Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
File:                     OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft (raw, json)
Hash identifier:          rFSQW39Fw6gxnYoS6WmhZuA+dZUBLQusjSHtBGgnPfQ=
Subject key identifier:   DF:4B:CE:6B:70:BA:29:43:34:0B:79:FB:C1:55:25:3E:C8:06:A7:6D
Authority key identifier: 39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59
Certificate issuer:       /CN=F3610F96AF/serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
Certificate serial:       04D2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
Manifest number:          04CB
Signing time:             Tue 22 Sep 2026 03:32:00 +0000
Manifest this update:     Tue 22 Sep 2026 03:32:00 +0000
Manifest next update:     Thu 24 Sep 2026 03:32:00 +0000
Files and hashes:         1: OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl (hash: mJokJkIihMbqetRo1qApNwboluC2r7G+h3bvesoIDss=)
                          2: 31612164538311F182AFB0ACCE1D38B0.roa (hash: ymWXf0yxlrh1Y4pYFCcg1REPoB+gKEIeP6+qgKhj12k=)
                          3: B4993864538311F1B53AEFAECE1D38B0.roa (hash: 3z7Pymhab8EkuTX9K5wP76vuUvu1ud/Qr+5REcwgL4I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1234 (0x4d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3610F96AF, serialNumber=3941634F7D9565B56B197A10EC34C50AA9473559
        Validity
            Not Before: Sep 22 03:32:00 2026 GMT
            Not After : Sep 24 03:32:00 2026 GMT
        Subject: CN=6ab1f6b0-8734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4f:a7:04:0f:51:f3:81:16:4f:7f:92:b3:d6:
                    26:d2:75:02:1d:18:bf:28:b6:5b:ad:4c:3e:64:f1:
                    05:c0:09:4f:2d:2b:b4:e0:9d:24:f1:0d:33:fd:17:
                    c3:c8:ea:56:2f:f6:9a:48:31:4e:bb:65:a8:cc:26:
                    9e:30:c1:fb:77:68:d8:3d:52:9f:b9:88:69:33:d8:
                    31:f7:02:44:3a:6a:08:1d:be:d6:0f:5f:60:5d:15:
                    cb:64:18:5a:a9:dd:49:1a:e0:05:5a:f8:0b:42:11:
                    b7:87:ce:1e:73:d8:f7:bf:6f:d9:2d:54:13:f0:e3:
                    14:44:05:86:1e:30:28:7f:eb:0c:74:c6:44:51:56:
                    b3:34:44:35:a9:f3:ea:c4:49:aa:08:d5:1b:65:67:
                    a8:0f:46:76:12:f0:50:30:f8:63:6b:85:e8:9e:a7:
                    69:a1:6b:9f:da:1c:92:78:4a:05:78:c6:65:76:53:
                    d0:75:09:89:bd:a3:11:6f:bc:0f:c7:11:52:a9:0b:
                    56:83:47:bd:e5:d0:07:13:d6:c3:9d:4b:5f:06:3d:
                    45:6d:89:11:d0:fb:fb:01:47:99:fd:38:7d:d8:6d:
                    5e:0f:01:c6:db:07:10:98:6a:7d:ad:69:dc:dc:f4:
                    b3:94:2d:a4:7e:05:7a:7a:ed:ec:39:84:57:0a:f9:
                    c5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4B:CE:6B:70:BA:29:43:34:0B:79:FB:C1:55:25:3E:C8:06:A7:6D
            X509v3 Authority Key Identifier:
                keyid:39:41:63:4F:7D:95:65:B5:6B:19:7A:10:EC:34:C5:0A:A9:47:35:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OUFjT32VZbVrGXoQ7DTFCqlHNVk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3610F96/5233202E10D611EE975DEC154AD9E6FC/OUFjT32VZbVrGXoQ7DTFCqlHNVk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:e6:3a:05:d6:7d:9a:78:5d:cb:6a:e9:51:65:64:2c:f5:15:
         9b:f5:ad:1b:d0:de:4b:06:49:7d:e3:63:1c:25:23:d9:01:d7:
         07:eb:13:c5:5c:2f:b2:97:5e:28:67:6d:1f:5e:0c:0d:ab:43:
         44:0a:db:be:a8:05:80:fa:7b:eb:f7:bf:d9:2e:f4:1b:86:23:
         63:98:24:37:aa:5f:f4:43:30:4a:87:42:b0:ad:ae:82:05:09:
         dc:c0:86:4e:13:ac:27:c2:1a:68:24:42:d8:46:53:40:c7:ee:
         a5:e0:77:5a:97:a4:99:f0:e9:ab:ea:59:3e:7e:ac:8a:ce:02:
         77:36:de:17:86:ab:f3:33:29:15:b2:00:ed:2e:af:63:0f:0b:
         c2:5a:d5:b4:b5:26:4d:94:0d:a5:63:b7:13:e6:17:7e:af:a7:
         45:e1:0c:43:bc:d4:c9:14:6e:d4:16:a2:71:be:f2:16:b1:32:
         fe:59:8d:02:83:da:e5:65:12:ca:68:e2:ae:f5:de:f9:64:6e:
         8a:22:f8:a4:cc:a3:96:d8:6f:23:59:8a:12:0b:3e:ed:37:7e:
         a4:51:e5:85:8c:17:11:b3:f0:2c:74:b4:24:47:5d:62:03:c2:
         6b:75:f0:42:65:a0:a3:bf:b5:3d:c9:9e:87:51:b0:d6:e1:e3:
         e4:ad:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----