Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
File:                     oTXgC5jL9934qvJiOG-OFAOqwBg.mft (raw, json)
Hash identifier:          oOWj2I+Ss0HDUp36i48ZmfZ2ryWCMTfyaDIxUbOI0Dw=
Subject key identifier:   F2:3A:54:3F:12:0E:6E:6A:0A:D8:21:B4:26:B6:6E:8F:1A:D8:E9:C4
Authority key identifier: A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18
Certificate issuer:       /CN=F3699B8EAF/serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
Certificate serial:       0F6C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
Manifest number:          0F66
Signing time:             Tue 28 Jul 2026 01:00:12 +0000
Manifest this update:     Tue 28 Jul 2026 01:00:12 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:12 +0000
Files and hashes:         1: oTXgC5jL9934qvJiOG-OFAOqwBg.crl (hash: QQhZpVCkQ6TQG+WWki2kxnvQDUl6jJK2XobWl+7nUn8=)
                          2: 0D3559D8849111F1B5D8CEBBCE1D38B0.roa (hash: 6lr+c/K/IFnVyzRNi/2ZD0o+qkLBDlgFekV/vDNbKmQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3948 (0xf6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3699B8EAF, serialNumber=A135E00B98CBF7DDF8AAF262386F8E1403AAC018
        Validity
            Not Before: Jul 28 01:00:12 2026 GMT
            Not After : Jul 30 01:00:12 2026 GMT
        Subject: CN=6a67ff1c-71d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fe:4a:89:ad:fc:e5:09:ce:1f:c2:89:67:59:
                    51:db:39:94:7f:2b:99:2a:b0:0f:2a:3a:15:f8:2b:
                    e5:b4:8d:54:63:31:eb:4f:b7:e0:80:14:af:1b:07:
                    a5:b3:93:4b:46:98:db:06:e8:f5:36:4d:f7:0c:4d:
                    33:15:98:55:a7:18:86:42:e4:4d:3c:37:f0:7f:a2:
                    4e:7f:4c:5b:25:e3:38:50:6f:62:02:b3:84:79:2f:
                    d7:78:da:0c:ab:9e:7f:7e:11:d6:f1:ff:69:7c:04:
                    f0:8e:40:27:ae:fd:06:3b:19:26:07:0e:7e:fd:d2:
                    29:ee:bd:92:97:9c:88:87:99:fb:28:6d:b9:45:dd:
                    80:bc:aa:07:b1:e2:58:07:28:f0:7e:fd:01:94:94:
                    d9:da:f4:b7:a1:1b:c1:53:dc:dd:ad:15:1f:cc:2c:
                    20:37:de:9f:8c:a1:87:84:7a:bd:f0:c1:6c:14:11:
                    9c:bd:2e:e2:ba:72:d7:7c:ae:b8:73:1b:f8:df:8a:
                    20:be:00:80:b6:02:76:3e:78:20:7b:ee:4b:e3:99:
                    01:7c:28:2c:86:cd:33:df:c3:06:a6:98:0a:9b:d3:
                    17:c6:6b:14:2c:be:d3:31:9e:b6:9a:5d:cf:03:a6:
                    f1:aa:c3:38:ea:af:97:b8:40:a6:c1:89:f1:66:7d:
                    f9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:3A:54:3F:12:0E:6E:6A:0A:D8:21:B4:26:B6:6E:8F:1A:D8:E9:C4
            X509v3 Authority Key Identifier:
                keyid:A1:35:E0:0B:98:CB:F7:DD:F8:AA:F2:62:38:6F:8E:14:03:AA:C0:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/oTXgC5jL9934qvJiOG-OFAOqwBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3699B8E/FE20D820B12211E5B9294D4AF8AEA228/oTXgC5jL9934qvJiOG-OFAOqwBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:de:36:e0:38:59:aa:c1:b4:f9:a9:e4:46:61:99:62:39:29:
         5e:e6:7f:38:60:13:f3:a5:1d:c7:47:b7:25:0f:d1:1c:f3:0a:
         fd:b5:86:5b:64:a8:19:71:90:a4:72:9b:96:3b:78:79:86:cf:
         1e:81:33:37:db:30:68:94:57:ad:f3:2c:23:ec:a7:bf:ab:26:
         3b:8c:ba:08:13:7e:2c:c0:00:a6:33:5b:12:54:b0:89:43:f5:
         f7:e4:76:d1:26:54:7b:82:d8:ff:f0:1c:6f:dc:3c:d2:7b:10:
         72:92:eb:b7:d6:c7:90:68:72:92:9c:b4:ac:4a:d4:44:b5:bb:
         58:09:6f:aa:d1:2a:8b:40:35:15:6e:c0:a5:5c:9b:b3:b8:f9:
         5a:f4:ea:ab:04:80:d0:ff:21:fc:41:5b:6a:28:a7:11:9c:42:
         d4:3b:03:f9:26:bf:eb:6c:19:85:84:80:70:bb:ab:99:3c:7c:
         f9:49:29:a9:27:8e:ee:2f:c0:36:0d:65:26:1a:fe:6f:c3:c1:
         2b:19:90:fa:19:a7:35:bb:2d:f5:9d:6c:50:46:ec:58:ad:c8:
         70:2e:f6:79:97:f7:ec:e5:26:8e:c9:94:ad:e8:3a:3a:a5:22:
         b7:59:93:de:f8:b3:ce:a3:80:e6:b2:62:82:cf:c6:6d:fc:8e:
         07:6c:52:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:40:12 2026 by rpki-client