Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
File:                     ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft (raw, json)
Hash identifier:          /uLSkAuRBDOkcbe9RS4HfVm8qAaMk/bA2PZszZzSPE4=
Subject key identifier:   80:8E:4C:FF:93:EA:B6:DE:B0:8C:EE:F0:03:DB:05:02:CB:04:B0:48
Authority key identifier: 38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B
Certificate issuer:       /CN=F36BCCC8AF/serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
Certificate serial:       028A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
Manifest number:          0289
Signing time:             Tue 28 Jul 2026 04:37:05 +0000
Manifest this update:     Tue 28 Jul 2026 04:37:04 +0000
Manifest next update:     Thu 30 Jul 2026 04:37:04 +0000
Files and hashes:         1: ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl (hash: xx3YaBP/+ro0x9M61DXk9B2BO4X6i9pvMwyzGrDqxJY=)
                          2: 5822D58E969911EFBB03BAB6762E951A.roa (hash: OlnjZbEYMFxAprqREi0XurB39VJQTTPlIESsXPJn9fE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:37:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 650 (0x28a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BCCC8AF, serialNumber=383250D23EC1AACC466655B2219B19F2E1C9455B
        Validity
            Not Before: Jul 28 04:37:04 2026 GMT
            Not After : Jul 30 04:37:04 2026 GMT
        Subject: CN=6a6831f1-cdc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6d:68:75:eb:b3:c9:f8:fb:8c:20:1c:0c:2d:
                    eb:c2:83:48:c1:e8:01:fd:68:b4:b5:0e:96:90:ce:
                    13:8d:88:32:0c:da:3b:a9:f3:3e:89:1b:17:5c:98:
                    68:dd:06:45:33:66:56:cb:c5:ae:36:0d:e4:30:d1:
                    47:bb:1f:7d:7a:ec:f0:c2:30:19:11:49:ca:58:b3:
                    b8:a6:7d:a6:03:f4:b8:24:29:58:62:48:b9:7c:1d:
                    48:73:89:ee:a8:46:33:b1:06:74:7d:64:66:ee:b6:
                    84:ad:a2:08:61:7f:1d:6d:bb:f0:5b:53:25:ff:2b:
                    19:ae:be:8d:2c:f7:f0:bc:d2:cd:ea:59:a4:c6:9b:
                    c3:49:5c:45:67:bf:50:f5:af:5b:06:cd:18:d7:6d:
                    27:4d:82:f4:98:a1:dd:fa:b6:78:fa:61:5c:98:48:
                    eb:ae:88:64:4d:28:dc:1a:c5:aa:5e:34:c6:08:44:
                    98:f1:dc:fe:50:e7:03:d0:a2:7e:9e:c9:74:f4:ca:
                    dc:1c:77:4b:f3:67:ba:1e:c1:c1:4b:e7:4a:25:ae:
                    9f:f8:c7:a4:9c:b0:f1:f9:25:cd:b6:25:33:70:68:
                    a5:82:3a:00:06:c5:da:69:2f:a2:34:5f:b3:e7:56:
                    11:91:f0:11:73:2d:76:38:8d:68:85:73:37:f4:0d:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:8E:4C:FF:93:EA:B6:DE:B0:8C:EE:F0:03:DB:05:02:CB:04:B0:48
            X509v3 Authority Key Identifier:
                keyid:38:32:50:D2:3E:C1:AA:CC:46:66:55:B2:21:9B:19:F2:E1:C9:45:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BCCC8/B66E9294968611EFB8C3B245762E951A/ODJQ0j7BqsxGZlWyIZsZ8uHJRVs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c8:e8:ae:88:75:cd:c6:48:0a:94:96:bd:7f:3d:58:4c:19:7d:
         fc:e3:8b:ff:49:b0:24:75:15:e2:1d:96:95:94:41:92:c8:61:
         af:a2:ef:cc:e4:fd:7d:d7:b1:3b:59:db:12:8f:0e:af:27:dc:
         bf:1b:52:9d:c4:d2:09:0b:63:00:50:f0:3c:84:7c:17:5d:1a:
         ab:4f:83:71:db:20:86:73:df:36:cd:ae:c3:20:f7:fe:10:a5:
         93:7f:ab:a0:4f:d1:f8:7e:f5:f1:6e:73:77:e6:ad:22:f7:40:
         85:a6:21:4c:a1:2d:cf:2f:7c:a3:1c:f1:54:34:a2:b4:42:9b:
         ba:f2:b3:c6:aa:5d:ff:65:d9:e9:91:72:07:39:ca:1c:ce:15:
         8f:9a:61:0b:c2:b1:08:1c:47:3c:af:42:24:ae:f4:b9:24:d2:
         78:77:7f:f5:29:7a:48:a1:b9:a7:c3:71:01:92:99:6c:50:ad:
         ef:f5:9e:aa:c6:af:4a:ca:99:ff:50:ab:62:48:ec:25:a6:cf:
         66:0a:ea:5b:2f:3f:4f:67:2d:49:78:ec:ab:42:5c:1a:bf:e0:
         69:16:8b:44:4b:bb:24:4a:1b:27:ee:b8:75:3c:98:5c:56:fe:
         37:8e:57:90:24:3d:54:84:02:6d:85:71:b7:65:e3:45:3b:42:
         9c:5b:b2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:40 2026 by rpki-client