Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
File:                     e5XIh1o9qSB6rcxUQDFzjYpiLas.mft (raw, json)
Hash identifier:          rtiyUnEC4YFB26Xr+z+7H0J6iigjFUVIcw/wr00zvuI=
Subject key identifier:   92:F2:9C:1F:59:9E:D8:96:64:26:2C:3C:D5:8C:AD:93:CB:00:E9:6B
Authority key identifier: 7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB
Certificate issuer:       /CN=F36E38E5AF/serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
Certificate serial:       05C2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
Manifest number:          05C2
Signing time:             Mon 28 Sep 2026 03:04:41 +0000
Manifest this update:     Mon 28 Sep 2026 03:04:40 +0000
Manifest next update:     Wed 30 Sep 2026 03:04:40 +0000
Files and hashes:         1: e5XIh1o9qSB6rcxUQDFzjYpiLas.crl (hash: iFifE9XP6fckEp1+ZUmveZUkOCINSDG6pyL94F2Domw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
                          rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E38E5AF, serialNumber=7B95C8875A3DA9207AADCC544031738D8A622DAB
        Validity
            Not Before: Sep 28 03:04:40 2026 GMT
            Not After : Sep 30 03:04:40 2026 GMT
        Subject: CN=6ab9d948-3f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ed:3b:bd:c2:76:57:8c:84:a7:7c:84:36:03:
                    42:84:57:d3:20:c0:70:f3:09:c8:2b:7a:c2:99:35:
                    be:f2:7c:3e:01:a2:e2:24:e0:91:89:d6:68:63:33:
                    73:21:cc:08:68:df:ba:1c:cb:9f:85:92:7a:10:65:
                    46:5a:1b:5c:ba:08:99:8a:ed:20:d2:08:d6:b5:a1:
                    b1:c8:33:b1:1d:39:bf:06:df:90:bf:6a:22:ca:98:
                    ba:1c:8d:fd:33:4d:e9:c8:3c:83:d3:93:a1:c5:5f:
                    9c:4d:35:4d:9d:78:30:0b:4a:e6:1d:0f:31:c1:af:
                    98:14:a0:ae:d0:65:10:b2:31:a5:e0:96:0a:af:87:
                    c0:70:1a:a3:d4:7a:28:ae:0c:c1:ad:59:4e:1e:fe:
                    40:cd:f9:6f:37:e6:c6:b2:4f:f9:13:58:ec:7f:4a:
                    25:ff:cc:20:0e:d0:e8:65:2e:5c:c7:62:eb:2a:0b:
                    3f:b4:3b:b6:45:c2:1c:ff:64:34:93:eb:e9:d3:e9:
                    72:87:77:d4:53:b3:50:36:77:06:15:a9:65:1f:1e:
                    3e:83:d8:31:fa:2d:3e:0e:06:2b:b7:ff:51:e3:9d:
                    e4:6b:68:b8:b3:77:e3:25:8f:ee:fc:03:d1:9f:95:
                    dc:66:ba:6f:2a:71:bf:8b:e1:10:a7:b3:5e:d8:cf:
                    75:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F2:9C:1F:59:9E:D8:96:64:26:2C:3C:D5:8C:AD:93:CB:00:E9:6B
            X509v3 Authority Key Identifier:
