Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
File:                     osaoR7jzEgAwg0GHFH38ZcjulMA.mft (raw, json)
Hash identifier:          ETE6LheHiisb0wn084wa778ZgCGFou3mJ6j5UkJD8Dw=
Subject key identifier:   91:7B:72:0F:62:E9:EF:92:D3:65:C8:4D:BC:BF:5D:DD:A0:5F:BA:AD
Authority key identifier: A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
Certificate issuer:       /CN=F3627BD6AF/serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Certificate serial:       0F48
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
Manifest number:          0F3B
Signing time:             Wed 28 Oct 2026 01:02:08 +0000
Manifest this update:     Wed 28 Oct 2026 01:02:08 +0000
Manifest next update:     Fri 30 Oct 2026 01:02:08 +0000
Files and hashes:         1: osaoR7jzEgAwg0GHFH38ZcjulMA.crl (hash: L8LJpKW2Uh83q3QlQdjZickJLaRRL04nDFQX3Krp8r8=)
                          2: EB25E9D68C0411F19C46D7CACE1D38B0.roa (hash: nWIc92PbEA6a7waodLsMbx9VFD/rbvmR3wj7KHaw0gs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 00:08:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3912 (0xf48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627BD6AF, serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
        Validity
            Not Before: Oct 28 01:02:08 2026 GMT
            Not After : Oct 30 01:02:08 2026 GMT
        Subject: CN=6ae14990-aded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4d:30:4e:77:96:84:bb:5f:3e:18:68:e6:bb:
                    dc:88:ba:5c:67:fb:3c:f5:8a:3a:49:1d:48:8b:d0:
                    22:2c:21:ea:38:21:b4:8c:a2:45:b1:07:8b:cc:30:
                    c3:75:19:88:e3:0a:4b:a2:f4:84:fe:9c:3d:d5:13:
                    72:95:0d:c0:34:95:f8:5e:ce:7f:6a:52:bd:a6:f3:
                    02:75:fc:46:67:95:8e:06:27:26:f2:21:0f:db:2d:
                    e3:bd:58:94:f7:3c:cb:74:93:22:6c:dd:ab:04:45:
                    b3:7c:e4:0f:85:de:be:5c:e4:77:f2:ab:b3:5a:7c:
                    49:8f:10:de:67:3e:8b:30:6c:2e:34:39:e7:a4:ed:
                    d5:73:b8:82:08:67:8e:ec:e3:7f:26:4a:9c:b6:7d:
                    9b:c6:81:6e:f6:7b:8e:9c:e9:7a:62:26:4a:5f:a1:
                    23:8c:da:10:2a:0d:ee:b5:5d:56:ec:05:79:08:f4:
                    28:14:26:75:37:0a:0d:01:32:71:f8:79:1d:60:7b:
                    70:5b:a4:64:88:d9:71:c4:e6:57:48:5b:25:a9:d4:
                    a1:94:96:5c:4e:5d:26:93:a5:95:ef:2a:ab:66:09:
                    db:2b:a9:ac:01:1a:c6:41:b6:87:1c:6b:20:18:df:
                    ab:bb:6a:b4:c3:db:01:b4:62:9a:8a:80:3b:cd:9b:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:7B:72:0F:62:E9:EF:92:D3:65:C8:4D:BC:BF:5D:DD:A0:5F:BA:AD
