Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
File:                     oTgA5gK0z7bek2kV92nQGZHNe-Q.mft (raw, json)
Hash identifier:          w5couxDCJ7pdXODuMfuWUTcYlsaxEtGcUoo28Rd2hxw=
Subject key identifier:   CD:A1:0A:2F:C7:B5:2B:70:28:B8:FA:B9:24:A4:1A:95:64:7C:6B:DC
Authority key identifier: A1:38:00:E6:02:B4:CF:B6:DE:93:69:15:F7:69:D0:19:91:CD:7B:E4
Certificate issuer:       /CN=F36700DBAR/serialNumber=A13800E602B4CFB6DE936915F769D01991CD7BE4
Certificate serial:       07AD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
Manifest number:          07AB
Signing time:             Mon 02 Nov 2026 02:20:14 +0000
Manifest this update:     Mon 02 Nov 2026 02:20:13 +0000
Manifest next update:     Wed 04 Nov 2026 02:20:13 +0000
Files and hashes:         1: oTgA5gK0z7bek2kV92nQGZHNe-Q.crl (hash: /wr67haiikhhzNhb5ZExr6Rqi33bPrfxqSCmpYjyM7g=)
                          2: A13CDE6C898711F197F4BA15CF1D38B0.roa (hash: 9MPRLXvbYnX00aXuK6FEkEZWt/9YDwvo1T8TqF4u9t8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
                          rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Nov 2026 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36700DBAR, serialNumber=A13800E602B4CFB6DE936915F769D01991CD7BE4
        Validity
            Not Before: Nov  2 02:20:13 2026 GMT
            Not After : Nov  4 02:20:13 2026 GMT
        Subject: CN=6ae7f35e-d714
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:51:ac:31:48:4f:f3:08:ad:5a:d2:5b:0a:cc:
                    8f:c5:aa:c2:34:b9:9f:34:e4:b6:d5:80:99:2e:ca:
                    81:9b:52:25:00:0d:46:f5:e2:87:1d:0e:b1:0c:85:
                    4e:b5:13:80:4a:60:74:c6:bd:40:0e:08:3b:3f:89:
                    73:42:0c:9b:fe:91:cd:9b:4b:a3:92:cf:90:1e:2d:
                    21:60:1a:da:33:e6:2b:93:48:ed:1b:21:a8:a9:83:
                    58:bb:73:7c:21:c0:ad:f3:e1:3c:ea:de:07:8f:4e:
                    75:56:44:d1:4a:3c:c1:e7:92:ca:99:1c:e2:d6:d4:
                    57:9f:db:98:fd:f3:8d:82:9f:43:2b:3d:79:f4:3f:
                    c0:23:e3:b8:2a:22:07:36:b3:bb:e5:8d:86:fa:93:
                    0c:1d:d5:6f:67:9a:6d:7d:0e:69:f5:33:88:ab:13:
                    0b:cc:18:e4:f5:3d:68:4f:6c:ee:fd:c8:40:d5:64:
                    68:cc:30:25:e5:c1:6f:d1:31:b6:ae:41:47:3f:11:
                    6a:a7:a4:fe:51:6c:a0:ce:8b:64:11:bc:c3:fb:38:
                    24:01:fa:3e:d6:f0:98:01:bb:fc:a0:3d:59:c5:23:
                    0a:47:1e:d9:8b:1b:26:85:ee:dc:de:40:f2:00:7b:
                    f1:0c:a6:06:b1:37:16:36:ad:b1:18:c2:06:7b:2c:
                    34:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A1:0A:2F:C7:B5:2B:70:28:B8:FA:B9:24:A4:1A:95:64:7C:6B:DC
            X509v3 Authority Key Identifier:
                keyid:A1:38:00:E6:02:B4:CF:B6:DE:93:69:15:F7:69:D0:19:91:CD:7B:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/oTgA5gK0z7bek2kV92nQGZHNe-Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36700DB/EE0CA6D4F50111EBA0F7B204D8A014CE/oTgA5gK0z7bek2kV92nQGZHNe-Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:68:92:c2:44:84:76:87:27:9b:e2:da:c0:e0:a0:40:47:25:
         e5:e8:9b:f4:4f:18:31:9c:f3:e4:17:a9:51:4c:d7:b3:0d:9b:
         61:7d:27:3f:0e:3a:a8:50:55:b0:52:5a:66:88:4d:72:30:ef:
         71:82:7a:c9:c0:de:a5:aa:0a:74:6d:d5:52:08:89:7f:36:da:
         df:2b:56:78:c4:60:85:b8:93:c9:a4:6a:98:9b:df:6f:ba:0d:
         c3:94:1c:86:c5:6e:e0:27:d3:e1:68:7f:5c:5d:1a:29:a8:7f:
         72:84:10:92:e7:32:41:5d:39:2d:4a:50:05:2a:28:33:2c:54:
         0c:66:df:17:01:a9:e3:20:a0:63:44:13:41:c7:b3:44:c9:80:
         4a:a2:d1:54:96:5a:dd:61:6a:dc:04:ac:06:b8:3c:d9:43:58:
         5d:a9:db:b0:04:5f:ce:b1:10:3a:4e:01:53:7c:40:16:a0:88:
         fa:61:bc:9b:95:92:26:ce:d3:98:14:5e:e0:4a:e0:76:33:f6:
         2b:c9:ea:8b:35:97:17:57:6d:37:42:23:54:dd:a4:37:ca:25:
         cc:a6:33:25:5f:86:97:e8:f7:54:f2:e9:2a:fd:c3:86:b3:71:
         d0:f2:24:fa:8a:4e:a5:d5:33:a2:73:7d:fb:9e:53:46:c7:77:
         59:60:23:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----