Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
File:                     Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft (raw, json)
Hash identifier:          YXGFg0xGr3PeNnYKwCD6amCIjxhiO4PJymtuym/6uG4=
Subject key identifier:   29:0B:03:3A:CB:EA:63:D4:26:18:FA:1C:46:6F:B5:AD:6B:0E:26:02
Authority key identifier: 3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65
Certificate issuer:       /CN=F36FC328AF/serialNumber=3A8F308C11DF2DBB74FEB6CC59C6640986C9CB65
Certificate serial:       070B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
Manifest number:          0709
Signing time:             Wed 23 Sep 2026 02:31:48 +0000
Manifest this update:     Wed 23 Sep 2026 02:31:47 +0000
Manifest next update:     Fri 25 Sep 2026 02:31:47 +0000
Files and hashes:         1: Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl (hash: yf6aeJC8i17YKhGTS/sQdlBo7kiPCWCE2q2gjhulQnM=)
                          2: 667BE87C228A11F1BB1DB6B2DAE4EC9C.roa (hash: diiUMYLTf7GHvC+FpTEO1MJ9Bb10GH/i96nHHlmFUAQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1803 (0x70b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC328AF, serialNumber=3A8F308C11DF2DBB74FEB6CC59C6640986C9CB65
        Validity
            Not Before: Sep 23 02:31:47 2026 GMT
            Not After : Sep 25 02:31:47 2026 GMT
        Subject: CN=6ab33a14-269d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f1:7a:36:47:8b:00:b7:7b:12:f2:0b:97:c6:
                    a7:af:c6:f7:c1:c4:cd:d9:14:66:a7:55:e3:56:8e:
                    fa:0e:63:09:4c:a8:3b:43:ea:c6:ad:85:7c:3a:89:
                    86:25:50:e9:55:d0:ec:9d:af:f1:09:70:47:b4:d4:
                    75:4d:93:da:b5:1a:39:80:a1:4e:01:42:60:a4:b1:
                    70:26:e2:03:d9:36:71:d8:8b:ca:0d:8e:57:1b:10:
                    76:c5:be:0a:fe:96:04:a5:06:a2:f9:d3:47:38:68:
                    70:3c:16:5e:55:0d:17:38:09:f2:84:ec:90:5e:d2:
                    e9:55:89:18:e2:3c:89:7c:a7:70:7e:f0:23:81:86:
                    8b:99:e2:4f:ef:eb:86:20:89:90:b9:e9:04:be:3b:
                    08:ea:27:08:81:1e:03:f2:77:98:2e:21:4b:af:43:
                    84:6c:c6:09:4e:79:7f:cc:e9:42:40:68:0a:f8:cb:
                    ef:24:43:12:18:ad:71:e6:ca:b1:ac:a4:4c:99:bd:
                    cc:0b:21:3b:76:22:89:f9:30:ba:78:fe:a3:50:51:
                    ba:cb:92:b5:c2:32:46:70:20:5a:b4:20:72:3b:60:
                    aa:60:18:0d:e9:84:f7:4e:9c:b5:6e:6e:80:60:79:
                    c8:6c:a1:0e:2a:86:e9:ec:3e:44:9d:55:e7:55:15:
                    44:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:0B:03:3A:CB:EA:63:D4:26:18:FA:1C:46:6F:B5:AD:6B:0E:26:02
