Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
File:                     osaoR7jzEgAwg0GHFH38ZcjulMA.mft (raw, json)
Hash identifier:          siKvow4rWFrs+hAzl8WNPv62eHKZtEPBI2oBScxISso=
Subject key identifier:   84:EB:D4:76:77:53:F9:2C:CC:46:9E:D3:C8:0F:3E:68:C1:98:E9:25
Authority key identifier: A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
Certificate issuer:       /CN=F3627BD6AF/serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Certificate serial:       0EC4
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
Manifest number:          0EB8
Signing time:             Sun 21 Jun 2026 01:02:14 +0000
Manifest this update:     Sun 21 Jun 2026 01:02:13 +0000
Manifest next update:     Tue 23 Jun 2026 01:02:13 +0000
Files and hashes:         1: osaoR7jzEgAwg0GHFH38ZcjulMA.crl (hash: 4UefDKQwxPdk1YMaan2Fj+8nXhxJsA6yTNwF4VrbBfQ=)
                          2: 6C39EE98619B11ED8E8FD8D6F1222468.roa (hash: OETdohCk7q65gcL6uPq06Ta3ioOvQSD9Kn6gLq8PZ80=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3780 (0xec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627BD6AF, serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
        Validity
            Not Before: Jun 21 01:02:13 2026 GMT
            Not After : Jun 23 01:02:13 2026 GMT
        Subject: CN=6a373816-734f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:15:75:6f:bd:3e:d8:2c:5c:43:4d:78:97:8e:
                    a1:bc:37:0e:d6:da:87:30:6e:bc:0f:c8:02:61:f7:
                    1f:94:52:7d:bc:fa:76:ae:2e:59:f6:53:a8:2c:41:
                    58:23:fb:12:7e:ae:68:41:c8:31:42:f5:30:71:e3:
                    3b:07:ac:c6:6e:bb:5b:2c:23:60:8e:8d:7c:b2:d2:
                    c4:4e:ee:2e:38:5e:6c:d5:95:bc:95:e0:37:79:78:
                    ee:47:c4:9e:8a:42:7c:51:7c:18:ef:1a:ca:74:06:
                    e9:9a:07:53:d4:39:07:75:54:67:a5:85:43:fe:95:
                    d3:90:e4:d9:fc:7b:de:01:05:2f:61:16:c7:e0:1f:
                    fb:54:98:a6:d6:e8:f8:45:a5:e8:60:59:15:be:a0:
                    8a:41:ac:4e:a1:b4:26:19:04:4f:5e:24:62:29:de:
                    54:b1:b5:fe:53:53:be:61:4d:ff:d6:9d:c3:b1:53:
                    57:b9:5f:1a:7f:cf:4d:ec:f7:89:f0:13:01:fa:2f:
                    66:0e:ed:e4:2e:c2:84:35:5c:c1:19:58:b8:c3:ec:
                    cd:26:ec:0d:c2:60:1a:1b:2c:ea:df:06:3c:52:6f:
                    78:08:53:e9:ea:49:8b:86:6f:a6:c6:76:56:e4:9c:
                    aa:f9:45:34:a1:49:d9:e1:57:dd:24:39:fa:6e:06:
                    24:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:EB:D4:76:77:53:F9:2C:CC:46:9E:D3:C8:0F:3E:68:C1:98:E9:25
            X509v3 Authority Key Identifier:
                keyid:A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:52:ee:01:92:74:ca:80:42:29:d3:48:b9:74:54:9d:eb:
         7c:75:49:8d:f1:10:27:a0:92:dc:e1:85:5f:77:ae:b8:ce:7d:
         7f:8c:9c:6b:d2:3e:f4:d6:88:b2:63:26:01:11:7e:6a:d6:6e:
         92:32:50:29:c5:b4:85:17:89:f2:da:60:6c:35:d6:1b:c4:ae:
         40:25:11:9b:2b:b5:80:63:9d:2a:fe:f4:4f:c1:ff:e8:44:c7:
         8d:c1:44:ae:7f:70:81:b2:de:2f:15:5e:ba:02:4b:f1:cc:21:
         92:a4:6b:1c:7f:7d:6e:18:3d:01:2d:56:ee:ea:8d:f3:59:56:
         a6:de:06:01:e6:6f:b5:68:83:fd:00:10:00:7d:0a:d3:2e:21:
         51:df:b3:41:3e:d5:b8:06:cc:a8:16:97:4f:33:35:02:f7:a0:
         1f:49:7b:ae:62:39:90:07:b4:42:c7:ad:33:b6:df:f7:60:49:
         76:40:43:aa:b7:41:02:ce:c2:3b:31:68:7b:ff:78:68:2c:5f:
         1c:df:00:8e:08:9c:73:4a:35:fa:35:c3:5c:44:ae:b2:be:be:
         a6:20:8b:d0:ed:37:54:a4:f5:c6:8e:d5:3a:ea:41:49:48:dd:
         f6:36:bd:a7:33:74:4d:ce:44:1a:d3:05:88:e4:9f:d6:7b:56:
         2f:a0:16:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:58 2026 by rpki-client