Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
File:                     oTgA5gK0z7bek2kV92nQGZHNe-Q.mft (raw, json)
Hash identifier:          U5VlwAlCjWxgmMfQu1ZqEs/tU5I0YlKbhE3p+Ty6VW4=
Subject key identifier:   8D:13:BF:A2:1A:70:2B:0E:87:4F:92:C4:05:9D:54:D7:ED:62:72:B2
Authority key identifier: A1:38:00:E6:02:B4:CF:B6:DE:93:69:15:F7:69:D0:19:91:CD:7B:E4
Certificate issuer:       /CN=F36700DBAR/serialNumber=A13800E602B4CFB6DE936915F769D01991CD7BE4
Certificate serial:       0787
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
Manifest number:          0785
Signing time:             Fri 25 Sep 2026 02:20:27 +0000
Manifest this update:     Fri 25 Sep 2026 02:20:26 +0000
Manifest next update:     Sun 27 Sep 2026 02:20:26 +0000
Files and hashes:         1: oTgA5gK0z7bek2kV92nQGZHNe-Q.crl (hash: a5kdPvA8Hp1pkpstmOn49PT9N37EKWDcwy1LDjxG1ZM=)
                          2: A13CDE6C898711F197F4BA15CF1D38B0.roa (hash: 9MPRLXvbYnX00aXuK6FEkEZWt/9YDwvo1T8TqF4u9t8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
                          rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 00:26:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1927 (0x787)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36700DBAR, serialNumber=A13800E602B4CFB6DE936915F769D01991CD7BE4
        Validity
            Not Before: Sep 25 02:20:26 2026 GMT
            Not After : Sep 27 02:20:26 2026 GMT
        Subject: CN=6ab5da6b-c5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:53:73:2b:cf:d7:e2:4f:fc:63:57:27:d0:65:
                    7d:be:96:43:12:fe:88:e6:af:76:c8:04:f3:a7:45:
                    27:d5:62:3f:fe:71:b2:4f:23:63:95:c4:7e:00:25:
                    9b:84:00:da:d8:00:57:47:41:59:70:51:75:0b:dd:
                    da:6f:7e:cc:1c:0a:72:67:92:b3:3f:ad:31:62:ce:
                    3c:22:2e:07:9c:15:1c:f3:36:ae:2b:10:c0:d7:1c:
                    be:57:ca:72:cf:e1:23:21:6a:c8:48:cf:06:b6:f0:
                    24:76:ec:68:2f:a9:14:ae:71:bb:66:57:a0:84:b0:
                    18:0b:1f:a7:f4:1b:83:a0:f0:b0:90:5c:06:b1:4f:
                    56:e1:ad:e9:08:67:06:9a:71:b3:b4:2e:52:e7:e9:
                    c9:ed:7c:1d:14:1a:e1:f1:11:28:20:25:a2:d1:73:
                    f9:a0:a5:56:d4:dc:68:13:9c:31:e3:e8:24:6a:37:
                    3c:60:91:7f:89:3d:4a:80:cd:af:2a:80:9a:6e:b6:
                    cd:68:73:27:66:4b:da:a3:48:a0:2d:fb:2e:21:e7:
                    d1:27:ab:b0:cc:b2:a5:6d:ab:1a:8e:50:8b:3a:99:
                    7f:28:42:da:df:44:bf:59:a5:97:c3:48:9f:80:2d:
                    4b:fb:2f:47:92:16:2c:c4:9b:57:ec:9c:7c:f9:3d:
                    18:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:13:BF:A2:1A:70:2B:0E:87:4F:92:C4:05:9D:54:D7:ED:62:72:B2
            X509v3 Authority Key Identifier:
                keyid:A1:38:00:E6:02:B4:CF:B6:DE:93:69:15:F7:69:D0:19:91:CD:7B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a8:18:b5:e1:ce:cf:89:5e:9b:01:c9:60:47:71:4e:25:c2:
         f3:42:cc:00:1c:99:33:e1:2f:97:94:49:9b:1f:d9:1f:db:50:
         94:ee:49:f6:2a:11:e2:41:e6:34:c7:88:9f:36:c8:64:49:e8:
         80:36:83:2d:6d:9a:be:55:1f:8c:de:ce:cc:46:79:11:12:cd:
         b0:bd:97:45:dd:8c:fb:72:b8:82:68:3b:60:36:18:16:5b:25:
         44:17:15:63:8d:62:9a:d6:f0:2a:24:9c:12:9e:42:b6:8a:5e:
         48:ed:0a:de:53:8d:0f:c3:46:9d:ba:97:2b:dc:5f:4f:46:c5:
         fe:db:92:b4:17:91:79:3f:b0:0e:c6:15:32:d0:cc:5a:44:e0:
         aa:0a:88:cf:b2:2f:24:d9:19:56:d4:8f:78:bf:46:25:a8:7f:
         85:e2:3c:6c:1f:19:2e:04:b5:b4:da:1c:44:69:69:96:58:a2:
         83:15:29:32:43:e0:f1:0a:53:69:c2:e4:95:60:d2:0d:cf:74:
         02:a5:d3:8d:01:83:34:7f:27:a6:8a:b6:d7:02:a0:41:33:a5:
         0c:c2:fa:c8:e2:0f:88:62:f3:07:56:1a:7f:23:cf:78:c6:6f:
         0c:9a:9a:89:8f:d1:65:55:49:71:7f:11:b0:7b:7d:a7:3f:2a:
         5b:b3:27:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----