Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
File:                     O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft (raw, json)
Hash identifier:          utZmdbNfcsymzPPO5i74IHvs2LZORF3xA7mGlScdjGw=
Subject key identifier:   6F:3C:49:5A:E6:1D:67:FD:96:71:E1:C7:7F:50:35:BB:BC:39:C2:ED
Authority key identifier: 3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21
Certificate issuer:       /CN=F36DB735AF/serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
Certificate serial:       0A5D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
Manifest number:          0A5C
Signing time:             Thu 07 May 2026 01:18:24 +0000
Manifest this update:     Thu 07 May 2026 01:18:24 +0000
Manifest next update:     Sat 09 May 2026 01:18:24 +0000
Files and hashes:         1: O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl (hash: AEtC/YNWZmEJHOW81cCBr4Bako44UCPvBfcp1/8R3AI=)
                          2: ECE652CC57A211E983F84274F8AEA228.roa (hash: PvTpFnTUW5owha8oV/cdl6xRQsqx1W1UB5KJjdzCL08=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 09 May 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2653 (0xa5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB735AF, serialNumber=3B694023778DBF614F6BC6536446270FD1BB8321
        Validity
            Not Before: May  7 01:18:24 2026 GMT
            Not After : May  9 01:18:24 2026 GMT
        Subject: CN=69fbe860-87c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6f:ae:c8:57:a3:8a:f1:6b:f1:7a:3f:5d:a7:
                    12:01:47:1b:a1:bb:b9:22:48:a1:71:59:0e:19:d6:
                    fc:fa:36:e3:a6:a7:5b:4c:b4:b0:48:db:07:10:aa:
                    80:39:11:3f:f4:cf:58:26:9f:73:be:86:9a:e6:5b:
                    08:9e:9e:12:db:6c:e7:07:21:39:c0:72:4a:c2:7c:
                    82:d2:3b:9f:97:de:62:c8:e5:1a:50:5f:5a:73:da:
                    bf:a4:07:9b:ab:90:8b:27:2a:b4:8a:61:3f:29:65:
                    d1:06:97:0c:86:db:74:e2:5b:bf:eb:5f:4d:9d:46:
                    ea:df:89:78:09:6f:2a:bc:a0:41:36:02:9d:d6:73:
                    79:8d:80:f4:65:64:d0:cc:32:8a:7b:01:ba:24:8e:
                    22:db:07:f2:11:39:d9:cc:0a:a1:c5:79:0d:01:46:
                    1a:f6:d3:2c:c2:24:a1:c8:a8:7e:1a:ca:0e:96:1c:
                    e0:03:0d:4a:5a:4c:29:f3:8e:63:fb:78:cf:e0:b2:
                    9e:82:a5:c0:91:72:d6:59:d0:59:98:87:7a:22:a1:
                    69:83:ca:68:33:28:56:0c:79:04:17:6c:49:28:6b:
                    0c:7b:1e:a1:d3:d0:be:15:54:fd:45:86:e3:79:f1:
                    a5:2f:00:58:8f:5e:ee:88:ca:99:ef:d4:8e:93:69:
                    80:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:3C:49:5A:E6:1D:67:FD:96:71:E1:C7:7F:50:35:BB:BC:39:C2:ED
            X509v3 Authority Key Identifier:
                keyid:3B:69:40:23:77:8D:BF:61:4F:6B:C6:53:64:46:27:0F:D1:BB:83:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB735/4C51B77057A211E995DBB273F8AEA228/O2lAI3eNv2FPa8ZTZEYnD9G7gyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:f2:8d:3b:fc:cc:2a:d7:e5:d9:36:3a:73:50:c0:6d:2f:1e:
         2d:64:0d:85:60:b6:ea:d3:8f:28:69:10:29:70:e0:ee:bc:33:
         d4:e3:3c:ee:76:96:35:6f:11:4b:b7:6e:ee:40:3b:f0:b3:9f:
         1a:d8:15:c9:80:e1:d2:5b:ef:2d:10:72:f9:c3:1c:d0:ee:67:
         0e:02:c9:a0:e5:cf:50:68:e1:95:70:93:e6:8c:7b:ca:75:40:
         62:e5:8c:5e:24:98:0c:93:54:5f:d4:53:e8:bb:b1:c3:e5:84:
         be:0d:24:e4:90:60:36:45:dd:1d:7f:cd:bd:10:b1:d4:b4:15:
         eb:7b:b6:d4:49:52:ea:4e:74:5c:3c:36:83:32:3b:3c:e1:97:
         85:da:78:4f:34:59:b0:82:0e:6e:be:16:63:5d:2b:74:39:49:
         fb:b4:8b:52:f8:c8:42:fa:22:d9:00:4f:ad:66:b9:30:a2:89:
         6f:f5:12:8a:8c:99:c9:94:05:ca:d0:cc:d9:a4:ed:c4:7b:5f:
         be:08:c4:81:5d:b5:49:94:4a:82:f3:3a:36:12:eb:bd:da:10:
         3e:be:0a:e3:aa:62:7b:79:89:67:13:78:b5:2b:6d:bb:2a:b9:
         1a:5b:7e:a8:cf:36:bd:88:a7:e5:f4:60:4f:1c:f0:ff:83:93:
         35:3a:45:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 21:32:55 2026 by rpki-client