Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
File:                     QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft (raw, json)
Hash identifier:          kSRL581Xb+GfpPaf6Bmlg1hH5UIZfRZMjdSFn6wD48s=
Subject key identifier:   6E:F4:06:11:D2:3B:A0:17:88:95:D8:0F:E4:37:15:32:4E:25:32:F2
Authority key identifier: 40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9
Certificate issuer:       /CN=F36DBAE4AF/serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
Certificate serial:       0AD9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
Manifest number:          0AD6
Signing time:             Sun 04 Oct 2026 01:20:15 +0000
Manifest this update:     Sun 04 Oct 2026 01:20:14 +0000
Manifest next update:     Tue 06 Oct 2026 01:20:14 +0000
Files and hashes:         1: QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl (hash: ouVHOAxd1Wq5iJeRt9HroIeA23C+rlKRD6VtFIOppT0=)
                          2: 9441D5EEDAC711E9BF722B0BF8AEA228.roa (hash: axIaMQf67dy55F4A4FCaJkKKc0Bb9fF9saVchkeuCiI=)
                          3: A99AE7C0DAC511E985EBCE09F8AEA228.roa (hash: OIGU7l2JXL8/haZu4eER9KuF5vp4/ZseEXDNYZByKwk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 06 Oct 2026 00:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2777 (0xad9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBAE4AF, serialNumber=40EE05FD0F31B5FB0ECC5625208AB50859F9E9F9
        Validity
            Not Before: Oct  4 01:20:14 2026 GMT
            Not After : Oct  6 01:20:14 2026 GMT
        Subject: CN=6ac1a9cf-a8f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:29:2e:1a:7f:97:83:b7:9f:c4:fa:a5:df:ce:
                    04:c1:66:0f:5a:09:0f:11:e6:a8:33:cc:ff:cf:ba:
                    87:b5:ea:7a:63:27:ea:38:11:8d:c9:b5:ef:ab:b1:
                    20:76:75:13:84:b9:90:b5:8a:c0:8f:cc:ad:a0:ae:
                    af:ac:b2:c7:68:d8:c8:92:89:09:79:c9:8b:50:9c:
                    67:3b:eb:7d:5e:37:2d:26:47:35:74:e5:1e:49:c8:
                    b9:da:6a:05:83:69:4c:fa:35:e4:dd:39:1e:0d:21:
                    b8:bf:5e:87:5e:c1:48:37:e9:33:4b:97:e8:92:c1:
                    e2:af:dc:da:9f:ee:53:0e:99:ce:7c:a5:2f:28:9c:
                    a5:08:5f:2d:cc:46:68:ee:ef:5c:ef:82:c0:2a:16:
                    7d:6d:6c:c0:77:2a:98:e4:17:0f:5d:e5:0e:62:ea:
                    ce:2d:5b:c7:dc:48:95:0f:bf:61:7d:46:f6:e9:ad:
                    cd:a2:67:6f:c7:ea:5b:11:f6:80:b5:44:11:55:92:
                    52:6c:c7:60:01:1b:3f:a5:65:5e:ef:4d:6b:f3:15:
                    12:5c:21:8f:1b:8f:66:93:8a:23:be:26:02:41:31:
                    30:a1:0b:2d:f8:82:61:2b:39:45:87:79:dd:9b:bd:
                    b5:8e:95:91:3a:4c:aa:d4:9f:39:59:14:f2:59:87:
                    a3:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:F4:06:11:D2:3B:A0:17:88:95:D8:0F:E4:37:15:32:4E:25:32:F2
            X509v3 Authority Key Identifier:
