Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
File:                     o5s35g1cIOlutaIPRdIs7vh_5bw.mft (raw, json)
Hash identifier:          xvgvzZLNpSZArGxHSaXkq7vW9g0tBscBi4CU10h2BSE=
Subject key identifier:   FE:E6:CB:B4:C7:70:4D:47:9E:33:BB:28:79:75:67:94:CD:1C:66:52
Authority key identifier: A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC
Certificate issuer:       /CN=F36BD167AF/serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
Certificate serial:       027C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
Manifest number:          0274
Signing time:             Mon 28 Sep 2026 04:48:42 +0000
Manifest this update:     Mon 28 Sep 2026 04:48:42 +0000
Manifest next update:     Wed 30 Sep 2026 04:48:42 +0000
Files and hashes:         1: o5s35g1cIOlutaIPRdIs7vh_5bw.crl (hash: Sltr96Wgfo8TZPTTVCxByDSHjAXv+gSsMsvPN1HWA1E=)
                          2: DE8C3A22A6C611F197D4B9CCCE1D38B0.roa (hash: yz5i1kXKEaThHHdhQDo/NfqBUERlQhBxmE8hcIIhdIg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 636 (0x27c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BD167AF, serialNumber=A39B37E60D5C20E96EB5A20F45D22CEEF87FE5BC
        Validity
            Not Before: Sep 28 04:48:42 2026 GMT
            Not After : Sep 30 04:48:42 2026 GMT
        Subject: CN=6ab9f1aa-8fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:20:d9:cf:68:01:9a:a1:c1:88:70:69:a2:60:
                    b7:d6:0b:73:2c:15:2d:e8:37:b6:fa:dc:79:55:c5:
                    1f:df:a4:2c:d9:74:3d:3d:a2:97:be:9f:d7:62:8a:
                    b1:bc:66:f5:58:43:81:a3:06:4b:0f:a2:f3:1d:06:
                    00:1d:84:8e:6b:0d:55:6e:35:1e:ef:5a:f3:2c:2a:
                    e1:cb:f1:f3:8d:96:bb:dc:3d:5f:d2:12:cb:bc:0f:
                    a8:4a:15:20:15:8e:a2:7a:17:04:78:8c:5f:7e:ac:
                    af:cc:70:5c:6c:24:a7:b6:f6:b8:ff:6f:b1:4e:f6:
                    83:45:53:f0:fc:3b:c7:19:a7:e4:11:ae:c5:80:d8:
                    aa:1e:16:6f:f4:72:11:8e:53:74:ed:12:f2:fa:59:
                    7a:68:d2:98:62:ff:8e:ae:b8:31:52:b1:2f:43:6e:
                    92:b4:84:ea:9a:f5:27:a2:f8:16:37:e1:07:94:1d:
                    4b:c4:67:4b:45:fc:78:56:e5:f3:f8:59:a7:e5:b3:
                    29:ee:c0:58:45:19:cb:9b:73:4a:68:93:b6:d7:a0:
                    7e:7a:9d:08:97:a3:1b:40:12:14:08:08:2b:a3:0c:
                    77:69:db:95:0d:b2:29:58:1b:08:91:8d:39:e7:eb:
                    38:08:8a:ad:63:30:3f:fd:37:2c:45:00:cd:43:88:
                    3c:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E6:CB:B4:C7:70:4D:47:9E:33:BB:28:79:75:67:94:CD:1C:66:52
            X509v3 Authority Key Identifier:
