Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
File:                     OE9qPQyKkcXy3zehH1p7nFJb7hY.mft (raw, json)
Hash identifier:          DBE6b3hCtHX3cPxSxKVriC6Q2/PZ1aRjmGqmV7MKl90=
Subject key identifier:   6E:82:93:61:41:70:39:4B:9A:F2:B3:1F:9A:62:42:9E:0E:D1:BF:7F
Authority key identifier: 38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16
Certificate issuer:       /CN=F36217DFAF/serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
Certificate serial:       0200
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
Manifest number:          01FC
Signing time:             Sun 21 Jun 2026 04:48:18 +0000
Manifest this update:     Sun 21 Jun 2026 04:48:17 +0000
Manifest next update:     Tue 23 Jun 2026 04:48:17 +0000
Files and hashes:         1: OE9qPQyKkcXy3zehH1p7nFJb7hY.crl (hash: 9KORU89XrFwgj6faKD4NAmHak4TmCG2ktflovwUW9v8=)
                          2: 6A185994FCEB11F0A5BF2AA7DAE4EC9C.roa (hash: HbhtB0uC4Bt3yw5ALLFqBczkyPmNpkmfX/VyCDRCkCo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 512 (0x200)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36217DFAF, serialNumber=384F6A3D0C8A91C5F2DF37A11F5A7B9C525BEE16
        Validity
            Not Before: Jun 21 04:48:17 2026 GMT
            Not After : Jun 23 04:48:17 2026 GMT
        Subject: CN=6a376d12-e864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:11:17:c0:94:10:62:c1:74:21:da:08:6e:55:
                    f9:fd:c3:f2:ed:33:2f:b4:82:d2:ed:b7:5c:73:51:
                    78:8c:b9:98:4f:84:66:60:e0:72:6f:6e:fa:e0:44:
                    5d:e8:de:ab:bf:d7:cc:0c:78:e7:30:15:29:eb:32:
                    54:3b:ef:b1:9e:53:e3:e3:c7:9a:82:96:d9:6d:a3:
                    c7:47:54:7b:5c:ff:63:c1:b1:42:9a:7b:94:f2:47:
                    50:ee:55:94:e5:73:c9:cd:9f:16:bb:82:ab:2c:38:
                    bf:92:83:1d:9a:6e:10:fe:07:3c:51:61:af:37:f9:
                    7c:7b:59:1b:c8:f1:2d:2d:03:9e:9c:64:8d:6b:ff:
                    ae:9b:ff:f7:a5:62:1e:a8:c3:3e:4f:ec:fc:a6:e0:
                    d1:b3:cb:4f:5b:5e:a4:a9:3b:2d:c3:60:26:df:ae:
                    8f:b8:e5:02:55:fa:64:b8:6c:9a:06:b6:80:ca:72:
                    a1:b3:8f:09:9e:65:09:de:35:d7:65:4c:1a:6b:a2:
                    71:e2:37:f2:ac:12:bb:83:cb:36:5e:1d:26:a2:f9:
                    55:a3:ca:a7:64:4b:6c:f7:e0:fa:cd:d3:82:45:a6:
                    39:0d:15:83:f3:f7:3a:a9:65:5b:ac:32:71:1b:0d:
                    0d:e7:54:04:95:10:f0:74:f2:61:f9:a9:85:44:dc:
                    3b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:82:93:61:41:70:39:4B:9A:F2:B3:1F:9A:62:42:9E:0E:D1:BF:7F
            X509v3 Authority Key Identifier:
