Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
File:                     opdOZzBDJDiMiIAucX1rkoGlJjI.mft (raw, json)
Hash identifier:          4BKVixE40nOOzfO40qFvw0AnPgNS59EzbOKetMXwve4=
Subject key identifier:   37:ED:71:C2:08:3F:8F:2E:37:96:94:EA:D6:CC:87:D8:49:C2:2A:26
Authority key identifier: A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32
Certificate issuer:       /CN=F364819CAF/serialNumber=A2974E67304324388C88802E717D6B9281A52632
Certificate serial:       0610
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
Manifest number:          0600
Signing time:             Sat 24 Oct 2026 03:04:26 +0000
Manifest this update:     Sat 24 Oct 2026 03:04:26 +0000
Manifest next update:     Mon 26 Oct 2026 03:04:26 +0000
Files and hashes:         1: opdOZzBDJDiMiIAucX1rkoGlJjI.crl (hash: YXP1VCBKE5r6Vg20/b9xf/IrmnOkc7QZZwNcVFCkfYk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 26 Oct 2026 00:07:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1552 (0x610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364819CAF, serialNumber=A2974E67304324388C88802E717D6B9281A52632
        Validity
            Not Before: Oct 24 03:04:26 2026 GMT
            Not After : Oct 26 03:04:26 2026 GMT
        Subject: CN=6adc203a-8122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:4c:9a:f4:8e:8e:56:36:0e:a6:41:59:7f:
                    9f:e9:cd:ee:78:8d:84:5a:b1:99:39:a2:b5:e6:c5:
                    2c:8a:3d:3c:24:ae:17:c7:88:83:60:f0:19:97:d3:
                    e7:8d:b6:9d:00:c1:0e:83:e6:8e:3c:f4:66:39:cb:
                    8b:58:d2:62:a2:0d:bc:a2:b8:04:5b:91:1a:79:cf:
                    cc:e0:c8:a2:ba:f8:2a:57:29:6b:ab:fa:5f:3c:08:
                    74:8e:51:7e:02:19:d7:d8:34:7d:92:98:a1:d8:b6:
                    c5:b3:78:e2:af:45:10:df:0b:53:a6:ab:fe:03:d2:
                    98:43:f3:9d:aa:1c:08:ed:3c:42:a4:78:87:c2:5d:
                    88:34:ef:b3:ae:ee:07:8c:0b:48:12:61:d7:09:40:
                    de:8b:34:d5:7c:0d:4b:ec:12:32:ee:ae:07:bf:ac:
                    d1:4e:99:15:cb:29:c7:35:16:6c:af:fc:23:02:94:
                    69:36:58:11:b3:a5:db:3c:6c:a4:c8:b0:d1:ae:41:
                    86:da:28:bb:f4:16:e1:da:36:69:8b:42:8f:63:53:
                    2a:f2:3e:d6:2d:df:3d:6b:8f:37:98:d4:59:6b:0c:
                    80:27:cc:ca:d9:20:9a:99:20:48:56:89:75:65:36:
                    0e:f8:b5:17:23:cf:48:7a:3d:97:06:a1:6a:31:31:
                    59:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:ED:71:C2:08:3F:8F:2E:37:96:94:EA:D6:CC:87:D8:49:C2:2A:26
            X509v3 Authority Key Identifier:
                keyid:A2:97:4E:67:30:43:24:38:8C:88:80:2E:71:7D:6B:92:81:A5:26:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/opdOZzBDJDiMiIAucX1rkoGlJjI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364819C/515B0F044E0D11ED8FA200A9F1222468/opdOZzBDJDiMiIAucX1rkoGlJjI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:9c:73:f5:12:02:5e:80:50:bb:92:a7:73:a4:80:01:36:42:
         fa:06:b2:dc:6f:ba:f3:49:20:b2:e0:31:95:77:fd:2b:07:9c:
         74:d4:a0:41:65:42:34:6d:74:f9:77:bc:1d:a4:b6:0d:41:5d:
         8a:a2:b1:66:db:d7:05:58:61:68:70:51:4f:74:88:6f:65:c5:
         af:34:50:1b:6c:b3:8f:a2:fd:07:c3:fb:6b:1c:a0:cd:f4:f5:
         5b:a1:46:25:6c:68:df:d6:48:f2:9e:3e:13:16:d7:57:2e:6a:
         f1:8d:ff:b2:7d:5f:52:c7:3f:3f:e2:5e:7a:83:9d:63:62:3e:
         f8:65:f9:d6:50:87:48:92:39:69:42:fe:ec:7d:1f:54:db:cd:
         27:c2:25:3a:96:4e:fa:c8:32:db:56:d1:f6:cd:82:0e:8e:73:
         14:19:4c:9e:da:4b:70:6d:92:2b:4c:ac:b2:6c:0a:09:93:6e:
         6e:af:b9:dc:7d:cb:1d:f5:0c:3f:23:e2:d4:0b:e2:92:e6:34:
         af:96:5f:a0:4d:40:9a:71:fd:8b:1e:fe:eb:50:67:35:80:fd:
         ca:42:47:d2:8e:7e:43:61:3a:5b:44:2e:bd:00:2b:43:34:2e:
         53:b4:06:f2:6b:98:d9:c6:54:e4:15:25:ee:a8:f2:44:52:d7:
         80:09:56:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----