Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
File:                     o5s35g1cIOlutaIPRdIs7vh_5bw.mft (raw, json)
Hash identifier:          f6T4Zz/J+EDqpUYCAp183krjszpFFKG+58FufR8rPWg=
Subject key identifier:   5E:6A:0E:F6:9C:74:B5:EE:98:A1:C1:C6:96:59:66:26:32:F4:3C:E9
Authority key identifier: A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
Certificate issuer:       /CN=F36BD167AF/serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Certificate serial:       0273
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
Manifest number:          026B
Signing time:             Sat 19 Sep 2026 09:02:35 +0000
Manifest this update:     Sat 19 Sep 2026 09:02:34 +0000
Manifest next update:     Mon 21 Sep 2026 09:02:34 +0000
Files and hashes:         1: o5s35g1cIOlutaIPRdIs7vh_5bw.crl (hash: Iwe5q1ZkihdpdqoDNT2nGd8/1dWk7r8ANDhv4k0c+us=)
                          2: DE8C3A22A6C611F197D4B9CCCE1D38B0.roa (hash: yz5i1kXKEaThHHdhQDo/NfqBUERlQhBxmE8hcIIhdIg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 20 Sep 2026 00:07:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 627 (0x273)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD167AF, serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
        Validity
            Not Before: Sep 19 09:02:34 2026 GMT
            Not After : Sep 21 09:02:34 2026 GMT
        Subject: CN=6aae4fab-b34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cf:e8:eb:28:cb:8c:d9:f7:f8:28:e5:07:c3:
                    e2:a1:dd:26:29:db:59:2f:49:ad:ec:d9:ed:75:94:
                    e9:df:be:e3:9c:46:83:0d:2e:80:1b:d0:95:5c:b5:
                    4e:02:3d:b2:d3:17:91:1d:51:55:e8:12:28:60:60:
                    32:5d:0c:72:73:64:64:02:88:d5:59:4a:fb:d5:d1:
                    e2:79:6b:07:b3:23:f0:25:cd:13:ec:9f:bc:61:08:
                    4b:75:d0:48:57:29:a7:46:fb:dc:7a:88:5f:4e:dc:
                    49:34:ae:3b:9a:b1:a0:68:c2:f8:a9:ad:e1:9d:de:
                    e5:1b:19:8c:67:af:7b:ca:6e:a3:a5:28:15:0b:ec:
                    76:a3:61:5e:47:0b:b0:30:f5:98:07:34:26:27:42:
                    cc:e2:d1:43:07:9e:b0:ef:1d:e3:03:9b:fa:3f:2d:
                    b9:9b:36:a7:8a:78:eb:a8:35:2b:b0:d1:38:f2:34:
                    3f:a1:f3:cb:14:05:da:cb:b1:f1:62:26:fd:3f:97:
                    5f:24:c8:f0:31:ae:da:20:c3:17:d1:27:f7:ee:d8:
                    d0:f3:04:7a:b7:eb:d3:4d:cb:a2:81:8e:dc:1e:b4:
                    27:9f:5e:6c:f6:43:61:b0:06:53:9f:a7:25:d3:82:
                    91:ec:72:4f:ba:3e:4f:a9:46:48:a3:2b:13:39:ec:
                    fd:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:6A:0E:F6:9C:74:B5:EE:98:A1:C1:C6:96:59:66:26:32:F4:3C:E9