                keyid:38:4F:6A:3D:0C:8A:91:C5:F2:DF:37:A1:1F:5A:7B:9C:52:5B:EE:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OE9qPQyKkcXy3zehH1p7nFJb7hY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36217DF/54BDBB24E93811EF998A6679762E951A/OE9qPQyKkcXy3zehH1p7nFJb7hY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:6d:38:ba:b0:bc:09:84:c6:78:34:97:a2:a8:1f:4e:2e:3b:
         ad:ca:60:3b:6a:f6:72:3c:0c:d0:f9:83:9a:b8:6f:49:e9:e5:
         42:a3:f8:8f:45:0f:8e:a3:05:d3:76:45:9d:f6:51:d9:7b:b7:
         fc:21:c0:1c:d3:0b:53:d3:e8:45:3b:17:ba:b1:18:2b:66:47:
         c8:d3:ce:a4:61:93:a8:fa:30:de:f8:f2:5b:3c:cb:94:db:69:
         df:53:e0:f5:b5:3c:c0:79:46:cd:d9:8c:34:03:25:40:0d:a2:
         fe:58:b1:bc:a6:a6:59:1c:44:53:6e:1b:99:53:f8:80:71:17:
         62:47:e3:fc:05:ec:9f:27:f6:9b:30:e5:a1:9e:a3:c7:bd:c0:
         28:49:1b:17:fb:84:73:3a:3b:dc:4e:26:69:5c:d6:55:5f:f1:
         43:14:2f:0b:6f:c7:3a:c3:fb:c7:f6:af:c3:9f:62:7f:23:b7:
         30:64:ed:d7:91:e1:71:20:f6:b1:f2:e3:19:a7:68:da:90:f4:
         48:50:d8:a5:cd:35:76:16:bf:69:dd:16:bd:db:17:5f:8b:91:
         bd:02:a5:46:5b:91:22:38:0d:1b:be:99:5f:fc:3a:d8:a9:f2:
         ea:f5:47:4f:cb:78:f1:1b:96:34:3b:f6:33:9f:4f:55:48:eb:
         72:05:09:cf
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAgAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjE3REZBRjExMC8GA1UEBRMoMzg0RjZBM0QwQzhBOTFDNUYyREYzN0ExMUY1QTdC
OUM1MjVCRUUxNjAeFw0yNjA2MjEwNDQ4MTdaFw0yNjA2MjMwNDQ4MTdaMBgxFjAU
BgNVBAMTDTZhMzc2ZDEyLWU4NjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDtERfAlBBiwXQh2ghuVfn9w/LtMy+0gtLtt1xzUXiMuZhPhGZg4HJvbvrg
RF3o3qu/18wMeOcwFSnrMlQ777GeU+Pjx5qCltlto8dHVHtc/2PBsUKae5TyR1Du
VZTlc8nNnxa7gqssOL+Sgx2abhD+BzxRYa83+Xx7WRvI8S0tA56cZI1r/66b//el
Yh6owz5P7Pym4NGzy09bXqSpOy3DYCbfro+45QJV+mS4bJoGtoDKcqGzjwmeZQne
NddlTBpronHiN/KsEruDyzZeHSai+VWjyqdkS2z34PrN04JFpjkNFYPz9zqpZVus
MnEbDQ3nVASVEPB08mH5qYVE3DsdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUboKT
YUFwOUua8rMfmmJCng7Rv38wHwYDVR0jBBgwFoAUOE9qPQyKkcXy3zehH1p7nFJb
7hYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjIxN0RGLzU0QkRCQjI0RTkzODExRUY5OThBNjY3OTc2MkU5NTFBL09FOXFQ
UXlLa2NYeTN6ZWhIMXA3bkZKYjdoWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL09FOXFQUXlLa2NYeTN6ZWhIMXA3bkZKYjdoWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjE3REYvNTRCREJCMjRFOTM4MTFFRjk5OEE2Njc5NzYy
RTk1MUEvT0U5cVBReUtrY1h5M3plaEgxcDduRkpiN2hZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCtbTi6sLwJhMZ4NJeiqB9OLjutymA7
avZyPAzQ+YOauG9J6eVCo/iPRQ+OowXTdkWd9lHZe7f8IcAc0wtT0+hFOxe6sRgr
ZkfI086kYZOo+jDe+PJbPMuU22nfU+D1tTzAeUbN2Yw0AyVADaL+WLG8pqZZHERT
bhuZU/iAcRdiR+P8BeyfJ/abMOWhnqPHvcAoSRsX+4RzOjvcTiZpXNZVX/FDFC8L
b8c6w/vH9q/Dn2J/I7cwZO3XkeFxIPax8uMZp2jakPRIUNilzTV2Fr9p3Ra92xdf
i5G9AqVGW5EiOA0bvplf/DrYqfLq9UdPy3jxG5Y0O/Yzn09VSOtyBQnP
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:49 2026 by rpki-client