Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
File:                     o5s35g1cIOlutaIPRdIs7vh_5bw.mft (raw, json)
Hash identifier:          cRHhhfY2zF1DWt/tD0hNMAO/hC/0bqkYGDXlCFI08mM=
Subject key identifier:   37:59:D1:AA:20:08:B3:90:EB:D5:92:04:6F:A8:75:68:B9:E6:1D:E3
Authority key identifier: A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
Certificate issuer:       /CN=F36BD167AF/serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Certificate serial:       0278
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
Manifest number:          0270
Signing time:             Thu 24 Sep 2026 04:46:25 +0000
Manifest this update:     Thu 24 Sep 2026 04:46:24 +0000
Manifest next update:     Sat 26 Sep 2026 04:46:24 +0000
Files and hashes:         1: o5s35g1cIOlutaIPRdIs7vh_5bw.crl (hash: QYt8ZDexVIY6Hjw2D5pcuefWAwwNZrbXJu5Js8tOPwk=)
                          2: DE8C3A22A6C611F197D4B9CCCE1D38B0.roa (hash: yz5i1kXKEaThHHdhQDo/NfqBUERlQhBxmE8hcIIhdIg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 04:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 632 (0x278)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD167AF, serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
        Validity
            Not Before: Sep 24 04:46:24 2026 GMT
            Not After : Sep 26 04:46:24 2026 GMT
        Subject: CN=6ab4ab21-47fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ec:30:9f:6c:1c:86:ef:51:52:89:42:b2:51:
                    8a:6e:35:ee:46:a0:4a:38:17:33:98:70:5e:0c:06:
                    fd:47:65:c9:de:a8:80:16:c0:1b:79:97:e5:36:df:
                    41:0b:f6:ba:a4:52:84:44:09:ee:d0:89:89:10:72:
                    fe:a3:4d:e2:be:3c:77:ef:b0:91:50:dc:62:c5:01:
                    12:d1:fd:b8:34:db:25:c2:a4:e4:63:81:c0:6c:5c:
                    1f:ef:5c:71:86:b7:16:44:cc:63:86:9f:29:44:1c:
                    27:7e:2a:3e:b0:ad:ba:1e:4f:cf:80:b4:28:51:92:
                    c4:f1:0c:c5:d4:77:81:11:4d:18:99:b3:2f:0f:c7:
                    f6:c0:12:a3:30:3e:42:62:32:6b:b2:a4:52:25:0c:
                    ab:bb:cf:6c:ec:63:80:3d:42:26:7a:74:1f:9e:9b:
                    e0:11:00:ac:78:28:31:5f:a6:86:04:0d:89:5f:a7:
                    ea:b1:e9:f6:84:30:0f:04:51:c5:6f:18:91:1e:53:
                    1a:1a:85:95:cd:17:34:d9:8a:f5:05:39:37:56:a1:
                    0b:77:c0:49:1e:9c:b2:6e:fd:70:e2:4a:5d:ed:c2:
                    f2:67:52:75:4a:80:d6:40:c6:44:aa:27:6c:bb:c3:
                    a8:f2:77:e1:e4:9b:4e:42:23:0b:74:c8:02:dc:d5:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:59:D1:AA:20:08:B3:90:EB:D5:92:04:6F:A8:75:68:B9:E6:1D:E3
            X509v3 Authority Key Identifier:
                keyid:A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:a4:85:7c:51:35:08:d5:54:21:93:3e:bd:67:67:52:9a:ca:
         29:a9:37:bb:94:99:e6:e6:f9:2e:fb:36:d8:34:18:42:ac:bf:
         1e:49:a8:2c:94:24:77:47:bc:eb:69:96:8b:b4:ab:b1:a9:df:
         17:f1:02:4e:aa:f7:16:91:aa:c2:21:8f:c4:5b:1f:e0:a2:74:
         d5:67:b1:bb:2f:ee:73:79:4c:58:d6:a2:1a:8f:74:67:df:6a:
         37:3d:d6:e2:59:56:75:9c:a1:20:a2:92:bd:c5:48:51:dd:ee:
         8b:1c:2c:fe:ac:de:d3:f8:08:24:75:4a:48:1c:1e:d3:5b:49:
         1a:d6:f8:11:0d:ab:44:36:58:9e:0e:10:d2:ad:39:fa:5b:d9:
         da:e2:50:b2:d7:61:62:f0:96:5c:05:7a:86:b7:b4:45:7e:8a:
         a7:b9:c3:58:5f:16:59:84:85:bd:bf:81:38:ac:3b:e8:db:f5:
         45:51:1d:6b:8a:0e:9c:86:c2:26:ac:f0:9a:f3:40:6f:be:f1:
         57:e8:e6:d3:21:f8:1b:bb:df:8a:a5:d6:c7:a8:2f:e8:2b:74:
         6e:5d:b0:27:a5:11:90:4e:89:cd:e8:38:ff:42:3a:40:28:71:
         a4:49:2c:b6:c6:cc:e2:50:1d:b8:ce:c6:60:1a:51:3a:cf:fd:
         64:7e:97:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----