                keyid:A3:9B:37:E6:0D:5C:20:E9:6E:B5:A2:0F:45:D2:2C:EE:F8:7F:E5:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/o5s35g1cIOlutaIPRdIs7vh_5bw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BD167/B4412F3CDEEC11EFBFCCA28B762E951A/o5s35g1cIOlutaIPRdIs7vh_5bw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:1d:5c:05:a8:76:3b:eb:df:ee:49:60:6f:b4:0d:84:47:5b:
         9c:0c:d1:e3:ec:f1:e1:f1:25:db:66:52:cb:fb:2f:fb:73:85:
         8d:01:be:f7:e4:9e:6e:e3:cc:0c:12:b8:f5:bb:ab:c3:b9:88:
         f0:73:d1:84:e7:0e:7d:4d:22:f4:ec:03:9d:32:b9:d0:92:8f:
         d3:f7:1d:48:7e:b1:52:88:38:08:70:f1:82:46:4a:a6:1c:84:
         94:34:1a:44:06:ab:48:d4:c7:29:3f:cf:13:08:7d:31:ea:38:
         c2:b2:07:90:e7:4b:eb:b0:25:1c:39:77:e7:a7:af:46:5d:b8:
         b9:db:f6:98:91:67:8b:b4:61:20:62:cc:5f:9e:09:ee:d8:5f:
         96:9c:57:07:72:53:51:1b:6a:e8:13:fb:a4:f0:3a:e5:2b:5f:
         71:91:7f:d7:28:42:cd:4f:ea:39:11:97:af:1b:9e:83:ff:6c:
         b6:e8:b6:c0:2d:2e:27:32:f7:a1:f4:b1:f7:d1:eb:ac:f9:03:
         4b:f3:7f:d0:66:9c:3a:95:20:63:b2:ce:c3:00:95:75:4a:b3:
         a3:9c:85:06:38:ec:41:48:41:f5:e0:ef:62:c4:0f:45:a7:6f:
         9a:44:fb:3a:70:62:59:43:65:bb:7e:01:82:62:ef:a0:62:81:
         5b:a7:85:8d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAnwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkQxNjdBRjExMC8GA1UEBRMoQTM5QjM3RTYwRDVDMjBFOTZFQjVBMjBGNDVEMjJD
RUVGODdGRTVCQzAeFw0yNjA5MjgwNDQ4NDJaFw0yNjA5MzAwNDQ4NDJaMBgxFjAU
BgNVBAMTDTZhYjlmMWFhLThmYTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDxINnPaAGaocGIcGmiYLfWC3MsFS3oN7b63HlVxR/fpCzZdD09ope+n9di
irG8ZvVYQ4GjBksPovMdBgAdhI5rDVVuNR7vWvMsKuHL8fONlrvcPV/SEsu8D6hK
FSAVjqJ6FwR4jF9+rK/McFxsJKe29rj/b7FO9oNFU/D8O8cZp+QRrsWA2KoeFm/0
chGOU3TtEvL6WXpo0phi/46uuDFSsS9DbpK0hOqa9Sei+BY34QeUHUvEZ0tF/HhW
5fP4WaflsynuwFhFGcubc0pok7bXoH56nQiXoxtAEhQICCujDHdp25UNsilYGwiR
jTnn6zgIiq1jMD/9NyxFAM1DiDydAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU/ubL
tMdwTUeeM7soeXVnlM0cZlIwHwYDVR0jBBgwFoAUo5s35g1cIOlutaIPRdIs7vh/
5bwwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJEMTY3L0I0NDEyRjNDREVFQzExRUZCRkNDQTI4Qjc2MkU5NTFBL281czM1
ZzFjSU9sdXRhSVBSZElzN3ZoXzVidy5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL281czM1ZzFjSU9sdXRhSVBSZElzN3ZoXzVidy5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QkQxNjcvQjQ0MTJGM0NERUVDMTFFRkJGQ0NBMjhCNzYy
RTk1MUEvbzVzMzVnMWNJT2x1dGFJUFJkSXM3dmhfNWJ3Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADHVwFqHY769/uSWBvtA2ER1ucDNHj
7PHh8SXbZlLL+y/7c4WNAb735J5u48wMErj1u6vDuYjwc9GE5w59TSL07AOdMrnQ
ko/T9x1IfrFSiDgIcPGCRkqmHISUNBpEBqtI1McpP88TCH0x6jjCsgeQ50vrsCUc
OXfnp69GXbi52/aYkWeLtGEgYsxfngnu2F+WnFcHclNRG2roE/uk8DrlK19xkX/X
KELNT+o5EZevG56D/2y26LbALS4nMveh9LH30eus+QNL83/QZpw6lSBjss7DAJV1
SrOjnIUGOOxBSEH14O9ixA9Fp2+aRPs6cGJZQ2W7fgGCYu+gYoFbp4WN
-----END CERTIFICATE-----