Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
File:                     OlU7bvgL-SIxL5a43cHyGajEEhs.mft (raw, json)
Hash identifier:          taetlKuKeNvPUcGgcwHidskxxqSU1lsXKT/nZTQlscg=
Subject key identifier:   81:DE:97:3E:5D:F6:6C:00:E1:93:5F:27:F1:59:EB:AA:E2:45:B3:F8
Authority key identifier: 3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B
Certificate issuer:       /CN=F36EF7D0AF/serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
Certificate serial:       05BD
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
Manifest number:          0572
Signing time:             Tue 22 Sep 2026 03:25:24 +0000
Manifest this update:     Tue 22 Sep 2026 03:25:23 +0000
Manifest next update:     Thu 24 Sep 2026 03:25:23 +0000
Files and hashes:         1: OlU7bvgL-SIxL5a43cHyGajEEhs.crl (hash: GTHuF3Z7LvjXUxgYbotdzCADzoc8uAe5NwoNkvyzu68=)
                          2: 401DB4F42F1E11F09B881AB3DAE4EC9C.roa (hash: xj4UFgtRmUF6hPhDY8QCTAupvw1psvGB0HcdO8EfGgk=)
                          3: A9777DB400A111F0BFE5D984762E951A.roa (hash: /NRI84ju86WCQqU5dc2FqAKEMK10FL0ooHDMUCIRqrU=)
                          4: 8A0596E448DE11EF82EDFA4F762E951A.roa (hash: pTkaYfOMalP4Ac9YVOrNd/HL6aUPMLSzJ9NLjfsNk8k=)
                          5: 1C19002A58A711EF91CC474E762E951A.roa (hash: 28b+AJrYiZxyaN6PahnQJz38qCvJBTTx3Q3ULsHDeuc=)
                          6: 7050CF3A2EAB11F0B4B053A7DAE4EC9C.roa (hash: aOFRM5Th4Ppr9x/V2gxhKzhGJiZ2YiGkDB5kt+uThQY=)
                          7: A46FECBA0D4611EF94FE720E017001B1.roa (hash: 1+eZFsoTVxew2nM8QAmKo9cbdoGw9gIVLATJ2Cve9BY=)
                          8: 1E9B49149F9711F19432EEC7CE1D38B0.roa (hash: 423oc5wMsXl0L9ZTq1G1yNiSD/6xYsvAeXUOalOhMmE=)
                          9: A0795090B00C11F19F6D43F6CE1D38B0.roa (hash: Jke/MTWtDLvtVfMehGaEgY/X2DuUOiUMIPP5NNKhVrw=)
                          10: 4FBF1C72AD0311F1862DB40FCF1D38B0.roa (hash: t6ex/8mwd18GaETkmAnTRn/QBwkoSJmWpGTfIaWpmQg=)
                          11: E44287A0E1A511F09B8305AFDAE4EC9C.roa (hash: i0YqrCk3d9f/RPOZqg04E/KSYN7esrzd1BRKHLmfxzk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 24 Sep 2026 00:09:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1469 (0x5bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EF7D0AF, serialNumber=3A553B6EF80BF922312F96B8DDC1F219A8C4121B
        Validity
            Not Before: Sep 22 03:25:23 2026 GMT
            Not After : Sep 24 03:25:23 2026 GMT
        Subject: CN=6ab1f523-4bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:38:66:cf:58:6f:d5:41:38:0c:f7:18:2b:6e:
                    e0:a9:c3:cb:25:6c:cd:9d:5e:22:59:26:6b:ec:72:
                    0a:df:a6:14:af:35:31:02:4c:b1:1e:5e:c4:e8:b0:
                    3a:9e:f9:6a:a7:09:c4:dc:6c:66:01:63:16:d0:77:
                    97:96:9c:a3:3c:2b:19:bd:cf:32:ba:80:85:a4:1e:
                    b9:ca:14:6b:13:bf:a2:d5:bd:e8:d2:21:70:03:52:
                    9d:07:e7:c0:1b:bc:21:9f:3c:b0:64:05:bb:bc:cb:
                    b5:88:bf:f4:48:3a:6e:b6:28:c7:22:d2:68:93:e8:
                    de:a8:b8:92:28:d1:b0:73:06:ab:95:7e:bc:91:23:
                    3a:ff:d5:b5:b1:4d:48:f0:96:c9:4a:b9:bb:ec:f0:
                    d2:1d:a7:4f:27:b0:cb:49:56:03:31:b1:da:38:a9:
                    5a:c7:f8:54:79:d0:4b:73:72:f3:14:85:51:68:65:
                    16:21:60:3b:18:b6:0a:cb:0e:5f:58:67:9f:b0:c4:
                    1c:0a:3b:2b:c8:83:10:3b:23:0f:fb:a2:0e:24:df:
                    c7:15:cd:1f:03:4c:80:4a:fa:f6:50:4b:36:60:4c:
                    18:ce:7e:24:8b:cb:ec:dd:40:9c:e8:c3:8f:e0:36:
                    86:e8:03:95:27:21:72:64:ff:c8:4d:85:65:6f:60:
                    ca:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:DE:97:3E:5D:F6:6C:00:E1:93:5F:27:F1:59:EB:AA:E2:45:B3:F8
            X509v3 Authority Key Identifier:
                keyid:3A:55:3B:6E:F8:0B:F9:22:31:2F:96:B8:DD:C1:F2:19:A8:C4:12:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/OlU7bvgL-SIxL5a43cHyGajEEhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EF7D0/36E40A16F2FB11ED821B9D804AD9E6FC/OlU7bvgL-SIxL5a43cHyGajEEhs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:98:eb:9f:5d:95:50:89:8d:98:e3:7f:d9:ec:51:b9:f1:07:
         3d:e5:36:25:71:f2:90:ca:46:fd:5b:cd:02:50:34:e2:34:cf:
         9b:2a:33:37:d8:9a:41:02:96:72:d2:00:fc:c3:b7:fb:1e:70:
         29:6c:16:88:3f:c3:c7:f6:1c:86:3a:29:b5:65:2a:5d:fc:cc:
         51:cc:ee:53:b5:9b:77:27:41:77:28:71:77:fb:77:e5:eb:61:
         2f:38:f7:f1:91:3e:65:14:66:2b:4f:17:6d:5d:e9:3d:92:5d:
         cc:c8:44:4c:8c:d7:fa:08:6d:86:d1:41:7d:cb:ae:b8:7d:11:
         9c:a3:20:d6:68:fe:33:f0:19:d2:92:cc:0c:19:85:38:42:b9:
         ad:7e:e1:eb:ab:d1:76:cd:02:ff:ae:93:13:b4:a2:69:b7:09:
         6f:14:22:28:48:46:1a:3b:37:b5:ec:7c:53:90:a5:5e:6c:58:
         64:02:a1:8e:76:8e:e8:3f:e9:78:0f:61:e3:87:1a:34:09:28:
         cb:e1:07:cc:79:da:b9:03:48:25:bc:34:a8:2b:96:f7:a8:bf:
         a0:09:80:b5:2a:18:e8:ae:1b:65:c9:65:de:43:a7:46:b3:35:
         39:6e:3a:aa:fc:ce:aa:23:e0:fd:c7:90:9f:ca:cc:f5:e1:75:
         20:38:9f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----