Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
File:                     OudkbOatVp92Fuam9v07GYa-1Bk.mft (raw, json)
Hash identifier:          bMZs/2ghZrEy4XAe6GeVF2g0kMywYkLAWjnVpv5HhSw=
Subject key identifier:   71:51:40:C6:D8:83:37:2C:48:E8:D6:42:CB:2C:A1:E4:72:AB:5C:87
Authority key identifier: 3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19
Certificate issuer:       /CN=F366A2B2AF/serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
Certificate serial:       01ED
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
Manifest number:          01EA
Signing time:             Sun 15 Nov 2026 05:00:08 +0000
Manifest this update:     Sun 15 Nov 2026 05:00:08 +0000
Manifest next update:     Tue 17 Nov 2026 05:00:08 +0000
Files and hashes:         1: OudkbOatVp92Fuam9v07GYa-1Bk.crl (hash: y2Ib2wGmnNDxg5pcpakM3Sne9pyrjE3o7WgWfiX8/kE=)
                          2: F8600BDE84B911F085AD04A3DAE4EC9C.roa (hash: DP8mnGerifLfSRadwXVvA2WZ6PCmE2usVrRlV28umhs=)
                          3: EF99DEAC66E711F0A50F79A4DAE4EC9C.roa (hash: 1ALkP5AE5BnLJ65DORy6a8qL9QHzH+dCAgd18lTAG+k=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Nov 2026 00:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 493 (0x1ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366A2B2AF, serialNumber=3AE7646CE6AD569F7616E6A6F6FD3B1986BED419
        Validity
            Not Before: Nov 15 05:00:08 2026 GMT
            Not After : Nov 17 05:00:08 2026 GMT
        Subject: CN=6af93c58-46d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:29:ce:d8:f9:3d:1e:44:f9:98:be:49:bb:b7:
                    2d:d2:ee:3c:70:20:3a:76:40:8d:b4:f8:2c:4e:19:
                    58:f9:30:87:28:15:f3:85:9b:a1:71:77:b5:05:8f:
                    86:7e:99:0f:1c:9c:67:9d:9d:b6:cc:29:f3:28:ce:
                    71:16:49:cb:11:9a:ae:fd:07:ba:00:2c:d2:a3:5d:
                    d6:ab:14:0c:a2:6e:28:5a:76:76:ea:b4:36:a9:02:
                    98:72:1d:16:51:1c:56:d2:ed:ac:68:be:d2:61:cd:
                    76:4b:d1:ec:91:65:ee:56:64:5d:21:23:c9:0c:d9:
                    20:7a:b6:87:2c:35:69:1d:3e:e3:9e:1f:df:92:63:
                    73:b9:51:33:9b:32:c3:e3:65:67:01:8e:7d:6c:e7:
                    f6:e7:a0:ed:c2:62:00:1f:4f:41:56:77:21:5b:3d:
                    11:5e:70:1c:8b:c6:08:3b:36:10:19:0e:68:6a:a2:
                    a5:da:a2:2f:1f:f9:48:8e:14:33:74:00:85:d1:5c:
                    89:cb:38:e4:24:8b:86:c4:fe:1d:fe:74:cc:7a:49:
                    8c:42:ff:31:20:7e:81:81:0e:39:bf:b4:11:89:50:
                    1b:c5:00:59:5c:81:97:52:30:24:51:51:19:ef:50:
                    a4:be:e1:db:3b:89:79:66:bb:54:fb:47:4c:ba:ff:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:40:C6:D8:83:37:2C:48:E8:D6:42:CB:2C:A1:E4:72:AB:5C:87
            X509v3 Authority Key Identifier:
                keyid:3A:E7:64:6C:E6:AD:56:9F:76:16:E6:A6:F6:FD:3B:19:86:BE:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OudkbOatVp92Fuam9v07GYa-1Bk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366A2B2/D3F441AE66E411F0A0DA6692DAE4EC9C/OudkbOatVp92Fuam9v07GYa-1Bk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ab:60:d0:c2:b7:c6:8e:a8:47:9d:6c:51:7d:c7:44:dd:7f:
         72:19:38:5a:f2:94:01:86:e4:54:6f:fc:8f:e0:c7:a8:ed:30:
         23:fa:91:50:31:8f:52:05:25:b0:68:e6:f4:36:0f:4d:99:43:
         3d:f9:59:7d:53:ec:f9:99:6d:0b:75:f1:fa:25:45:aa:74:01:
         c2:17:73:c3:90:8d:e0:2d:4d:f0:7c:b5:de:31:99:98:40:4d:
         4f:ff:fa:0d:2e:40:1d:32:9d:59:a4:9f:75:51:2c:4b:1a:48:
         b6:12:1f:8d:ee:91:e7:ca:d0:78:38:68:61:0e:0b:99:91:fb:
         aa:51:45:1c:e2:56:37:8b:44:a8:5e:3c:98:52:16:66:a5:aa:
         3f:3c:2b:ef:5e:cf:bf:c4:9e:b1:d7:c1:cd:80:e5:a2:72:df:
         32:41:b9:34:89:98:be:85:1b:ee:6c:52:e4:94:a4:a9:26:07:
         09:8d:17:c5:a2:60:ab:ef:2c:2c:3e:4d:47:b7:de:01:f4:24:
         d1:2c:23:17:53:cb:3d:0b:06:c3:78:b9:c2:be:8d:2e:0f:d7:
         43:10:7b:d6:39:ee:6c:df:9d:94:2c:30:25:1f:0f:80:53:fe:
         af:94:03:45:74:60:97:ac:f3:b8:b8:d4:a6:50:e2:ce:22:52:
         ca:f0:c6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----