Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
File:                     OE9qPQyKkcXy3zehH1p7nFJb7hY.mft (raw, json)
Hash identifier:          p2VhcjuSrRwXGxwGUEscvi1furYN/FgtKOwYp1Sr9GU=
Subject key identifier:   19:8F:CE:7C:C0:21:0C:2F:F5:D9:CB:BC:7F:90:78:1E:C8:6D:37:EE
Authority key identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
Certificate issuer:       /CN=F36217DFAF/serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
Certificate serial:       027C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
Manifest number:          0275
Signing time:             Wed 14 Oct 2026 04:46:28 +0000
Manifest this update:     Wed 14 Oct 2026 04:46:27 +0000
Manifest next update:     Fri 16 Oct 2026 04:46:27 +0000
Files and hashes:         1: OE9qPQyKkcXy3zehH1p7nFJb7hY.crl (hash: 2DTVmq9eII+cMXBn0/1ijfFd7L1XhQtVS37cOBbief4=)
                          2: 49863F0CB41511F191BEB2E0CE1D38B0.roa (hash: 3KaLgkxRIv9mKIz2T3rdWSyIuo9dJomjhxFuksEB0U4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 16 Oct 2026 04:46:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36217DFAF, serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
        Validity
            Not Before: Oct 14 04:46:27 2026 GMT
            Not After : Oct 16 04:46:27 2026 GMT
        Subject: CN=6acf0924-b5b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b5:9e:dc:16:4a:de:b8:26:97:4b:c8:79:4f:
                    59:75:ff:b1:23:5d:0a:e5:01:cd:e5:d5:29:82:7b:
                    82:52:66:a8:8f:fb:c8:40:0b:d8:40:a1:4d:f0:25:
                    3d:e5:df:4b:72:ae:6f:49:16:da:bd:13:21:db:2b:
                    7b:e0:a8:cf:88:1b:f1:01:c5:ab:ad:4b:6d:db:84:
                    8f:7d:98:5a:25:82:1f:00:80:52:0b:21:5d:c7:cf:
                    e6:29:ca:15:fa:96:f8:d4:d6:b8:95:8f:6c:fd:ed:
                    dc:25:f6:0d:eb:fa:41:28:a3:4d:58:ce:1b:a1:28:
                    c6:c1:ea:83:7a:e6:3d:79:68:a8:2f:97:8c:fb:11:
                    e1:be:6f:71:5a:0a:97:3f:ad:e1:20:34:59:89:70:
                    f4:7f:a2:0e:d9:0e:20:3a:03:81:e0:ec:d8:b5:56:
                    58:7a:5b:1d:17:6a:55:4c:cc:19:6f:43:ec:b6:ef:
                    c4:c6:e2:de:f3:a4:3b:01:ba:8b:34:5b:08:ad:c1:
                    ea:02:95:9a:7c:63:d5:e4:e5:55:45:bd:28:b9:d2:
                    c5:cb:db:10:39:f8:80:1d:a9:a5:25:b6:d0:0b:42:
                    c9:cd:67:8a:dd:99:4a:0f:b3:8f:aa:6d:26:20:b6:
                    24:02:97:61:a2:59:15:58:31:62:75:18:63:d0:d1:
                    73:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:8F:CE:7C:C0:21:0C:2F:F5:D9:CB:BC:7F:90:78:1E:C8:6D:37:EE
            X509v3 Authority Key Identifier:
                keyid:38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d1:ee:16:87:9e:3e:a0:f7:66:87:0a:63:76:0a:31:35:3c:
         d1:ce:b4:1e:5f:e4:db:75:33:12:9a:1a:40:d4:90:30:b0:f6:
         32:cf:e9:83:c7:d8:49:f0:bc:bd:f6:35:ad:79:d3:ae:77:61:
         87:bc:74:88:46:da:91:34:1f:51:cf:f7:15:4d:9b:67:37:4e:
         45:01:da:c8:85:c5:af:13:79:ec:9a:64:ea:b7:c8:64:30:12:
         93:d4:ab:3b:92:af:c1:fc:33:12:a3:0b:ba:67:52:f5:df:ea:
         cb:53:fd:e3:e3:c7:7d:7d:5c:c7:66:51:c6:bd:59:57:9c:8b:
         94:26:45:13:75:e1:a8:06:1b:e8:bd:f1:57:64:82:a5:30:be:
         15:2a:97:7b:e7:c4:26:ac:f1:52:49:3e:af:dc:ce:bd:f7:ea:
         8f:3e:c5:59:7e:59:7e:69:87:00:bf:f3:d9:86:02:40:9c:96:
         4d:f6:67:0b:07:6a:56:2b:31:64:1e:d1:f9:a8:d2:78:ac:3f:
         ad:58:8d:29:fa:b9:67:eb:1c:38:0c:e2:10:f3:cb:44:a4:8b:
         b1:e8:d0:bd:8e:7f:6b:7b:b3:c4:ef:c2:46:c9:80:76:85:ec:
         4d:c6:dc:47:3a:87:c3:01:13:d8:cc:56:91:97:05:5c:f7:e9:
         ff:b6:0c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----