            X509v3 Authority Key Identifier:
                keyid:A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b8:6a:60:b5:9b:65:8f:7f:8f:13:9e:e6:46:60:66:97:28:
         de:3b:da:16:6b:49:02:84:7d:09:e3:88:ad:63:f3:93:cb:bd:
         9d:4d:8d:29:71:7d:ca:dd:9e:93:94:8b:2a:0c:7f:a2:b6:1b:
         87:cd:d9:1d:2b:01:29:c1:6a:9b:fa:8f:8c:9b:7b:53:f9:eb:
         dd:e9:62:0f:77:af:95:15:0e:e4:cf:0f:71:06:80:d9:42:1d:
         26:92:c1:ab:58:09:4d:07:6b:c4:30:b7:f0:9a:81:b4:97:49:
         f8:9c:89:cf:a2:16:3c:21:ae:5e:a5:70:78:96:01:c2:49:11:
         e6:a6:0f:c5:29:36:d2:3b:d0:53:67:15:c1:59:2b:8b:6c:b7:
         44:e8:a4:06:75:d9:ea:a3:e1:ac:6d:42:33:b2:7a:83:54:20:
         8e:d7:b9:7c:b6:b5:f5:7d:90:41:7e:5b:56:42:1d:ee:bd:17:
         de:25:a8:67:33:cb:d4:65:4f:f1:f1:79:17:dd:9b:57:fe:26:
         97:37:b6:06:64:3f:4a:c7:86:40:80:27:d5:09:17:88:7b:69:
         4d:96:f0:da:d1:70:21:b2:dc:d0:c0:6f:d0:bc:54:4a:fe:fe:
         f2:5d:6f:c7:7b:3f:dd:ca:30:fa:93:41:a9:c0:c3:a9:5a:c9:
         f8:2b:c8:ec
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAnMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkQxNjdBRjExMC8GA1UEBRMoQTM5QjM3RTYwRDVDMjBFOTZFQjVBMjBGNDVEMjJD
RUVGODdGRTVCQzAeFw0yNjA5MTkwOTAyMzRaFw0yNjA5MjEwOTAyMzRaMBgxFjAU
BgNVBAMTDTZhYWU0ZmFiLWIzNGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEz+jrKMuM2ff4KOUHw+Kh3SYp21kvSa3s2e11lOnfvuOcRoMNLoAb0JVc
tU4CPbLTF5EdUVXoEihgYDJdDHJzZGQCiNVZSvvV0eJ5awezI/AlzRPsn7xhCEt1
0EhXKadG+9x6iF9O3Ek0rjuasaBowvipreGd3uUbGYxnr3vKbqOlKBUL7HajYV5H
C7Aw9ZgHNCYnQszi0UMHnrDvHeMDm/o/LbmbNqeKeOuoNSuw0TjyND+h88sUBdrL
sfFiJv0/l18kyPAxrtogwxfRJ/fu2NDzBHq369NNy6KBjtwetCefXmz2Q2GwBlOf
pyXTgpHsck+6Pk+pRkijKxM57P1bAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUXmoO
9px0te6YocHGlllmJjL0POkwHwYDVR0jBBgwFoAUo5s35g1cIOlutaIPRdIs7vh/
5bwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJEMTY3L0I0NDEyRjNDREVFQzExRUZCRkNDQTI4Qjc2MkU5NTFBL281czM1
ZzFjSU9sdXRhSVBSZElzN3ZoXzVidy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL281czM1ZzFjSU9sdXRhSVBSZElzN3ZoXzVidy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkQxNjcvQjQ0MTJGM0NERUVDMTFFRkJGQ0NBMjhCNzYy
RTk1MUEvbzVzMzVnMWNJT2x1dGFJUFJkSXM3dmhfNWJ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC0uGpgtZtlj3+PE57mRmBmlyjeO9oW
a0kChH0J44itY/OTy72dTY0pcX3K3Z6TlIsqDH+ithuHzdkdKwEpwWqb+o+Mm3tT
+evd6WIPd6+VFQ7kzw9xBoDZQh0mksGrWAlNB2vEMLfwmoG0l0n4nInPohY8Ia5e
pXB4lgHCSRHmpg/FKTbSO9BTZxXBWSuLbLdE6KQGddnqo+GsbUIzsnqDVCCO17l8
trX1fZBBfltWQh3uvRfeJahnM8vUZU/x8XkX3ZtX/iaXN7YGZD9Kx4ZAgCfVCReI
e2lNlvDa0XAhstzQwG/QvFRK/v7yXW/Hez/dyjD6k0GpwMOpWsn4K8js
-----END CERTIFICATE-----