Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          60L9SDwEabasS6YE0mZqzx/kWdIxzbdggAxr3Y1xSXc=
Subject key identifier:   06:39:94:DA:ED:C3:12:B0:2E:9A:29:11:7E:06:67:BD:21:96:26:E5
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       09BC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          09B7
Signing time:             Sat 25 Jul 2026 01:41:34 +0000
Manifest this update:     Sat 25 Jul 2026 01:41:33 +0000
Manifest next update:     Mon 27 Jul 2026 01:41:33 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: qm8vdNQYaf8I4oLdQeqpVXHADm+sdVib8OU2JD4I/pc=)
                          2: C6A2BFC405E511EEBD45AA854AD9E6FC.roa (hash: Q1IVIvXiqdltQfSEHcyv3gRXZTV0bEmCpfge3Kg/Cb4=)
                          3: D7C38FFA755711ED8288669DF1222468.roa (hash: PQHxtKv0UDmTHySSXriAgQgTxVwVkFl4QLy3ZSWrPUk=)
                          4: 0BB5A474755811ED8757D89DF1222468.roa (hash: OhvKA82g/2G8xwPFY7Ln9+Cew82izds05rzgS/FGkpM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 Jul 2026 00:07:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2492 (0x9bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Jul 25 01:41:33 2026 GMT
            Not After : Jul 27 01:41:33 2026 GMT
        Subject: CN=6a64144e-8506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:53:2e:c4:70:d6:c3:6f:fb:eb:a9:98:1b:20:
                    9c:ea:f5:9a:fa:6f:39:52:5a:6d:70:4d:81:04:f5:
                    20:bc:f7:22:c5:21:9b:9d:b4:ba:49:6c:86:52:50:
                    58:99:ba:78:0c:ba:7b:38:83:81:12:9e:d0:06:e4:
                    52:58:ee:bd:20:70:69:4c:09:ea:0c:ef:25:d7:74:
                    c2:c5:82:04:a7:19:00:d8:e8:8f:72:cc:71:ad:48:
                    10:a8:9d:20:49:15:a7:4b:11:a9:d5:54:95:c0:10:
                    2d:4e:48:34:88:15:b4:93:53:58:30:27:70:c0:cb:
                    09:73:ea:a3:ec:fb:3c:64:97:ad:4a:12:03:83:d5:
                    0e:ea:9f:fc:c5:1b:87:52:35:55:e8:1b:65:77:35:
                    f1:77:eb:f4:87:e8:6e:f9:26:a6:a6:e2:56:ef:fb:
                    90:e4:72:b8:61:78:d3:e8:f1:7f:8f:64:6d:d7:10:
                    72:00:22:64:60:ad:1a:9e:36:ab:61:33:fa:a7:fa:
                    76:04:6d:13:94:da:73:4c:fc:e6:a9:cd:5a:5c:30:
                    db:1a:cb:e3:bd:61:76:70:3a:1f:bf:ce:50:3a:5b:
                    e9:af:03:40:8b:78:11:c0:29:cb:72:c4:80:cf:4b:
                    31:ca:64:1e:19:32:00:58:1f:60:22:4d:85:dd:49:
                    db:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:39:94:DA:ED:C3:12:B0:2E:9A:29:11:7E:06:67:BD:21:96:26:E5
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:7a:67:a0:b8:75:f7:e5:0e:5a:c2:c5:dd:c4:7b:c9:e2:87:
         cb:bc:b0:cd:a5:55:e7:d4:44:2e:6d:3e:9b:e8:4b:2e:48:3f:
         d0:3e:d0:e8:dc:5f:a0:11:24:42:e3:2d:61:63:10:4d:96:38:
         35:d1:47:68:3a:66:86:92:89:3d:b5:30:ce:e1:9a:1e:4b:64:
         ab:99:fa:2d:e0:4b:ba:76:92:bb:77:ca:68:73:bf:13:db:67:
         72:0c:3f:2d:bc:26:5a:ed:e0:70:53:93:76:3c:17:f8:21:c0:
         7d:8d:9f:27:ef:bc:c8:ba:8a:3b:c4:e8:f1:74:c4:16:ad:35:
         1c:5f:e3:a5:5f:e2:6b:b8:08:dc:73:cf:45:b3:00:94:2b:6b:
         e0:e0:52:6b:67:cc:7a:21:d6:66:4b:90:d9:98:4e:a7:52:d6:
         01:94:0c:69:2c:e8:35:b6:cd:83:ba:6c:36:08:dd:99:f4:25:
         75:36:5e:5e:b1:1f:00:cb:8e:61:a4:42:6d:7e:25:91:80:93:
         f9:2b:7f:21:f2:83:f3:1d:b8:e2:0e:df:d1:43:ba:8a:55:ae:
         8e:83:c7:ee:d1:40:ca:5b:49:3d:4c:2d:fb:bc:e5:7b:0a:b8:
         e3:93:c0:26:a4:89:80:5e:11:12:0d:10:9b:b4:dc:20:20:fc:
         70:78:e4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 19:54:55 2026 by rpki-client