                keyid:40:EE:05:FD:0F:31:B5:FB:0E:CC:56:25:20:8A:B5:08:59:F9:E9:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/QO4F_Q8xtfsOzFYlIIq1CFn56fk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBAE4/858F2982732211E9AEBC3184F8AEA228/QO4F_Q8xtfsOzFYlIIq1CFn56fk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:54:d4:1b:d4:26:c6:04:e6:80:05:a7:3c:a5:3e:b4:8b:6a:
         3e:85:b5:c7:a4:d0:e1:f8:93:9e:11:48:97:cb:08:a5:07:7e:
         7b:46:55:e9:fd:1e:89:72:63:4f:e7:8a:4c:a5:ae:8d:b3:ed:
         86:03:24:83:9b:f5:85:de:a7:dc:15:29:21:31:09:66:49:7a:
         4c:dd:e6:18:ee:2f:34:0c:50:ee:95:8b:7e:6f:3b:f4:81:bc:
         75:20:92:81:9e:3a:9c:0f:6a:ae:a6:67:d9:b2:dc:6a:0b:c5:
         73:fe:3f:aa:a3:e1:0f:b4:fd:1e:2f:70:d4:fb:a8:7c:2b:b5:
         06:8e:d9:f2:73:d7:a3:9d:b2:3c:40:f2:0e:48:fa:e3:9b:c3:
         43:ec:ae:df:a8:8d:58:31:40:da:5e:d5:f3:7a:e3:1f:20:bc:
         f9:4a:63:ec:2e:b2:f8:b2:a2:77:41:84:85:0d:34:f5:8e:96:
         0d:da:a2:f4:89:e2:a8:77:dc:e8:66:c9:0d:35:12:10:ed:cd:
         02:30:09:ee:90:32:2e:78:62:2e:c1:30:62:5a:d3:fb:fe:c7:
         e8:04:34:c5:2f:4d:b4:aa:29:73:66:5f:10:67:e0:8b:1c:20:
         7f:2d:ac:aa:2d:43:16:de:85:0c:d7:73:05:c1:c0:c6:5c:df:
         77:a0:e1:c4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCtkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REJBRTRBRjExMC8GA1UEBRMoNDBFRTA1RkQwRjMxQjVGQjBFQ0M1NjI1MjA4QUI1
MDg1OUY5RTlGOTAeFw0yNjEwMDQwMTIwMTRaFw0yNjEwMDYwMTIwMTRaMBgxFjAU
BgNVBAMTDTZhYzFhOWNmLWE4ZjkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDHKS4af5eDt5/E+qXfzgTBZg9aCQ8R5qgzzP/Puoe16npjJ+o4EY3Jte+r
sSB2dROEuZC1isCPzK2grq+sssdo2MiSiQl5yYtQnGc7631eNy0mRzV05R5JyLna
agWDaUz6NeTdOR4NIbi/XodewUg36TNLl+iSweKv3Nqf7lMOmc58pS8onKUIXy3M
Rmju71zvgsAqFn1tbMB3KpjkFw9d5Q5i6s4tW8fcSJUPv2F9Rvbprc2iZ2/H6lsR
9oC1RBFVklJsx2ABGz+lZV7vTWvzFRJcIY8bj2aTiiO+JgJBMTChCy34gmErOUWH
ed2bvbWOlZE6TKrUnzlZFPJZh6N1AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbvQG
EdI7oBeIldgP5DcVMk4lMvIwHwYDVR0jBBgwFoAUQO4F/Q8xtfsOzFYlIIq1CFn5
6fkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCQUU0Lzg1OEYyOTgyNzMyMjExRTlBRUJDMzE4NEY4QUVBMjI4L1FPNEZf
UTh4dGZzT3pGWWxJSXExQ0ZuNTZmay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL1FPNEZfUTh4dGZzT3pGWWxJSXExQ0ZuNTZmay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REJBRTQvODU4RjI5ODI3MzIyMTFFOUFFQkMzMTg0RjhB
RUEyMjgvUU80Rl9ROHh0ZnNPekZZbElJcTFDRm41NmZrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAvVNQb1CbGBOaABac8pT60i2o+hbXH
pNDh+JOeEUiXywilB357RlXp/R6JcmNP54pMpa6Ns+2GAySDm/WF3qfcFSkhMQlm
SXpM3eYY7i80DFDulYt+bzv0gbx1IJKBnjqcD2qupmfZstxqC8Vz/j+qo+EPtP0e
L3DU+6h8K7UGjtnyc9ejnbI8QPIOSPrjm8ND7K7fqI1YMUDaXtXzeuMfILz5SmPs
LrL4sqJ3QYSFDTT1jpYN2qL0ieKod9zoZskNNRIQ7c0CMAnukDIueGIuwTBiWtP7
/sfoBDTFL020qilzZl8QZ+CLHCB/LayqLUMW3oUM13MFwcDGXN93oOHE
-----END CERTIFICATE-----