Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File:                     oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier:          WxHzmzUrxDolAz28uCGmmDPO3N4GUICZi3x37vMNFRM=
Subject key identifier:   99:E9:23:4E:A9:DF:77:35:71:ED:1C:4F:13:1E:DA:C8:4F:8E:4D:E5
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer:       /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial:       0FB9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number:          0FB3
Signing time:             Tue 13 Oct 2026 01:00:14 +0000
Manifest this update:     Tue 13 Oct 2026 01:00:13 +0000
Manifest next update:     Thu 15 Oct 2026 01:00:13 +0000
Files and hashes:         1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: jG2kOUaarh6jRNDMCwFfJDwYGwEGyyhicLcTBEKRvtI=)
                          2: 0D3559D8849111F1B5D8CEBBCE1D38B0.roa (hash: 6lr+c/K/IFnVyzRNi/2ZD0o+qkLBDlgFekV/vDNbKmQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 00:08:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4025 (0xfb9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAF, serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
        Validity
            Not Before: Oct 13 01:00:13 2026 GMT
            Not After : Oct 15 01:00:13 2026 GMT
        Subject: CN=6acd829e-4f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:bc:f4:09:c4:b4:42:96:c8:78:cf:66:65:
                    d2:30:c5:20:b4:85:68:d9:32:bf:ec:90:df:8e:de:
                    54:be:71:60:b6:c9:80:0d:1e:45:3f:af:ba:cd:33:
                    c3:12:b6:3b:d1:4d:a5:db:7c:2b:ed:79:f9:19:59:
                    8d:d7:ff:ff:cc:ea:44:de:80:5c:14:8a:93:06:9e:
                    ff:97:e1:de:99:59:7b:d9:58:f4:12:38:86:9d:34:
                    62:8f:9a:62:bf:28:56:3b:04:22:5d:b5:ea:40:da:
                    7d:b8:75:60:9a:66:aa:82:94:1a:df:a3:a1:10:ff:
                    e0:b3:f4:50:c8:ba:dc:3e:b2:38:eb:b2:25:d4:86:
                    e3:09:e5:10:e1:0d:b5:c5:22:5d:96:2e:ad:1e:2b:
                    2b:34:01:6c:27:d0:e5:31:7a:5d:5d:20:cb:ce:2b:
                    e4:26:4a:43:9f:20:18:ce:04:75:1b:eb:37:d3:e7:
                    c6:32:a0:80:e9:a4:31:8a:b8:ab:51:56:db:9b:4d:
                    de:f3:07:da:a7:68:e1:10:19:ee:70:2e:ce:04:8c:
                    ed:dd:e3:15:18:9a:c5:96:3a:88:4d:fc:ab:7b:73:
                    5e:0c:da:a6:1e:c0:3d:dd:b8:cc:ba:3d:ed:ee:96:
                    76:73:9c:d2:d8:c5:b4:0c:7a:b4:ed:63:97:37:ac:
                    71:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:E9:23:4E:A9:DF:77:35:71:ED:1C:4F:13:1E:DA:C8:4F:8E:4D:E5
            X509v3 Authority Key Identifier:
                keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:d3:af:18:f3:a8:f9:95:7c:3b:58:a8:e5:23:0a:12:f0:97:
         b7:6f:86:5e:74:18:a5:c3:5f:e4:89:1f:0d:ae:b2:56:68:b4:
         a2:af:2d:f2:5d:41:41:e8:d4:67:ef:b2:59:c4:04:70:33:d6:
         f4:bf:8b:28:67:3d:f5:03:c3:72:ae:66:f2:6c:4e:2f:18:47:
         31:41:70:87:2d:37:66:33:c8:89:e8:0f:c0:c8:d7:de:a6:13:
         77:93:91:13:28:6e:6e:d0:19:27:dc:23:2e:0b:14:05:1c:ee:
         a1:42:f8:83:46:5a:8b:98:cb:d3:04:ca:2d:98:ae:7d:f4:0f:
         41:41:e2:b1:35:43:c6:97:0b:2f:59:f5:2c:2a:8c:e1:d5:c0:
         45:47:83:f8:d3:1c:40:83:c3:6e:7a:7b:43:4e:cd:39:e4:c4:
         0a:68:8f:78:21:16:0c:e0:1a:cc:73:3f:32:4c:6f:1d:c1:ed:
         36:f4:f2:f4:28:5f:21:20:38:1b:39:e7:7f:05:02:9b:4f:22:
         67:f4:77:9f:da:e5:d5:27:47:02:68:67:20:09:fa:a5:3b:b3:
         d1:1d:b9:5c:7f:a3:0f:60:ae:00:be:7e:f4:4a:07:95:b8:07:
         6b:15:a9:aa:33:47:9f:65:ab:25:4b:3c:3a:63:8e:e4:d9:ec:
         74:be:67:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----