Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          Xmbk+A0VW0OPWx1Pbtm9BZumv4HSJP5UOnws7Gn60eM=
Subject key identifier:   5A:6A:62:D6:2F:B4:1C:9C:1D:BC:A7:E9:D8:4F:CA:9A:83:08:F8:B2
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       0A0B
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          0A03
Signing time:             Sat 03 Oct 2026 01:40:06 +0000
Manifest this update:     Sat 03 Oct 2026 01:40:05 +0000
Manifest next update:     Mon 05 Oct 2026 01:40:05 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: ZAdp+NK0fnVzqviqNmgEJKdDkiH2xoLMAjDKCmBq8Rw=)
                          2: AA4074F289D111F1A802EACFCE1D38B0.roa (hash: hem0zIKLtZeNSIWMoz0rSJx/832FRGAE3aQ/wjA206w=)
                          3: 8320A09089D111F1A546DECFCE1D38B0.roa (hash: DA5qK7fz+WovThN7j+XSUJLgfIJR5c0CH8vGrCi0D6g=)
                          4: 1E9ACD3A89D111F1AFF6CECBCE1D38B0.roa (hash: +Untrg0WK7+uUtVUE8OjSjSfZ2FmZtLhWuXYFkJyavw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 05 Oct 2026 00:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2571 (0xa0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Oct  3 01:40:05 2026 GMT
            Not After : Oct  5 01:40:05 2026 GMT
        Subject: CN=6ac05cf6-9381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:3f:8c:1a:d8:98:e0:1e:4e:d7:37:a7:56:
                    f1:da:51:f6:0c:fb:16:7a:3d:84:92:96:bb:72:3b:
                    66:87:cf:12:42:e0:b8:00:75:9f:61:67:6d:ee:d5:
                    ff:59:c2:65:cd:8f:70:96:bf:63:47:e2:59:1f:42:
                    0a:4c:69:fd:23:48:1c:88:69:ed:95:bf:47:84:c2:
                    17:90:fb:a2:ad:61:62:9c:62:55:9d:ac:f5:f0:52:
                    b7:5e:a4:46:cf:6d:63:ea:cb:61:27:73:9a:e9:fe:
                    77:94:79:dc:da:48:d6:5b:56:1f:80:fb:be:8c:fb:
                    40:b3:4d:0f:85:47:ec:2e:17:90:2c:26:0e:0b:4f:
                    71:19:a4:79:29:11:b2:0e:2d:42:58:00:9a:8e:90:
                    6b:a5:99:b8:88:db:a3:39:96:71:8c:31:e8:d2:cb:
                    c5:be:66:a6:19:d1:5c:45:a1:80:53:d8:df:de:2b:
                    b1:3e:39:5f:a3:05:ec:24:3f:e7:4c:a1:35:84:d7:
                    d5:e2:ef:20:7e:b0:10:cb:b7:15:e2:b2:2f:ce:14:
                    ae:2d:b6:53:6d:0e:c3:64:9a:62:66:b4:ef:7d:fc:
                    ed:0e:aa:cb:84:42:24:d6:be:15:d9:e2:c0:56:e7:
                    1a:00:cf:8c:be:b0:8d:21:42:8f:0a:20:67:c4:48:
                    f9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:6A:62:D6:2F:B4:1C:9C:1D:BC:A7:E9:D8:4F:CA:9A:83:08:F8:B2
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:26:dd:1b:65:bb:93:bb:26:04:7d:22:4f:a6:f3:ed:36:d9:
         01:1f:55:89:74:02:cc:a5:a0:c6:c1:01:c2:5b:ac:2f:ed:4c:
         c2:3b:c9:79:fd:14:89:a6:40:00:88:04:39:c9:26:45:07:48:
         64:ca:5a:8c:41:a8:b7:cb:51:aa:4d:bf:1f:45:43:8d:78:84:
         5c:f3:bc:de:ee:cb:d5:fd:f4:03:80:7d:eb:b2:62:d3:34:51:
         39:2f:5e:18:e1:71:38:86:40:03:63:c1:a9:83:a3:35:34:b1:
         67:5a:72:67:66:29:3b:0d:9d:b0:b3:e9:b1:22:4d:aa:dc:b0:
         3b:51:0b:64:b4:76:2f:73:db:27:1d:e6:ca:6f:77:bf:83:da:
         b1:3c:ef:d7:86:a0:d6:b2:93:e1:b8:81:cd:b8:e5:f7:25:25:
         d5:05:b8:ab:69:ea:54:92:90:7c:9a:6a:b9:b0:c0:a7:07:4f:
         3d:db:f8:b4:b8:9c:31:71:d6:e2:e1:92:77:bc:d6:65:f0:72:
         b3:c7:39:a7:39:80:76:b0:f6:2e:0b:c4:83:61:23:77:bc:ef:
         43:ba:e7:3e:1c:f4:cd:bb:10:0f:60:ca:1c:ef:ef:64:d8:8e:
         ee:19:55:6d:64:db:c3:3b:e3:61:43:2a:7c:53:40:2a:9c:9b:
         0e:ba:03:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----