            X509v3 Authority Key Identifier:
                keyid:3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:80:61:a0:00:a1:b2:01:3d:4b:40:d7:64:b1:2c:ef:9b:af:
         3c:4b:2d:c7:02:60:ad:21:21:f7:08:3a:18:58:66:4a:7e:6e:
         6c:24:f9:96:d8:22:0a:95:a5:1f:fe:59:fa:fb:67:0e:9e:f0:
         c6:dd:e8:b0:95:03:89:ad:8f:30:61:a1:7f:a2:12:20:5f:e1:
         61:a4:51:e8:94:a4:ce:8f:35:d0:15:3a:d7:79:5c:ad:74:0d:
         9d:1d:d9:23:fc:2d:38:41:94:a0:83:2f:af:5a:d5:d3:78:4d:
         ab:ea:14:f5:43:1a:23:41:9e:5c:7d:1b:d9:16:12:d4:7c:0a:
         dc:28:d9:63:f5:8d:af:b4:5b:8e:1b:2f:ae:8b:cd:26:35:72:
         6a:fd:66:f4:e6:61:c6:fb:8c:8c:44:86:62:3d:28:3a:d9:ed:
         65:b8:b7:9f:8e:7f:28:a1:e9:92:94:aa:43:df:e7:99:55:5e:
         59:44:c0:31:83:92:0e:9f:5f:93:b3:34:9c:29:e5:6e:8b:07:
         d3:d5:ce:c8:ad:ee:a7:5e:93:d6:22:fb:86:36:36:53:3e:e5:
         b6:85:9e:3f:15:89:12:f6:6c:71:ad:59:d2:f4:f7:ac:40:b3:
         8a:cd:85:83:3d:2f:35:0f:78:f4:d2:64:fe:16:40:d2:9a:e0:
         36:48:8f:e0
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBwswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkMzMjhBRjExMC8GA1UEBRMoM0E4RjMwOEMxMURGMkRCQjc0RkVCNkNDNTlDNjY0
MDk4NkM5Q0I2NTAeFw0yNjA5MjMwMjMxNDdaFw0yNjA5MjUwMjMxNDdaMBgxFjAU
BgNVBAMTDTZhYjMzYTE0LTI2OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCd8Xo2R4sAt3sS8guXxqevxvfBxM3ZFGanVeNWjvoOYwlMqDtD6sathXw6
iYYlUOlV0Oydr/EJcEe01HVNk9q1GjmAoU4BQmCksXAm4gPZNnHYi8oNjlcbEHbF
vgr+lgSlBqL500c4aHA8Fl5VDRc4CfKE7JBe0ulViRjiPIl8p3B+8COBhouZ4k/v
64YgiZC56QS+OwjqJwiBHgPyd5guIUuvQ4RsxglOeX/M6UJAaAr4y+8kQxIYrXHm
yrGspEyZvcwLITt2Ion5MLp4/qNQUbrLkrXCMkZwIFq0IHI7YKpgGA3phPdOnLVu
boBgechsoQ4qhunsPkSdVedVFUQ9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKQsD
OsvqY9QmGPocRm+1rWsOJgIwHwYDVR0jBBgwFoAUOo8wjBHfLbt0/rbMWcZkCYbJ
y2UwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZDMzI4LzNEOUJCQzcwNTExRjExRUNCN0Q1NUY3REQ4QTAxNENFL09vOHdq
QkhmTGJ0MF9yYk1XY1prQ1liSnkyVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09vOHdqQkhmTGJ0MF9yYk1XY1prQ1liSnkyVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkMzMjgvM0Q5QkJDNzA1MTFGMTFFQ0I3RDU1RjdERDhB
MDE0Q0UvT284d2pCSGZMYnQwX3JiTVdjWmtDWWJKeTJVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA3gGGgAKGyAT1LQNdksSzvm688Sy3H
AmCtISH3CDoYWGZKfm5sJPmW2CIKlaUf/ln6+2cOnvDG3eiwlQOJrY8wYaF/ohIg
X+FhpFHolKTOjzXQFTrXeVytdA2dHdkj/C04QZSggy+vWtXTeE2r6hT1QxojQZ5c
fRvZFhLUfArcKNlj9Y2vtFuOGy+ui80mNXJq/Wb05mHG+4yMRIZiPSg62e1luLef
jn8ooemSlKpD3+eZVV5ZRMAxg5IOn1+TszScKeVuiwfT1c7Ire6nXpPWIvuGNjZT
PuW2hZ4/FYkS9mxxrVnS9PesQLOKzYWDPS81D3j00mT+FkDSmuA2SI/g
-----END CERTIFICATE-----