:5C:58:CB:B7:65:6A:50:2B:95:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/wDEb4pGTolThzVxYy7dlalArlVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C2FCA/A0A849CC9E1511F0A83E87BFDAE4EC9C/wDEb4pGTolThzVxYy7dlalArlVo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:9c:a9:62:8d:46:e4:6d:84:28:b5:bb:d2:c6:df:e7:73:4e:
         f9:31:d4:a5:c8:1d:91:dc:cd:6d:b1:82:ed:79:82:5d:92:3e:
         f5:bd:8f:f7:98:d4:b1:35:29:11:c6:75:6b:e1:97:01:0c:3c:
         de:a7:32:b3:78:62:69:4d:1c:b6:49:20:58:58:a9:2f:f1:75:
         f5:53:85:38:74:fb:41:70:13:05:01:41:b9:e7:eb:65:4e:ba:
         7a:c1:12:a4:75:23:2a:0e:cf:14:ff:90:30:90:50:3a:7d:cd:
         77:90:43:0b:d5:1f:c2:91:31:6f:4e:2a:91:d4:9c:ec:d9:71:
         9c:07:d0:5c:98:34:19:90:71:3b:84:87:0b:9c:4c:61:8c:c5:
         67:a3:95:4a:25:94:d9:de:e0:8e:d8:95:f5:a6:46:6d:00:25:
         51:30:3f:6b:2d:6a:f5:d2:71:e7:7c:23:4b:ba:1c:94:19:8d:
         51:22:dc:0b:a3:32:c7:94:ae:21:be:01:aa:8d:90:ae:b9:5e:
         0e:86:26:34:50:95:5b:f0:f3:fa:74:7e:32:31:8e:87:7c:78:
         09:fb:47:d9:6c:65:d4:ee:80:2d:a3:5c:5d:ce:5d:ce:c2:5d:
         94:28:b8:36:aa:3a:05:20:d9:b6:99:18:76:e3:1c:02:57:25:
         86:8b:4f:f2
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAX0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzJGQ0FBRjExMC8GA1UEBRMoQzAzMTFCRTI5MTkzQTI1NEUxQ0Q1QzU4Q0JCNzY1
NkE1MDJCOTU1QTAeFw0yNjEwMTEwNTEyMDJaFw0yNjEwMTMwNTEyMDJaMBgxFjAU
BgNVBAMTDTZhY2IxYWEzLWRkNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC/shd41ttMlgR9scUiNVf/K0NmvzKxc92xcI/u3cvNtGGT7rpe9PBlHilR
d0a/hDRj2aAZgvKoNlP0o+dF/wXG2QaA3DcpLMCgtm0qngdexA9wgIm6MnWeQnEO
qmaw98dQPxA9YdhN76wQAmpNv2g61FDxMvmG2YAoZGf+03B9GUgNVuimHgn9XdUo
ycZ73cE01GXNRkQlTq806xsaBTMwRUqo7j5iRVJKRkmS1W3I2HboX0kMC9dzC/Zl
/vK285swN+fKiYu53c+9PwAFF4Tbss7VDztNavHfaMu6y16R1MNGR04WULS1mppC
Tpe1/q8bf/e62vcfdPA5PSi4o8mFAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUQ3Gv
ztSH9YkQ70/nxRqfETbZRCgwHwYDVR0jBBgwFoAUwDEb4pGTolThzVxYy7dlalAr
lVowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkMyRkNBL0EwQTg0OUNDOUUxNTExRjBBODNFODdCRkRBRTRFQzlDL3dERWI0
cEdUb2xUaHpWeFl5N2RsYWxBcmxWby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3dERWI0cEdUb2xUaHpWeFl5N2RsYWxBcmxWby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzJGQ0EvQTBBODQ5Q0M5RTE1MTFGMEE4M0U4N0JGREFF
NEVDOUMvd0RFYjRwR1RvbFRoelZ4WXk3ZGxhbEFybFZvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBNnKlijUbkbYQotbvSxt/nc075MdSl
yB2R3M1tsYLteYJdkj71vY/3mNSxNSkRxnVr4ZcBDDzepzKzeGJpTRy2SSBYWKkv
8XX1U4U4dPtBcBMFAUG55+tlTrp6wRKkdSMqDs8U/5AwkFA6fc13kEML1R/CkTFv
TiqR1Jzs2XGcB9BcmDQZkHE7hIcLnExhjMVno5VKJZTZ3uCO2JX1pkZtACVRMD9r
LWr10nHnfCNLuhyUGY1RItwLozLHlK4hvgGqjZCuuV4OhiY0UJVb8PP6dH4yMY6H
fHgJ+0fZbGXU7oAto1xdzl3Owl2UKLg2qjoFINm2mRh24xwCVyWGi0/y
-----END CERTIFICATE-----