Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
File:                     Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft (raw, json)
Hash identifier:          tvtvkPNSXQAX6nkg7parhZ4mnR3JSUyvL3Fq+JQexVk=
Subject key identifier:   00:BC:86:ED:0A:54:0D:AD:14:3C:DB:A7:AD:1B:40:C4:30:F3:1E:9E
Authority key identifier: 3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65
Certificate issuer:       /CN=F36FC328AF/serialNumber=3A8F308C11DF2DBB74FEB6CC59C6640986C9CB65
Certificate serial:       0709
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
Manifest number:          0707
Signing time:             Mon 21 Sep 2026 02:30:28 +0000
Manifest this update:     Mon 21 Sep 2026 02:30:27 +0000
Manifest next update:     Wed 23 Sep 2026 02:30:27 +0000
Files and hashes:         1: Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl (hash: C6hORSEDUe2EI7IBEWm0sy0s88LWqtSABWvJhTsdOB4=)
                          2: 667BE87C228A11F1BB1DB6B2DAE4EC9C.roa (hash: diiUMYLTf7GHvC+FpTEO1MJ9Bb10GH/i96nHHlmFUAQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 23 Sep 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1801 (0x709)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC328AF, serialNumber=3A8F308C11DF2DBB74FEB6CC59C6640986C9CB65
        Validity
            Not Before: Sep 21 02:30:27 2026 GMT
            Not After : Sep 23 02:30:27 2026 GMT
        Subject: CN=6ab096c4-e2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:06:07:1f:16:a8:12:9c:6a:2e:7e:24:4b:fe:
                    3c:00:58:a1:66:c0:e0:15:5c:a1:fd:79:99:bb:75:
                    39:6c:ed:09:ab:6a:b2:f6:5f:51:fe:83:59:61:49:
                    e8:a8:59:2e:1d:5f:a4:8c:bd:7c:5a:31:84:64:6b:
                    4e:74:ff:a1:b5:3b:4d:e0:a1:a6:a0:c5:5d:cf:8c:
                    bd:9b:37:a2:60:54:19:fe:1d:0e:3c:7f:7d:75:6f:
                    98:1a:f4:0b:4a:6d:0f:bd:ed:88:69:be:b8:3b:ac:
                    11:ce:5c:66:99:8e:4b:6e:47:83:e1:a1:d4:30:41:
                    c7:26:3e:bd:b3:06:a2:9b:f3:31:c0:85:01:3e:8c:
                    f8:8b:b7:48:bd:06:d0:91:03:b5:6b:be:88:17:b6:
                    e1:a1:0f:ba:05:0b:94:ab:86:3b:0a:fc:18:38:c8:
                    9a:da:7e:7e:40:79:9e:98:7f:93:2f:16:fc:cf:58:
                    8f:a5:db:3c:0d:98:70:16:99:94:e0:2d:f3:04:75:
                    b9:42:91:c8:c4:ad:8d:dd:37:35:be:29:d5:cb:eb:
                    f7:0d:a6:ce:8b:50:12:fd:c7:ca:66:db:c4:c4:4f:
                    38:ca:3d:84:87:2c:1b:fb:a7:83:01:c6:a8:4a:4f:
                    40:88:65:b4:21:34:35:14:a4:1a:50:e8:66:f1:ff:
                    6c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BC:86:ED:0A:54:0D:AD:14:3C:DB:A7:AD:1B:40:C4:30:F3:1E:9E
            X509v3 Authority Key Identifier:
                keyid:3A:8F:30:8C:11:DF:2D:BB:74:FE:B6:CC:59:C6:64:09:86:C9:CB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC328/3D9BBC70511F11ECB7D55F7DD8A014CE/Oo8wjBHfLbt0_rbMWcZkCYbJy2U.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:81:3c:b3:56:44:9f:bc:a8:00:51:36:53:c1:9f:5a:c2:5b:
         12:cb:fa:0b:cc:dd:18:2d:bb:0f:a5:c4:40:16:c1:b6:73:9d:
         d3:10:84:6e:98:d9:13:ac:b5:42:94:ae:7c:c4:e0:ff:4c:7a:
         ff:b3:0a:da:c2:21:9d:bd:c5:e0:0f:83:12:e2:c8:ce:95:68:
         cc:4d:54:10:5f:33:21:e7:33:c5:fb:88:4a:c9:34:3a:51:e9:
         5e:60:f4:90:1c:fc:e5:ff:f9:8d:23:3a:f3:86:28:7a:18:c2:
         30:8b:6d:95:fc:ae:f5:11:10:77:07:b3:bd:b5:88:a1:e6:fc:
         12:01:16:16:f5:09:a7:ad:61:d3:a2:dc:8b:d7:4b:4c:b9:ed:
         3e:62:a7:ca:cc:d6:91:c1:f6:17:56:f2:2f:12:27:2e:b0:a6:
         f3:63:19:18:4e:fe:39:ab:ae:a4:c8:23:d1:ef:77:2a:c8:1b:
         a8:b0:d8:af:8f:7e:fa:35:01:68:69:ea:f7:8d:c1:4e:eb:c0:
         40:09:d5:56:ec:31:7a:a5:d2:af:98:16:1e:4e:be:24:99:a2:
         26:d6:62:e7:4d:b8:8e:2e:8c:0e:19:0b:af:8f:68:11:9c:bc:
         15:af:df:79:6b:6e:5c:27:4e:86:0f:a0:16:8a:df:db:78:1c:
         59:87:85:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----