Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File:                     oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier:          nQuzrG26fAlLQuXtSsRJepqkMEVRzdTOAN5E3kPSxe4=
Subject key identifier:   95:9A:F6:60:EB:8D:E7:C0:20:73:F9:4C:75:A5:CE:14:8C:9E:4C:30
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer:       /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial:       0F3C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number:          0F37
Signing time:             Sat 13 Jun 2026 01:00:15 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:14 +0000
Manifest next update:     Mon 15 Jun 2026 01:00:14 +0000
Files and hashes:         1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: TVNniglgA/brdVQ+aRb06NAVLXHFEMBtCrH0MvwJkf8=)
                          2: 3C9EDFE23B6911EEA2301F794AD9E6FC.roa (hash: wWzG/QoAuMYgq7222Q1LjDeYdIF1ogj08piOCTP/j4s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 15 Jun 2026 00:07:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3900 (0xf3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAF, serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
        Validity
            Not Before: Jun 13 01:00:14 2026 GMT
            Not After : Jun 15 01:00:14 2026 GMT
        Subject: CN=6a2cab9f-e7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0a:48:0a:42:6e:9d:cc:e2:68:90:38:eb:f9:
                    43:b9:e4:45:d4:5b:92:63:82:f9:f6:c3:f0:db:be:
                    8b:d8:14:6d:2d:4a:e1:61:fd:79:c7:ec:d6:4c:18:
                    5d:e7:76:d8:5c:91:ed:ea:fb:bd:d4:f2:3a:66:07:
                    56:0d:4b:dd:68:05:b7:9d:6d:e2:de:aa:d0:b0:c4:
                    e2:ed:48:fe:5f:65:6c:01:db:f2:d2:cd:ad:f3:5a:
                    aa:f0:14:28:95:b4:05:fc:8c:b0:5b:83:fc:5b:85:
                    b3:18:d6:65:2a:24:d4:5b:c0:16:a4:5c:3b:2b:99:
                    f7:16:b0:bd:e4:a8:71:28:e1:a4:10:71:6d:69:6e:
                    8d:9f:c2:24:21:a3:ff:aa:16:fb:b1:4c:7f:e5:0f:
                    4f:1a:87:23:74:85:4a:3a:40:ee:ce:dd:96:bc:1a:
                    86:8c:62:f0:3a:e0:2a:62:60:28:d2:68:9c:4a:a5:
                    91:87:e0:c6:5d:3d:ec:d9:a1:4b:8d:62:64:8e:22:
                    a6:8c:79:bb:53:dd:98:7b:61:d6:03:8e:75:5d:7e:
                    c9:49:09:d1:e6:98:8e:c3:36:60:26:06:49:ba:2f:
                    22:bb:7f:2e:94:58:d5:9e:3e:25:70:7a:49:89:42:
                    77:e4:d8:04:36:d9:41:4b:15:7c:02:60:da:2d:2d:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9A:F6:60:EB:8D:E7:C0:20:73:F9:4C:75:A5:CE:14:8C:9E:4C:30
            X509v3 Authority Key Identifier:
                keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:f1:ad:5c:8b:f1:9e:04:bc:20:f3:fe:de:a5:8f:bd:92:e6:
         a2:52:6f:b6:ff:9e:c2:77:05:77:2d:62:02:67:b4:27:da:cd:
         22:bd:61:12:d5:b3:d8:32:39:58:73:2f:fd:1f:e9:3c:73:7b:
         9f:9d:a1:26:e7:53:8c:dc:5a:f6:77:4d:e1:71:43:47:de:2a:
         9c:71:48:96:2d:24:8d:7a:73:c0:10:32:1f:b0:4f:3b:1d:a8:
         9d:b9:5e:e6:9d:8e:f2:75:8a:3a:2e:ae:b0:d9:be:73:29:b4:
         a3:5e:08:e2:a3:a8:0d:6f:33:12:12:b2:e8:87:b3:c4:13:b9:
         35:6a:fe:79:f1:fd:93:83:78:8a:16:8e:bc:75:f9:b7:70:6e:
         35:f7:3d:3c:6a:46:94:b0:a2:cb:d0:7f:11:89:5f:cd:1d:c5:
         bc:0b:41:d3:e3:4c:40:21:dd:1f:ae:bf:d5:77:72:4a:99:9e:
         b5:18:28:04:5c:45:68:02:36:1e:21:70:d9:7b:b5:37:d7:f5:
         85:a7:45:48:b2:d1:7c:d3:cb:d4:31:a4:57:99:53:d4:13:76:
         a9:d9:fe:39:fa:b5:bf:f7:0a:d4:1e:43:45:62:0d:4d:40:ff:
         6e:00:4a:a1:ac:45:09:70:c9:d5:7d:b7:a0:95:93:4f:47:52:
         76:f3:84:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 04:34:08 2026 by rpki-client