            X509v3 Authority Key Identifier:
                keyid:A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:71:68:75:fd:3c:da:52:f8:b9:fa:0e:96:3c:08:c0:9a:fb:
         d7:d3:ed:01:8f:7f:11:d1:5d:79:a1:03:fb:a2:e6:4a:c4:e2:
         14:1e:3f:f8:4c:81:63:ff:8e:e6:f8:84:ad:fc:e4:50:9d:13:
         eb:3a:c6:cd:ee:96:a2:8b:37:85:6d:87:61:f4:1f:a7:b8:c1:
         41:ee:21:25:3e:b4:66:30:18:82:8c:54:fb:53:1b:7a:81:fc:
         a6:03:98:73:67:5f:57:e4:8d:f5:44:c0:71:e0:9a:06:61:6a:
         58:8d:2d:6c:4f:37:66:ba:c5:0e:d5:a3:01:a1:44:1f:9e:85:
         1d:09:fc:da:6b:58:7c:7a:98:fd:85:5b:12:6b:bb:67:93:ff:
         64:61:fc:ab:53:65:a7:db:d0:91:19:ed:69:01:f4:d9:d7:f5:
         27:41:87:1a:5d:ee:f3:b8:82:b3:0d:73:82:78:df:81:42:f5:
         2b:dc:a1:68:dc:ef:e4:6a:fc:e7:b3:a7:d4:ce:b9:99:6e:c0:
         99:3d:df:dd:14:00:6f:58:9e:36:61:1b:5c:21:93:8d:62:c9:
         52:d2:35:9e:d4:ba:a5:47:31:2e:b6:30:01:8b:9b:78:c3:f2:
         a1:41:99:f1:e3:83:12:f7:12:41:fd:b0:75:11:51:52:57:7a:
         8f:c7:82:a3
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICD0gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjdCRDZBRjExMC8GA1UEBRMoQTJDNkE4NDdCOEYzMTIwMDMwODM0MTg3MTQ3REZD
NjVDOEVFOTRDMDAeFw0yNjEwMjgwMTAyMDhaFw0yNjEwMzAwMTAyMDhaMBgxFjAU
BgNVBAMTDTZhZTE0OTkwLWFkZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDPTTBOd5aEu18+GGjmu9yIulxn+zz1ijpJHUiL0CIsIeo4IbSMokWxB4vM
MMN1GYjjCkui9IT+nD3VE3KVDcA0lfhezn9qUr2m8wJ1/EZnlY4GJybyIQ/bLeO9
WJT3PMt0kyJs3asERbN85A+F3r5c5Hfyq7NafEmPEN5nPoswbC40Oeek7dVzuIII
Z47s438mSpy2fZvGgW72e46c6XpiJkpfoSOM2hAqDe61XVbsBXkI9CgUJnU3Cg0B
MnH4eR1ge3BbpGSI2XHE5ldIWyWp1KGUllxOXSaTpZXvKqtmCdsrqawBGsZBtocc
ayAY36u7arTD2wG0YpqKgDvNmyrnAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUkXty
D2Lp75LTZchNvL9d3aBfuq0wHwYDVR0jBBgwFoAUosaoR7jzEgAwg0GHFH38Zcju
lMAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3QkQ2LzM2NjAzNUE0MjNGMjExRTZCRDE3RDgyM0Y4QUVBMjI4L29zYW9S
N2p6RWdBd2cwR0hGSDM4WmNqdWxNQS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL29zYW9SN2p6RWdBd2cwR0hGSDM4WmNqdWxNQS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjdCRDYvMzY2MDM1QTQyM0YyMTFFNkJEMTdEODIzRjhB
RUEyMjgvb3Nhb1I3anpFZ0F3ZzBHSEZIMzhaY2p1bE1BLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBKcWh1/TzaUvi5+g6WPAjAmvvX0+0B
j38R0V15oQP7ouZKxOIUHj/4TIFj/47m+ISt/ORQnRPrOsbN7paiizeFbYdh9B+n
uMFB7iElPrRmMBiCjFT7Uxt6gfymA5hzZ19X5I31RMBx4JoGYWpYjS1sTzdmusUO
1aMBoUQfnoUdCfzaa1h8epj9hVsSa7tnk/9kYfyrU2Wn29CRGe1pAfTZ1/UnQYca
Xe7zuIKzDXOCeN+BQvUr3KFo3O/kavzns6fUzrmZbsCZPd/dFABvWJ42YRtcIZON
YslS0jWe1LqlRzEutjABi5t4w/KhQZnx44MS9xJB/bB1EVFSV3qPx4Kj
-----END CERTIFICATE-----