Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
File:                     SfsOFqhdQF1bnyOWCmkJwdfBW38.mft (raw, json)
Hash identifier:          jcf6ZJjt3lJbzOZDf3d1KckZaEcP1rG77ZQLaRh2/eM=
Subject key identifier:   8D:CA:BB:5A:6A:E1:73:FB:58:B9:79:0B:93:17:CE:66:3A:51:11:FD
Authority key identifier: 49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F
Certificate issuer:       /CN=F36D987FAR/serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
Certificate serial:       44
Authority info access:    rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
Manifest number:          43
Signing time:             Wed 23 Sep 2026 05:46:15 +0000
Manifest this update:     Wed 23 Sep 2026 05:46:15 +0000
Manifest next update:     Fri 25 Sep 2026 05:46:15 +0000
Files and hashes:         1: SfsOFqhdQF1bnyOWCmkJwdfBW38.crl (hash: 1ctA6gxA9dCXezG6OOwaSEiTz9ekCtWyewyIUG2Ep8E=)
                          2: 423092FE844811F190DB7106CF1D38B0.roa (hash: rbEzzy1Z6bVrpIUjaoY1g/gq6tM0MnrHv81mcm8Ps6Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
                          rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 05:46:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D987FAR, serialNumber=49FB0E16A85D405D5B9F23960A6909C1D7C15B7F
        Validity
            Not Before: Sep 23 05:46:15 2026 GMT
            Not After : Sep 25 05:46:15 2026 GMT
        Subject: CN=6ab367a7-b1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:c1:c3:1f:52:26:39:71:c8:96:b4:9e:34:
                    9f:da:a1:1f:61:af:2b:bc:41:86:75:56:2d:34:c3:
                    5a:1e:88:76:05:8c:ae:5d:6b:86:5b:0c:fb:65:8e:
                    08:47:3b:dd:fe:7e:c5:b2:e0:3f:5d:10:7d:f9:9f:
                    86:04:5e:5c:b8:9c:2b:0c:5a:be:d3:9c:14:dd:8c:
                    a9:cd:5e:23:6b:37:c9:78:9c:c0:5f:d5:a4:90:bd:
                    25:91:60:c2:dd:ab:a4:76:61:95:74:2a:0e:d1:02:
                    e4:f2:c6:8f:61:8d:12:5d:84:05:3c:50:3c:d8:fa:
                    57:c6:ef:b4:c3:92:7d:ff:09:c4:37:1a:d0:d9:ba:
                    76:56:67:79:65:08:46:de:16:ed:1d:ab:42:75:90:
                    31:31:3c:30:98:61:05:be:da:66:3c:56:45:95:dd:
                    0f:5c:df:05:9a:b2:cf:70:ed:1d:f1:f8:03:3e:0f:
                    8d:a7:6f:d9:de:cb:49:32:dc:f1:62:fc:74:40:49:
                    f2:25:89:17:ef:f5:2d:d8:3f:a1:36:cb:e9:42:35:
                    c4:1e:17:16:b2:76:66:4a:b8:9b:33:df:74:9a:10:
                    55:44:ee:33:61:95:0c:3a:cb:b2:d7:fc:4a:64:f6:
                    57:13:1d:3f:30:01:5c:d4:76:1a:7a:ca:a3:64:00:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:CA:BB:5A:6A:E1:73:FB:58:B9:79:0B:93:17:CE:66:3A:51:11:FD
            X509v3 Authority Key Identifier:
