Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
File:                     osaoR7jzEgAwg0GHFH38ZcjulMA.mft (raw, json)
Hash identifier:          H4C5nqcWdXUxXt1cseFoSFTkBWr5J05lXHnK2oibPkQ=
Subject key identifier:   CC:48:85:FD:32:0A:6F:8C:0A:51:21:72:0A:53:54:7F:C9:55:BE:38
Authority key identifier: A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0
Certificate issuer:       /CN=F3627BD6AF/serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
Certificate serial:       0E54
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
Manifest number:          0E48
Signing time:             Mon 02 Mar 2026 00:57:14 +0000
Manifest this update:     Mon 02 Mar 2026 00:57:13 +0000
Manifest next update:     Wed 04 Mar 2026 00:57:13 +0000
Files and hashes:         1: osaoR7jzEgAwg0GHFH38ZcjulMA.crl (hash: uy+xRm3nV8sxnmwgstskZ3BN/TuT+BV2oqoCJ07oPNw=)
                          2: 6C39EE98619B11ED8E8FD8D6F1222468.roa (hash: OETdohCk7q65gcL6uPq06Ta3ioOvQSD9Kn6gLq8PZ80=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3668 (0xe54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627BD6AF, serialNumber=A2C6A847B8F3120030834187147DFC65C8EE94C0
        Validity
            Not Before: Mar  2 00:57:13 2026 GMT
            Not After : Mar  4 00:57:13 2026 GMT
        Subject: CN=69a4e06a-1779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:16:d7:be:95:a3:a8:d6:23:f9:9f:19:51:ad:
                    c5:83:9c:6d:b0:a4:f9:cd:57:95:e0:71:d2:1f:ee:
                    5f:9b:67:c5:17:2d:5f:fd:0f:c5:27:2f:8f:6c:f0:
                    74:7f:b4:dc:c1:15:b5:b6:53:d8:74:b4:d6:46:76:
                    e6:52:4d:66:4f:a0:26:3c:81:32:9b:46:84:bd:bc:
                    ce:29:1a:85:25:b2:e7:f5:e2:b2:15:a0:2c:6d:74:
                    5a:9e:54:8c:2d:00:41:c0:35:ca:64:58:1b:59:eb:
                    7a:9a:0e:9f:9a:d2:ea:e0:c4:73:9c:a7:96:0c:35:
                    ad:c3:5c:08:4f:b8:c6:f6:41:ed:0c:24:2e:7e:27:
                    47:fe:a3:c8:e3:ed:c7:ab:2a:a3:c0:7d:7b:9d:87:
                    3b:43:7b:24:3d:89:34:d4:b7:b5:95:80:84:91:36:
                    42:a0:f5:81:6b:a6:c7:6f:35:3f:2b:88:29:8e:41:
                    a8:d5:ef:72:f3:f3:40:3a:8f:09:be:2c:a8:74:f0:
                    07:65:f6:63:94:71:1a:92:a7:39:ac:50:2d:48:22:
                    14:a4:79:1c:78:af:be:20:69:02:63:9f:d2:8d:f0:
                    0f:46:6b:20:40:d2:31:75:27:22:95:e8:61:c0:3f:
                    1d:6f:3c:75:f2:04:05:82:ec:07:d1:85:ff:1f:1f:
                    3d:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:48:85:FD:32:0A:6F:8C:0A:51:21:72:0A:53:54:7F:C9:55:BE:38
            X509v3 Authority Key Identifier:
                keyid:A2:C6:A8:47:B8:F3:12:00:30:83:41:87:14:7D:FC:65:C8:EE:94:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/osaoR7jzEgAwg0GHFH38ZcjulMA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/366035A423F211E6BD17D823F8AEA228/osaoR7jzEgAwg0GHFH38ZcjulMA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:49:dd:f7:5e:f3:5a:84:03:a9:bd:bd:f8:01:35:58:b5:33:
         7f:37:bd:ca:24:4b:8d:f9:81:f4:86:07:92:b0:35:62:c9:39:
         44:1d:23:9d:a7:79:3f:70:d3:99:bb:06:79:ce:92:a6:07:e2:
         ff:7a:c9:52:e9:e2:74:62:e1:63:52:74:96:3c:14:84:e5:1b:
         e3:48:6c:3c:c9:6e:fd:ac:ca:00:48:25:80:ac:42:1c:08:02:
         de:e0:b2:03:4f:43:61:0f:e0:74:4f:5b:9e:43:3a:03:3a:29:
         6f:08:c4:75:74:d4:17:2a:b1:f4:19:96:3d:21:0a:06:e7:1e:
         74:e1:92:90:68:2d:2c:0d:2c:a6:af:ec:99:72:41:2f:76:e3:
         8a:ca:3f:e9:5e:39:5a:70:11:46:2c:b0:c4:05:37:ac:22:f8:
         5d:1e:93:88:1d:0f:d2:01:2d:d1:2a:39:57:d1:d8:08:4e:eb:
         00:bf:a4:c8:f1:49:a5:40:89:a9:a2:d0:3a:f8:df:21:99:2d:
         2b:6f:56:5d:f9:a3:69:87:96:43:4c:85:dc:cd:4c:94:ac:f4:
         6e:14:aa:0e:ed:79:c4:d5:eb:0a:43:72:4e:69:f3:84:86:09:
         2d:6f:4a:3d:94:7e:eb:ad:ba:55:f3:12:93:97:f3:1a:3c:57:
         a4:b5:8f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:46:00 2026 by rpki-client