Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
File:                     otd9qqMurfowwn_FTDYvrBwxtaM.mft (raw, json)
Hash identifier:          IP6J4CrIVaosygtLM9nL/aBCDF2Rj2wcBKphxVMwu0U=
Subject key identifier:   FA:2B:29:69:BF:37:B7:80:0E:F8:7B:89:B0:E0:5E:76:D6:D1:2F:F7
Authority key identifier: A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3
Certificate issuer:       /CN=F36A15D5AR/serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
Certificate serial:       0A79
Authority info access:    rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
Manifest number:          0A77
Signing time:             Fri 16 Oct 2026 01:31:54 +0000
Manifest this update:     Fri 16 Oct 2026 01:31:54 +0000
Manifest next update:     Sun 18 Oct 2026 01:31:54 +0000
Files and hashes:         1: otd9qqMurfowwn_FTDYvrBwxtaM.crl (hash: j9FKuwUOVgMr1+Ec98s9hGlVfUhVy2+cJZC+k/Ed1IE=)
                          2: 9965A5A606AE11EA96066744F8AEA228.roa (hash: wIbFP7nt0VapeRtyrT6a4GxS47/3LZ5/NRY7qSwEjUk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
                          rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 18 Oct 2026 00:26:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2681 (0xa79)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A15D5AR, serialNumber=A2D77DAAA32EADFA30C27FC54C362FAC1C31B5A3
        Validity
            Not Before: Oct 16 01:31:54 2026 GMT
            Not After : Oct 18 01:31:54 2026 GMT
        Subject: CN=6ad17e8a-64a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:56:18:45:54:7b:f1:de:5b:8d:cb:b2:08:08:
                    11:0f:21:e1:a0:18:61:77:84:38:cf:de:50:9e:d5:
                    42:8a:7e:00:9f:9c:6b:05:21:74:b6:13:2c:f4:03:
                    b4:52:b9:4b:ca:44:e6:48:26:35:7a:43:c4:38:be:
                    78:4b:d5:74:98:23:e6:0d:31:67:c6:f7:c5:69:b2:
                    f9:b2:cc:53:82:49:7b:e7:1a:b5:33:23:a2:76:3f:
                    33:3b:62:8d:78:23:18:6b:c9:e5:9d:65:73:f2:e5:
                    42:53:52:85:03:d1:d2:7d:9b:99:c4:78:56:ca:6d:
                    b7:66:18:e1:a4:78:8d:c4:b9:56:e3:5f:6a:8c:c3:
                    09:6f:74:ba:cb:8a:f5:61:d4:7b:f7:2d:8f:e5:a7:
                    13:3f:70:87:94:f6:02:0b:6a:37:e9:b5:8d:bb:0f:
                    cc:11:fb:c8:73:a9:4a:fa:c7:b7:c0:f0:ce:32:7e:
                    f8:1c:8f:a6:d9:c4:c0:c1:3d:3b:f6:72:a9:32:8a:
                    4a:c8:35:eb:10:c7:0d:ae:09:72:7f:27:a0:3f:33:
                    09:e8:b7:7a:8b:9b:d4:e2:44:ca:e8:7e:38:75:9c:
                    c4:b8:a8:c4:30:e6:60:0d:b5:fe:30:90:36:31:fa:
                    37:16:c6:37:21:97:4f:e6:e8:b1:5d:43:72:7c:7a:
                    2b:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2B:29:69:BF:37:B7:80:0E:F8:7B:89:B0:E0:5E:76:D6:D1:2F:F7
            X509v3 Authority Key Identifier:
                keyid:A2:D7:7D:AA:A3:2E:AD:FA:30:C2:7F:C5:4C:36:2F:AC:1C:31:B5:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/otd9qqMurfowwn_FTDYvrBwxtaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A15D5/0E63939CC3E611E9A22C2370F8AEA228/otd9qqMurfowwn_FTDYvrBwxtaM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5e:ec:24:af:b1:a0:a3:f5:06:98:19:4e:00:9e:75:e2:43:
         3b:b7:2f:d0:48:78:dd:d3:be:c6:14:cb:2e:31:f3:8c:82:f2:
         72:cc:5a:d0:ac:9f:20:1f:0a:cb:61:5f:cf:1e:2a:74:e8:ff:
         05:c8:5f:c1:2f:b8:35:21:b1:21:fb:3a:48:fe:18:62:f1:99:
         e9:08:37:c9:af:71:24:b5:1c:8e:a0:bc:20:ed:13:21:31:b9:
         e1:93:45:45:ad:10:22:4d:67:d0:0b:a0:b5:45:77:8d:79:d3:
         ef:2d:87:1f:bd:2e:ef:f5:ee:20:e6:62:32:6a:a4:54:5d:ae:
         dc:e2:df:8c:a2:f5:dd:5d:cc:cc:d7:55:ab:8b:30:73:72:df:
         54:b4:0f:1c:e8:70:c1:2f:b5:3e:be:a1:2d:74:4e:db:0c:94:
         7e:1d:4d:bd:2e:78:88:bc:36:ae:73:06:5a:c4:3d:cb:40:6e:
         a9:07:85:30:b0:8e:62:b6:32:7e:b9:af:24:36:d6:58:b0:33:
         bc:4c:3c:f4:73:41:a9:86:32:26:4f:1a:e6:54:6a:21:df:e7:
         9d:6a:f5:a6:7c:fb:39:95:a6:29:32:6a:1d:50:3e:7d:fd:45:
         85:0a:af:64:e9:4b:14:c1:4b:62:ec:0f:b4:8f:a3:ba:9a:d7:
         54:9c:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----