Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
File:                     O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft (raw, json)
Hash identifier:          CCfcihg4bxnBCj5ZPqdFW45zfVePyHtru2NvY69XqBg=
Subject key identifier:   58:2F:78:EE:67:48:4A:17:0E:1F:6F:90:5C:17:99:9B:CE:21:EF:DE
Authority key identifier: 3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21
Certificate issuer:       /CN=F36DB735AF/serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
Certificate serial:       0B1C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
Manifest number:          0B1B
Signing time:             Sat 14 Nov 2026 01:17:47 +0000
Manifest this update:     Sat 14 Nov 2026 01:17:46 +0000
Manifest next update:     Mon 16 Nov 2026 01:17:46 +0000
Files and hashes:         1: O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl (hash: QNcdx4EyguPtNY4KUAyTvIxCL5fNliZ0e25Ebr+HGZc=)
                          2: ECE652CC57A211E983F84274F8AEA228.roa (hash: PvTpFnTUW5owha8oV/cdl6xRQsqx1W1UB5KJjdzCL08=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2844 (0xb1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB735AF, serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
        Validity
            Not Before: Nov 14 01:17:46 2026 GMT
            Not After : Nov 16 01:17:46 2026 GMT
        Subject: CN=6af7b6bb-172f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2d:9e:f3:ae:2e:4e:a8:f7:73:31:e3:f6:04:
                    2d:eb:73:03:7d:cf:71:13:83:c9:82:ba:1a:73:9a:
                    89:cb:43:cc:91:18:d4:fc:f4:b7:48:63:4e:e8:39:
                    19:1d:7a:01:4a:f5:26:86:8d:63:f6:28:b4:31:0d:
                    41:c0:2f:9a:7a:fa:00:59:be:4f:5a:2d:38:2a:40:
                    10:f5:52:5e:7f:5d:2d:a3:81:12:d8:86:06:3e:56:
                    22:d5:6a:c4:57:dc:b2:bb:86:26:dc:f8:43:93:9c:
                    9d:ba:1a:16:f5:ff:35:b0:ec:38:b5:72:57:08:c1:
                    09:ac:4c:92:9a:f9:87:b1:3b:fa:3e:ba:f4:75:42:
                    cd:07:1d:16:4c:f9:3e:10:22:4c:55:b8:8f:29:1d:
                    5a:3e:75:00:a3:09:50:54:f6:f3:ab:e4:16:35:92:
                    c8:3c:46:94:16:cc:cb:67:c2:f2:5b:13:8c:7b:33:
                    5e:4c:c0:01:f6:77:5a:40:73:f1:da:4e:f3:0c:96:
                    f9:65:ef:11:fd:52:f2:89:55:0a:8a:2b:e5:98:17:
                    11:92:f5:f6:1f:4c:ff:17:c1:2b:ce:58:70:33:3e:
                    eb:e3:5e:48:05:98:20:b9:65:eb:42:cc:c8:ec:5f:
                    31:fc:e6:e4:76:09:fa:00:56:54:12:25:9e:f5:24:
                    89:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:2F:78:EE:67:48:4A:17:0E:1F:6F:90:5C:17:99:9B:CE:21:EF:DE
            X509v3 Authority Key Identifier:
                keyid:3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c8:d8:62:59:26:be:11:fc:d6:5e:fe:38:27:b4:49:1d:02:
         ef:01:f8:26:fc:37:dd:94:7e:74:8c:25:47:be:6b:2d:86:4c:
         70:82:60:40:f7:b8:3e:41:9a:7e:3f:1a:87:1b:36:99:cf:24:
         c4:bc:31:1b:b4:0a:ed:70:8c:ec:f2:34:7e:d8:96:6b:ef:32:
         83:29:ce:93:e2:6b:dd:f6:03:29:df:97:69:62:8f:5e:c0:1f:
         b6:ea:28:ba:a4:4a:9c:fc:34:5a:41:8e:f6:00:a2:dd:93:92:
         aa:28:69:fe:af:a3:fe:6c:dc:cf:df:e3:32:97:8c:ac:c1:e4:
         0c:26:fc:70:5b:1d:26:39:17:23:b4:91:df:0c:26:0f:1a:0d:
         93:88:95:22:8c:b0:32:31:65:4d:fc:60:f7:01:f4:87:30:fd:
         75:6b:41:e4:13:e7:8a:ac:09:2d:0b:10:bf:96:09:52:9e:ad:
         8c:e4:00:f3:8a:6c:5d:41:cb:3e:bc:b8:a5:2c:66:24:97:67:
         06:fd:7d:c1:31:34:63:7b:c9:64:5b:8a:2d:3c:91:ff:ab:19:
         95:d8:54:a9:f6:f9:e4:7a:72:c6:05:fc:7b:d6:d9:8e:4c:26:
         1b:70:bf:10:6f:e2:cf:df:09:86:73:d3:3a:31:bc:7e:13:29:
         2b:b0:d0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----