Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
File:                     h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft (raw, json)
Hash identifier:          k3NtI3Sku4PkAi/RwefCtJHaRzJfhHvfYeASnnre8Uk=
Subject key identifier:   D4:99:2B:F0:EC:7B:9F:33:E4:CA:DD:A1:94:F0:E7:D2:87:95:18:0E
Authority key identifier: 87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA
Certificate issuer:       /CN=F3645721AF/serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
Certificate serial:       062F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
Manifest number:          0621
Signing time:             Sat 24 Oct 2026 03:00:50 +0000
Manifest this update:     Sat 24 Oct 2026 03:00:49 +0000
Manifest next update:     Mon 26 Oct 2026 03:00:49 +0000
Files and hashes:         1: h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl (hash: JBgAnlfyEZhx7Gu2OrrW2ni35j8g0Z6OkTZBpqjqAYA=)
                          2: E930883CF5D411F08C13D08DDAE4EC9C.roa (hash: YuF0ZPXUrP/FErIbO1oG0qOrgfIUEuuBoE3/Li8gUZQ=)
                          3: 59AD6094F5D511F09117C492DAE4EC9C.roa (hash: tLC9mn7iIAWuyL5bTuMUM+l8+nADm3agRNyvn61Vsk4=)
                          4: D747D6E2F5D511F0B2621493DAE4EC9C.roa (hash: 4ZH2ONvWHUC5OJAskoe/2/7FyCm6fCYTywg5B4ILlVo=)
                          5: 548EDFBAD41611F09F8A6C9FDAE4EC9C.roa (hash: k8FRmBKTxWl53FchMRaZBeBDbnAPcS6cvBX3aUVupmA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                          rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1583 (0x62f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645721AF, serialNumber=87F3ADC3A50A77763836AE8E37F5D938695711CA
        Validity
            Not Before: Oct 24 03:00:49 2026 GMT
            Not After : Oct 26 03:00:49 2026 GMT
        Subject: CN=6adc1f62-f91a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c8:33:64:a6:f6:10:60:28:bd:01:dd:7e:1f:
                    75:12:dd:28:4c:30:1e:96:e8:4c:8f:90:71:2f:36:
                    ac:15:39:b6:e5:21:53:ef:d4:9b:a8:50:75:81:27:
                    d2:28:a1:44:14:4a:d2:f8:4a:90:ef:3a:3b:48:f4:
                    69:df:cc:19:49:d9:c5:1b:74:9d:cd:5e:36:5c:46:
                    6d:64:4a:25:db:04:c5:85:13:57:db:46:5c:81:f2:
                    b3:ea:52:07:cd:36:88:af:43:fc:c0:57:a7:ad:69:
                    22:80:b7:2b:7e:0d:92:13:ec:5f:67:ea:0d:d3:77:
                    4a:68:79:79:12:d6:99:c6:42:79:c0:9c:8e:27:dd:
                    cd:92:60:17:62:26:60:c5:2a:65:76:fd:3f:8a:a4:
                    16:60:79:60:ca:ff:c0:ca:bc:c5:9e:44:85:b9:4d:
                    b7:a3:4b:97:38:30:27:cb:86:4b:b9:71:78:6e:ba:
                    cb:d2:e0:9d:3c:73:0e:87:ac:15:03:f3:ee:83:ca:
                    ab:3a:a9:92:fd:0e:b2:c0:71:28:ea:4c:98:67:3f:
                    45:24:66:7d:03:11:70:9b:e2:f9:9e:a9:de:36:62:
                    bd:4b:71:8c:0c:c5:ce:ce:01:be:f0:45:9a:bc:2c:
                    43:6b:17:ca:cf:8f:8a:60:40:a3:10:e0:16:f5:36:
