Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
File:                     qUI_pMACbS5NqCEtEo2dJwfoHck.mft (raw, json)
Hash identifier:          qvPC7h5NpglHove5d7L28MROahhD3Jee8HLPnQ1PoU4=
Subject key identifier:   E7:A0:2E:D1:07:FD:9E:64:37:1F:8F:A7:29:B0:46:F6:51:3B:AA:8B
Authority key identifier: A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9
Certificate issuer:       /CN=F36E70F4AF/serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
Certificate serial:       0789
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
Manifest number:          0787
Signing time:             Wed 23 Sep 2026 02:18:41 +0000
Manifest this update:     Wed 23 Sep 2026 02:18:41 +0000
Manifest next update:     Fri 25 Sep 2026 02:18:41 +0000
Files and hashes:         1: qUI_pMACbS5NqCEtEo2dJwfoHck.crl (hash: 1yI2ePGloDX+/WTT1EDAx+TJZvUCzkAPPVVMa4YAU3A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                          rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 02:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1929 (0x789)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E70F4AF, serialNumber=A9423FA4C0026D2E4DA8212D128D9D2707E81DC9
        Validity
            Not Before: Sep 23 02:18:41 2026 GMT
            Not After : Sep 25 02:18:41 2026 GMT
        Subject: CN=6ab33701-0731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:78:77:b1:09:2f:04:41:8f:29:f7:62:cf:85:
                    55:a1:42:81:0f:28:9f:ca:9b:8b:06:37:5d:2b:03:
                    aa:90:b1:89:a1:68:ae:e9:8c:d6:29:8e:74:14:f6:
                    0a:44:2e:b3:c2:f0:16:8e:00:9f:c5:f2:e7:4d:ac:
                    18:7a:63:50:79:f4:a1:b9:77:72:eb:a0:b3:80:a3:
                    7e:a4:15:c8:cf:54:11:19:c5:9a:7c:ae:74:00:32:
                    a6:09:20:d5:97:3e:f1:af:25:e3:4c:5e:74:d2:3f:
                    44:7b:2f:40:a1:a5:86:4f:52:87:b4:16:3e:2e:eb:
                    12:f5:cc:fd:64:34:2e:79:8d:f8:3e:48:6f:74:ed:
                    87:de:cb:2c:b6:3f:e1:6c:07:12:18:4d:cb:ad:46:
                    ba:1a:09:1b:a4:a1:20:67:bf:e1:ea:1a:9e:de:fc:
                    75:9d:3e:57:95:b3:f0:7b:a2:d0:03:ed:0b:a1:ad:
                    4e:0a:d5:48:8a:66:9c:5a:e4:6a:77:50:66:10:30:
                    2e:64:e3:26:25:59:4e:6a:ee:3a:c3:d5:39:5f:0c:
                    b7:36:d8:39:14:06:5b:af:85:e4:b5:85:33:00:42:
                    e7:c5:0c:e8:de:fa:de:a5:33:f2:39:68:51:c6:68:
                    51:93:b6:8b:5b:a7:da:de:f0:70:8e:47:af:93:39:
                    47:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:A0:2E:D1:07:FD:9E:64:37:1F:8F:A7:29:B0:46:F6:51:3B:AA:8B
            X509v3 Authority Key Identifier:
                keyid:A9:42:3F:A4:C0:02:6D:2E:4D:A8:21:2D:12:8D:9D:27:07:E8:1D:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/qUI_pMACbS5NqCEtEo2dJwfoHck.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E70F4/69568416F05911EBAF56F43BD8A014CE/qUI_pMACbS5NqCEtEo2dJwfoHck.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:d8:3c:8b:a7:e8:df:32:06:77:a5:4e:ae:41:5c:df:14:10:
         64:4f:2d:6e:ce:55:ec:e7:08:88:ac:1b:9d:03:f1:84:4a:48:
         14:0b:bb:56:63:1d:5e:01:d5:86:c8:37:f1:99:b2:5c:e0:11:
         63:4d:b1:5a:fe:56:3f:d6:f5:88:c3:ae:24:56:38:6f:48:dc:
         f5:aa:40:f7:6d:5f:87:92:24:2d:65:14:27:09:72:87:32:f6:
         c6:81:b6:28:7e:e3:41:a4:a5:c1:34:3c:f4:1a:a1:f9:e0:0b:
         78:ed:52:3a:df:33:55:cd:54:f7:13:f7:ad:9d:2d:1c:5d:3f:
         3e:4b:cd:fe:fe:0c:29:01:d4:f0:4c:54:1c:36:5d:69:8d:8c:
         22:af:ab:b3:64:11:44:c1:df:a2:d5:de:3a:45:a3:0d:b2:fb:
         ea:d2:5f:b9:22:f7:9e:23:50:80:57:f5:d8:2b:fe:61:1b:18:
         05:a2:be:cc:74:bb:7e:fb:d8:1e:ea:7b:31:d4:98:35:b1:23:
         49:63:ba:30:1f:88:0a:c2:47:63:77:62:97:1e:d3:67:07:36:
         9b:74:01:a9:77:15:de:e7:9b:9c:cc:91:93:93:6a:a2:c2:e9:
         ef:a7:c8:05:44:dc:cc:52:d0:1b:bd:8c:65:03:da:75:64:0c:
         e0:d5:10:da
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB4kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTcwRjRBRjExMC8GA1UEBRMoQTk0MjNGQTRDMDAyNkQyRTREQTgyMTJEMTI4RDlE
MjcwN0U4MURDOTAeFw0yNjA5MjMwMjE4NDFaFw0yNjA5MjUwMjE4NDFaMBgxFjAU
BgNVBAMTDTZhYjMzNzAxLTA3MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCveHexCS8EQY8p92LPhVWhQoEPKJ/Km4sGN10rA6qQsYmhaK7pjNYpjnQU
9gpELrPC8BaOAJ/F8udNrBh6Y1B59KG5d3LroLOAo36kFcjPVBEZxZp8rnQAMqYJ
INWXPvGvJeNMXnTSP0R7L0ChpYZPUoe0Fj4u6xL1zP1kNC55jfg+SG907Yfeyyy2
P+FsBxIYTcutRroaCRukoSBnv+HqGp7e/HWdPleVs/B7otAD7QuhrU4K1UiKZpxa
5Gp3UGYQMC5k4yYlWU5q7jrD1TlfDLc22DkUBluvheS1hTMAQufFDOje+t6lM/I5
aFHGaFGTtotbp9re8HCOR6+TOUdnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU56Au
0Qf9nmQ3H4+nKbBG9lE7qoswHwYDVR0jBBgwFoAUqUI/pMACbS5NqCEtEo2dJwfo
HckwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU3MEY0LzY5NTY4NDE2RjA1OTExRUJBRjU2RjQzQkQ4QTAxNENFL3FVSV9w
TUFDYlM1TnFDRXRFbzJkSndmb0hjay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3FVSV9wTUFDYlM1TnFDRXRFbzJkSndmb0hjay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTcwRjQvNjk1Njg0MTZGMDU5MTFFQkFGNTZGNDNCRDhB
MDE0Q0UvcVVJX3BNQUNiUzVOcUNFdEVvMmRKd2ZvSGNrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBW2DyLp+jfMgZ3pU6uQVzfFBBkTy1u
zlXs5wiIrBudA/GESkgUC7tWYx1eAdWGyDfxmbJc4BFjTbFa/lY/1vWIw64kVjhv
SNz1qkD3bV+HkiQtZRQnCXKHMvbGgbYofuNBpKXBNDz0GqH54At47VI63zNVzVT3
E/etnS0cXT8+S83+/gwpAdTwTFQcNl1pjYwir6uzZBFEwd+i1d46RaMNsvvq0l+5
IveeI1CAV/XYK/5hGxgFor7MdLt++9ge6nsx1Jg1sSNJY7owH4gKwkdjd2KXHtNn
BzabdAGpdxXe55uczJGTk2qiwunvp8gFRNzMUtAbvYxlA9p1ZAzg1RDa
-----END CERTIFICATE-----