                keyid:49:FB:0E:16:A8:5D:40:5D:5B:9F:23:96:0A:69:09:C1:D7:C1:5B:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/SfsOFqhdQF1bnyOWCmkJwdfBW38.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D987F/2577FD42844211F1B94C71E5CE1D38B0/SfsOFqhdQF1bnyOWCmkJwdfBW38.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:54:dc:46:2e:18:e3:2f:e8:d4:07:0e:47:99:6e:1f:52:39:
         f1:65:b4:2a:86:4e:57:11:0b:07:40:b5:4f:c7:4d:f5:a1:0b:
         20:12:35:fb:59:af:d2:01:10:d4:3b:1a:2d:a7:3f:5f:fb:5b:
         16:d4:cc:37:69:2f:dc:11:30:76:b2:44:85:28:cb:21:2f:7b:
         d4:8c:71:1a:82:91:10:03:9e:16:7c:bf:20:8f:7c:c0:07:1d:
         6c:ef:b0:14:b0:2a:7f:98:f7:04:66:39:68:c2:09:d2:96:53:
         7a:68:2a:a9:f5:9d:76:46:62:8c:23:ab:07:2b:1f:8f:ff:c1:
         9c:b6:6d:fd:f0:23:63:7f:9f:99:39:04:a9:4a:72:ce:d9:67:
         b1:db:50:14:38:33:11:18:91:15:ed:87:fa:9d:ec:63:d9:f7:
         ac:4d:39:10:5d:16:85:a4:a3:24:6d:6c:a0:c8:ae:83:5d:df:
         d9:01:77:57:07:3d:9f:3f:c0:8f:66:b6:91:ae:f2:20:ff:74:
         0f:15:ae:b0:62:0d:f4:4c:82:78:34:d6:aa:55:08:77:44:c4:
         cb:a9:4d:e2:d5:57:79:cb:c3:01:0d:4a:b0:68:e5:f9:a3:e7:
         33:25:ba:99:f0:6e:a6:c7:f0:f3:d0:2b:af:fe:30:d4:e3:4f:
         3f:9f:c3:aa
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBRDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZE
OTg3RkFSMTEwLwYDVQQFEyg0OUZCMEUxNkE4NUQ0MDVENUI5RjIzOTYwQTY5MDlD
MUQ3QzE1QjdGMB4XDTI2MDkyMzA1NDYxNVoXDTI2MDkyNTA1NDYxNVowGDEWMBQG
A1UEAxMNNmFiMzY3YTctYjFhOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALtgwcMfUiY5cciWtJ40n9qhH2GvK7xBhnVWLTTDWh6IdgWMrl1rhlsM+2WO
CEc73f5+xbLgP10QffmfhgReXLicKwxavtOcFN2Mqc1eI2s3yXicwF/VpJC9JZFg
wt2rpHZhlXQqDtEC5PLGj2GNEl2EBTxQPNj6V8bvtMOSff8JxDca0Nm6dlZneWUI
Rt4W7R2rQnWQMTE8MJhhBb7aZjxWRZXdD1zfBZqyz3DtHfH4Az4Pjadv2d7LSTLc
8WL8dEBJ8iWJF+/1Ldg/oTbL6UI1xB4XFrJ2Zkq4mzPfdJoQVUTuM2GVDDrLstf8
SmT2VxMdPzABXNR2GnrKo2QAQSMCAwEAAaOCArUwggKxMB0GA1UdDgQWBBSNyrta
auFz+1i5eQuTF85mOlER/TAfBgNVHSMEGDAWgBRJ+w4WqF1AXVufI5YKaQnB18Fb
fzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2RDk4N0YvMjU3N0ZENDI4NDQyMTFGMUI5NEM3MUU1Q0UxRDM4QjAvU2ZzT0Zx
aGRRRjFibnlPV0Nta0p3ZGZCVzM4LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
U2ZzT0ZxaGRRRjFibnlPV0Nta0p3ZGZCVzM4LmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZEOTg3Ri8yNTc3RkQ0Mjg0NDIxMUYxQjk0QzcxRTVDRTFEMzhC
MC9TZnNPRnFoZFFGMWJueU9XQ21rSndkZkJXMzgubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC1U3EYuGOMv6NQHDkeZbh9SOfFltCqGTlcR
CwdAtU/HTfWhCyASNftZr9IBENQ7Gi2nP1/7WxbUzDdpL9wRMHayRIUoyyEve9SM
cRqCkRADnhZ8vyCPfMAHHWzvsBSwKn+Y9wRmOWjCCdKWU3poKqn1nXZGYowjqwcr
H4//wZy2bf3wI2N/n5k5BKlKcs7ZZ7HbUBQ4MxEYkRXth/qd7GPZ96xNORBdFoWk
oyRtbKDIroNd39kBd1cHPZ8/wI9mtpGu8iD/dA8VrrBiDfRMgng01qpVCHdExMup
TeLVV3nLwwENSrBo5fmj5zMlupnwbqbH8PPQK6/+MNTjTz+fw6o=
-----END CERTIFICATE-----