Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
File:                     vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft (raw, json)
Hash identifier:          OFSthR7nQf5Y0tvBUm1kbFU0F77hLt0pAIj0iALLzFM=
Subject key identifier:   7B:A9:89:AE:E5:B6:CD:1E:B2:2B:30:BF:6A:95:45:C1:F7:78:1D:A9
Authority key identifier: BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07
Certificate issuer:       /CN=F36E8561AF/serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
Certificate serial:       0769
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
Manifest number:          075F
Signing time:             Fri 25 Sep 2026 02:25:14 +0000
Manifest this update:     Fri 25 Sep 2026 02:25:14 +0000
Manifest next update:     Sun 27 Sep 2026 02:25:14 +0000
Files and hashes:         1: vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl (hash: QOj86OVnJPIrhZKgHXW8wPkAmAaj+Ma7RnwdypO4P64=)
                          2: AFDE69C68CF811F18341C016CF1D38B0.roa (hash: mT5nMrqRXRqXXKnaRzEOLJFC8qbz9f0ox6+C4Fo9TOQ=)
                          3: 317AE4828CF911F19F74D21ACF1D38B0.roa (hash: JRWmA6w5/LSwWW+ycmtMINiZNDhqO9ZSoeLjoCuCw/M=)
                          4: 468AC3F08CFA11F1B71454A4CE1D38B0.roa (hash: 6mWZgn/KcfB2BY7AoW70fjLPlx6gbDqJsBFgcfrpuzk=)
                          5: 8524123E8CF911F19032F61CCF1D38B0.roa (hash: 4VLJkcFCLAMaOfrVFnm4+gkXEwX6o/HDCHabYEKY8ew=)
                          6: CAF9A7748CF911F1A621EE1ECF1D38B0.roa (hash: CCsJv7lQrd4X0FxhvH6nH7QSt8msf0WAMGX9/sGHJzo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1897 (0x769)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E8561AF, serialNumber=BDF6F99CD082C13BEDA5DA0E89888DD532C86307
        Validity
            Not Before: Sep 25 02:25:14 2026 GMT
            Not After : Sep 27 02:25:14 2026 GMT
        Subject: CN=6ab5db8a-55a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b1:01:f6:f7:24:fe:31:ad:51:ba:dd:cc:28:
                    70:93:a7:c1:cc:1d:59:21:40:81:d7:4d:67:08:96:
                    46:ff:32:ae:6a:8a:d0:8f:cc:4c:b2:62:7c:fe:84:
                    a0:c2:0b:bd:f0:de:72:c0:f5:87:d3:e2:36:d6:33:
                    1f:50:f8:f5:d2:e2:51:27:50:2a:4b:d8:fc:f9:90:
                    a6:2a:19:e6:09:82:a9:a8:89:9a:d8:c4:e1:a6:c6:
                    09:dc:9b:3c:3e:06:dc:d2:c0:e1:f2:13:9c:b3:a6:
                    13:1d:9a:5e:3a:f7:c4:ba:1e:dd:60:87:50:e4:58:
                    cf:81:9e:68:bb:f3:1b:a6:f7:f3:5c:51:74:bc:15:
                    d7:d4:ce:37:1d:4d:c2:4a:a0:b8:70:45:56:f7:c7:
                    41:b0:37:4b:d0:4d:fa:39:e0:f9:21:46:18:dd:38:
                    f6:da:ca:4d:a2:64:3e:71:04:a7:e6:9e:64:9d:4c:
                    9b:3c:4b:12:8c:ab:3e:10:ba:53:84:fe:27:0e:89:
                    60:84:63:77:f0:fa:32:29:5c:cf:cc:64:16:e7:7d:
                    82:69:fb:e8:96:01:5a:de:ab:b2:a5:a3:14:f0:7e:
                    92:50:69:25:19:f0:0c:eb:cf:2c:98:80:9b:e4:9c:
                    8e:76:40:b8:b5:8e:7d:be:f9:35:c1:68:be:1e:8d:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A9:89:AE:E5:B6:CD:1E:B2:2B:30:BF:6A:95:45:C1:F7:78:1D:A9
            X509v3 Authority Key Identifier:
                keyid:BD:F6:F9:9C:D0:82:C1:3B:ED:A5:DA:0E:89:88:8D:D5:32:C8:63:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vfb5nNCCwTvtpdoOiYiN1TLIYwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E8561/B0D720E01C3F11ECBA220D0BD8A014CE/vfb5nNCCwTvtpdoOiYiN1TLIYwc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:b6:10:d5:f1:e4:7e:12:ba:04:d3:32:ed:78:d3:90:5e:ec:
         53:5c:c6:a1:6a:c2:0d:00:82:6f:b6:88:88:01:ff:83:d9:23:
         e3:fc:e2:54:c7:e1:5b:d7:d6:1e:ac:f3:6c:a6:53:f1:35:d7:
         99:8c:50:d2:d9:6e:fc:9c:cb:32:3d:46:2d:bd:5f:d9:5f:73:
         bb:80:5b:aa:cf:47:cd:8e:57:bd:f6:88:6a:85:3f:56:ae:f0:
         51:78:e7:63:37:d5:32:16:ee:05:0a:c2:34:08:f7:d7:9d:2f:
         74:1a:5b:6d:a4:48:80:74:34:ca:c8:b5:a5:db:47:74:df:33:
         80:09:fc:57:e6:70:69:4b:03:3c:69:26:86:c3:2f:99:f4:40:
         e7:8a:58:1d:80:c5:4f:36:1d:17:b2:46:2f:e0:ee:56:15:d1:
         c3:97:dd:ac:15:6a:02:14:76:6f:bc:90:43:58:d7:7c:1a:86:
         13:af:c4:ad:97:50:79:5b:d9:45:bd:16:6b:60:0e:a0:22:fc:
         52:52:17:c5:4f:61:14:23:5a:8c:d1:a9:bd:cd:96:5c:d1:92:
         57:8c:9b:e7:0c:bf:8f:06:42:b2:6b:84:73:74:6d:97:7f:f5:
         00:47:7c:84:aa:ec:1a:71:74:31:55:3c:7d:b3:d5:43:20:73:
         6e:06:c1:db
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICB2kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTg1NjFBRjExMC8GA1UEBRMoQkRGNkY5OUNEMDgyQzEzQkVEQTVEQTBFODk4ODhE
RDUzMkM4NjMwNzAeFw0yNjA5MjUwMjI1MTRaFw0yNjA5MjcwMjI1MTRaMBgxFjAU
BgNVBAMTDTZhYjVkYjhhLTU1YTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7sQH29yT+Ma1Rut3MKHCTp8HMHVkhQIHXTWcIlkb/Mq5qitCPzEyyYnz+
hKDCC73w3nLA9YfT4jbWMx9Q+PXS4lEnUCpL2Pz5kKYqGeYJgqmoiZrYxOGmxgnc
mzw+BtzSwOHyE5yzphMdml4698S6Ht1gh1DkWM+Bnmi78xum9/NcUXS8FdfUzjcd
TcJKoLhwRVb3x0GwN0vQTfo54PkhRhjdOPbayk2iZD5xBKfmnmSdTJs8SxKMqz4Q
ulOE/icOiWCEY3fw+jIpXM/MZBbnfYJp++iWAVreq7KloxTwfpJQaSUZ8AzrzyyY
gJvknI52QLi1jn2++TXBaL4ejbDrAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUe6mJ
ruW2zR6yKzC/apVFwfd4HakwHwYDVR0jBBgwFoAUvfb5nNCCwTvtpdoOiYiN1TLI
YwcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkU4NTYxL0IwRDcyMEUwMUMzRjExRUNCQTIyMEQwQkQ4QTAxNENFL3ZmYjVu
TkNDd1R2dHBkb09pWWlOMVRMSVl3Yy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3ZmYjVuTkNDd1R2dHBkb09pWWlOMVRMSVl3Yy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTg1NjEvQjBENzIwRTAxQzNGMTFFQ0JBMjIwRDBCRDhB
MDE0Q0UvdmZiNW5OQ0N3VHZ0cGRvT2lZaU4xVExJWXdjLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6thDV8eR+EroE0zLteNOQXuxTXMah
asINAIJvtoiIAf+D2SPj/OJUx+Fb19YerPNsplPxNdeZjFDS2W78nMsyPUYtvV/Z
X3O7gFuqz0fNjle99ohqhT9WrvBReOdjN9UyFu4FCsI0CPfXnS90GlttpEiAdDTK
yLWl20d03zOACfxX5nBpSwM8aSaGwy+Z9EDnilgdgMVPNh0XskYv4O5WFdHDl92s
FWoCFHZvvJBDWNd8GoYTr8Stl1B5W9lFvRZrYA6gIvxSUhfFT2EUI1qM0am9zZZc
0ZJXjJvnDL+PBkKya4RzdG2Xf/UAR3yEquwacXQxVTx9s9VDIHNuBsHb
-----END CERTIFICATE-----