                    58:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:99:2B:F0:EC:7B:9F:33:E4:CA:DD:A1:94:F0:E7:D2:87:95:18:0E
            X509v3 Authority Key Identifier:
                keyid:87:F3:AD:C3:A5:0A:77:76:38:36:AE:8E:37:F5:D9:38:69:57:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645721/4D8578E037FD11EDB8A2ADF9F1222468/h_Otw6UKd3Y4Nq6ON_XZOGlXEco.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:86:f1:f2:b8:c0:91:33:66:9f:34:3c:56:21:64:26:b6:
         61:8c:37:6b:c9:03:fd:a3:38:50:8d:32:f0:8a:71:9d:9a:77:
         43:c6:b3:3b:22:ae:80:31:88:33:1a:b9:3f:ae:c0:4a:19:5c:
         52:ba:6e:3f:e2:64:98:48:99:c7:40:57:da:ba:53:82:ba:6b:
         56:22:91:c6:6c:59:96:fd:8c:dd:9b:a4:db:64:cf:13:c5:77:
         b9:3b:27:54:4f:98:4c:c2:78:c8:3d:3f:f1:1d:9a:2d:00:4e:
         c6:20:3a:5d:a1:fa:2c:f3:2d:79:51:5c:ef:63:dd:b7:89:be:
         04:b1:25:aa:64:ef:46:8c:f6:4b:80:9f:ff:fc:79:a8:a6:a6:
         86:d2:16:1b:21:46:6c:4d:1f:a1:43:22:f9:48:10:0b:f8:be:
         13:59:31:5f:06:e9:83:f8:56:bf:c9:96:b9:70:e2:7b:ee:d6:
         32:a3:0e:e9:d8:cd:c1:6f:09:02:f3:e8:84:00:2c:69:67:df:
         aa:8b:c8:6e:40:72:31:08:34:87:d4:91:8f:a9:03:a7:3b:0a:
         c4:1b:13:49:6f:23:f7:df:f7:59:fa:2d:e2:08:07:33:cb:53:
         5e:ee:e9:b5:45:3d:50:8b:ec:b6:79:df:71:f0:f6:40:0b:fe:
         de:8d:26:12
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBi8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NDU3MjFBRjExMC8GA1UEBRMoODdGM0FEQzNBNTBBNzc3NjM4MzZBRThFMzdGNUQ5
Mzg2OTU3MTFDQTAeFw0yNjEwMjQwMzAwNDlaFw0yNjEwMjYwMzAwNDlaMBgxFjAU
BgNVBAMTDTZhZGMxZjYyLWY5MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDJyDNkpvYQYCi9Ad1+H3US3ShMMB6W6EyPkHEvNqwVObblIVPv1JuoUHWB
J9IooUQUStL4SpDvOjtI9GnfzBlJ2cUbdJ3NXjZcRm1kSiXbBMWFE1fbRlyB8rPq
UgfNNoivQ/zAV6etaSKAtyt+DZIT7F9n6g3Td0poeXkS1pnGQnnAnI4n3c2SYBdi
JmDFKmV2/T+KpBZgeWDK/8DKvMWeRIW5TbejS5c4MCfLhku5cXhuusvS4J08cw6H
rBUD8+6Dyqs6qZL9DrLAcSjqTJhnP0UkZn0DEXCb4vmeqd42Yr1LcYwMxc7OAb7w
RZq8LENrF8rPj4pgQKMQ4Bb1NlgVAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU1Jkr
8Ox7nzPkyt2hlPDn0oeVGA4wHwYDVR0jBBgwFoAUh/Otw6UKd3Y4Nq6ON/XZOGlX
EcowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjQ1NzIxLzREODU3OEUwMzdGRDExRURCOEEyQURGOUYxMjIyNDY4L2hfT3R3
NlVLZDNZNE5xNk9OX1haT0dsWEVjby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2hfT3R3NlVLZDNZNE5xNk9OX1haT0dsWEVjby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NDU3MjEvNEQ4NTc4RTAzN0ZEMTFFREI4QTJBREY5RjEy
MjI0NjgvaF9PdHc2VUtkM1k0TnE2T05fWFpPR2xYRWNvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCaXYbx8rjAkTNmnzQ8ViFkJrZhjDdr
yQP9ozhQjTLwinGdmndDxrM7Iq6AMYgzGrk/rsBKGVxSum4/4mSYSJnHQFfaulOC
umtWIpHGbFmW/Yzdm6TbZM8TxXe5OydUT5hMwnjIPT/xHZotAE7GIDpdofos8y15
UVzvY923ib4EsSWqZO9GjPZLgJ///HmopqaG0hYbIUZsTR+hQyL5SBAL+L4TWTFf
BumD+Fa/yZa5cOJ77tYyow7p2M3BbwkC8+iEACxpZ9+qi8huQHIxCDSH1JGPqQOn
OwrEGxNJbyP33/dZ+i3iCAczy1Ne7um1RT1Qi+y2ed9x8PZAC/7ejSYS
-----END CERTIFICATE-----