                keyid:7B:95:C8:87:5A:3D:A9:20:7A:AD:CC:54:40:31:73:8D:8A:62:2D:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/e5XIh1o9qSB6rcxUQDFzjYpiLas.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E38E5/C89F9E94553E11ED8E2230CAF1222468/e5XIh1o9qSB6rcxUQDFzjYpiLas.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:6d:b4:9a:e1:fc:7f:79:4e:d2:e4:1c:77:b9:f6:2c:86:46:
         92:13:77:a0:2e:f2:68:f0:ec:ea:4c:fc:a6:63:ef:cc:5d:74:
         00:62:48:56:d1:de:96:87:df:3c:a5:8e:e0:e6:60:a4:0d:ce:
         c0:de:49:00:81:1c:7b:1d:86:b1:b2:67:be:6f:c7:b0:bb:54:
         22:fb:c5:67:c2:fe:4f:d9:81:0b:4c:6b:95:d2:13:a4:ba:ec:
         6f:08:d5:71:da:83:d6:d0:39:ab:2f:00:cd:d8:df:9e:06:8a:
         73:55:b4:fd:88:73:b3:fe:7e:ac:f3:1d:f5:dc:6c:e7:5a:64:
         d6:d7:2f:1e:36:1c:7d:8e:af:e4:17:47:15:36:42:0b:cf:57:
         2d:51:b6:7f:22:76:63:ad:58:d3:48:ac:47:aa:6a:e2:6a:d5:
         b6:33:46:09:1b:59:b1:9a:4e:d2:2f:d8:63:6d:d2:0d:e5:b8:
         02:67:26:1c:63:a4:cc:de:17:93:54:75:3b:c0:55:15:53:d2:
         86:02:e3:81:20:d5:f1:6f:0c:2a:12:e1:a6:ed:f7:0d:a1:39:
         dd:83:27:64:47:a8:a6:b1:a2:16:95:62:45:4c:bb:e8:01:2e:
         18:30:cc:1e:84:e7:fe:44:5b:45:45:ec:af:e5:80:8f:4b:38:
         87:b5:30:9f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBcIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTM4RTVBRjExMC8GA1UEBRMoN0I5NUM4ODc1QTNEQTkyMDdBQURDQzU0NDAzMTcz
OEQ4QTYyMkRBQjAeFw0yNjA5MjgwMzA0NDBaFw0yNjA5MzAwMzA0NDBaMBgxFjAU
BgNVBAMTDTZhYjlkOTQ4LTNmN2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDI7Tu9wnZXjISnfIQ2A0KEV9MgwHDzCcgresKZNb7yfD4BouIk4JGJ1mhj
M3MhzAho37ocy5+FknoQZUZaG1y6CJmK7SDSCNa1obHIM7EdOb8G35C/aiLKmLoc
jf0zTenIPIPTk6HFX5xNNU2deDALSuYdDzHBr5gUoK7QZRCyMaXglgqvh8BwGqPU
eiiuDMGtWU4e/kDN+W835sayT/kTWOx/SiX/zCAO0OhlLlzHYusqCz+0O7ZFwhz/
ZDST6+nT6XKHd9RTs1A2dwYVqWUfHj6D2DH6LT4OBiu3/1HjneRraLizd+Mlj+78
A9Gfldxmum8qcb+L4RCns17Yz3X/AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUkvKc
H1me2JZkJiw81Yytk8sA6WswHwYDVR0jBBgwFoAUe5XIh1o9qSB6rcxUQDFzjYpi
LaswDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUzOEU1L0M4OUY5RTk0NTUzRTExRUQ4RTIyMzBDQUYxMjIyNDY4L2U1WElo
MW85cVNCNnJjeFVRREZ6allwaUxhcy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2U1WEloMW85cVNCNnJjeFVRREZ6allwaUxhcy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTM4RTUvQzg5RjlFOTQ1NTNFMTFFRDhFMjIzMENBRjEy
MjI0NjgvZTVYSWgxbzlxU0I2cmN4VVFERnpqWXBpTGFzLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDdbbSa4fx/eU7S5Bx3ufYshkaSE3eg
LvJo8OzqTPymY+/MXXQAYkhW0d6Wh988pY7g5mCkDc7A3kkAgRx7HYaxsme+b8ew
u1Qi+8Vnwv5P2YELTGuV0hOkuuxvCNVx2oPW0DmrLwDN2N+eBopzVbT9iHOz/n6s
8x313GznWmTW1y8eNhx9jq/kF0cVNkILz1ctUbZ/InZjrVjTSKxHqmriatW2M0YJ
G1mxmk7SL9hjbdIN5bgCZyYcY6TM3heTVHU7wFUVU9KGAuOBINXxbwwqEuGm7fcN
oTndgydkR6imsaIWlWJFTLvoAS4YMMwehOf+RFtFReyv5YCPSziHtTCf
-----END CERTIFICATE-----