Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
File:                     OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft (raw, json)
Hash identifier:          40ckJBS33uBlV4jggp3Fl3f0Gs3PovUYB+OKFdVtUvA=
Subject key identifier:   78:01:3C:C2:1C:6D:18:6F:97:1D:9A:C7:61:68:EE:31:49:7F:C4:D5
Authority key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Certificate issuer:       /CN=F3610F96AF/serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Certificate serial:       04D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
Manifest number:          04D0
Signing time:             Sun 27 Sep 2026 03:33:29 +0000
Manifest this update:     Sun 27 Sep 2026 03:33:28 +0000
Manifest next update:     Tue 29 Sep 2026 03:33:28 +0000
Files and hashes:         1: OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl (hash: 69XJj8Ti/r0o+xUY4puGSP/nYVo3/vy/vkmIpqMoMuA=)
                          2: 31612164538311F182AFB0ACCE1D38B0.roa (hash: ymWXf0yxlrh1Y4pYFCcg1REPoB+gKEIeP6+qgKhj12k=)
                          3: B4993864538311F1B53AEFAECE1D38B0.roa (hash: 3z7Pymhab8EkuTX9K5wP76vuUvu1ud/Qr+5REcwgL4I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Sep 2026 00:07:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
        Validity
            Not Before: Sep 27 03:33:28 2026 GMT
            Not After : Sep 29 03:33:28 2026 GMT
        Subject: CN=6ab88e89-18e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4d:77:b9:b5:32:43:c7:79:de:99:ed:67:c5:
                    ba:a3:3f:cb:82:b0:d7:47:ca:95:7e:4d:e9:10:a7:
                    0f:4e:c0:ff:37:5e:6d:ad:2c:09:45:08:2d:49:ad:
                    f6:e2:54:76:99:d7:fc:2c:3a:48:b8:d0:e1:9f:44:
                    e6:ad:5b:32:f7:df:78:42:cf:22:cf:0c:a8:f4:0e:
                    50:60:ee:66:f8:14:40:3e:ac:cf:24:12:be:f7:74:
                    9b:76:e4:c2:03:92:c0:aa:fd:5d:05:c1:f7:9c:2f:
                    b7:1e:88:0b:ae:56:ff:40:c8:aa:2f:c7:11:08:cc:
                    42:b7:74:ac:3d:1e:36:47:2c:f3:f5:68:f8:73:d1:
                    f8:2c:95:94:5a:be:3c:6a:a1:88:c2:4a:a5:c8:8d:
                    0a:d8:62:d8:08:ab:27:44:41:e9:92:99:d7:83:f3:
                    71:9c:88:12:1c:1d:34:59:06:8c:79:b6:dd:31:54:
                    fe:a6:67:55:0e:39:2e:8e:8e:ec:57:8e:fd:62:0d:
                    da:29:bb:40:e7:29:ac:8d:c4:0c:6a:62:9d:80:ac:
                    15:e5:b1:89:9f:af:0f:e7:d0:fb:e1:9a:21:1e:32:
                    b2:1b:6b:7f:1e:e7:0c:48:0d:cb:bc:c0:66:3d:69:
                    70:98:a9:2a:a1:03:60:ff:91:4b:91:fb:37:87:0b:
                    fc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:01:3C:C2:1C:6D:18:6F:97:1D:9A:C7:61:68:EE:31:49:7F:C4:D5
            X509v3 Authority Key Identifier:
                keyid:39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:09:a2:2b:bb:40:a3:99:b1:0c:c4:0d:2d:68:82:f9:1b:4c:
         03:fe:2d:a3:fe:48:b7:14:f0:3e:16:24:24:23:54:7d:df:4e:
         b9:0d:1c:8b:0c:b9:0c:45:8a:b6:ce:7e:99:03:9c:68:df:3c:
         47:fc:28:56:99:ef:18:f7:47:7b:bb:5a:67:bd:3b:b0:f9:d9:
         e3:9f:21:73:cb:41:7b:4d:67:c0:48:23:3d:31:4e:e9:3b:b0:
         2e:1a:8c:df:20:e2:15:05:39:5d:6b:26:dc:f0:e0:9d:86:fa:
         65:35:53:65:bc:68:57:29:41:fb:fe:0e:fb:3d:e1:b6:e2:81:
         35:a3:04:c3:bd:06:58:f9:2b:60:59:f4:0f:93:6c:22:29:79:
         1a:c7:2c:f4:80:6e:b0:2d:22:fb:b1:a1:73:45:86:90:60:6b:
         e8:26:c1:7f:e8:70:e3:8a:79:88:7c:da:88:a7:f6:cc:d7:60:
         55:f4:e7:09:53:d1:d7:91:eb:91:b7:5e:33:f0:43:33:b3:88:
         fe:f8:3b:4b:1b:41:89:ee:d4:e9:f8:bb:fd:ab:15:44:4b:9b:
         4d:46:eb:21:9a:60:82:31:44:0c:28:a5:71:94:bf:81:23:a3:
         b7:79:5e:f4:26:96:14:32:51:ea:31:8a:eb:2b:a6:f6:1b:08:
         f0:a1:c1:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----