Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          HA8Q23RbKpTEUVe7fl8G2r0WJLmFgWJiZvUjdd2vkZw=
Subject key identifier:   35:80:DE:91:44:BE:28:3A:51:00:FE:B9:C8:06:86:3A:01:36:74:C3
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0BF7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0BF0
Signing time:             Fri 24 Jul 2026 01:11:17 +0000
Manifest this update:     Fri 24 Jul 2026 01:11:16 +0000
Manifest next update:     Sun 26 Jul 2026 01:11:16 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: wI+LkpKPu2n05tTmuz69oVX0RGxKWXHP9iajlSEG5J4=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3063 (0xbf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: Jul 24 01:11:16 2026 GMT
            Not After : Jul 26 01:11:16 2026 GMT
        Subject: CN=6a62bbb5-cd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:11:55:ba:50:40:cc:33:96:df:78:6f:c6:6d:
                    ac:25:8f:59:1e:ef:83:27:77:1f:89:a2:47:7c:86:
                    47:aa:c1:8a:c3:53:cc:19:58:c6:23:b7:68:44:79:
                    88:ab:68:bc:82:5d:48:87:58:ac:0b:27:29:c9:c6:
                    63:1e:1e:28:cb:80:0e:88:8e:8f:2a:75:46:ec:76:
                    c4:39:04:66:c8:1c:54:0f:4d:b0:1d:19:ca:d1:62:
                    5d:36:f2:59:fe:a5:93:61:a0:8e:7b:f5:f0:f4:f6:
                    14:fc:97:1f:08:ff:06:d2:94:e2:48:02:5d:7c:05:
                    e9:8c:81:1a:4f:11:72:94:b4:77:72:6f:9d:51:d7:
                    55:1c:ac:d1:13:b8:f2:5e:8c:5b:4d:c6:12:58:f7:
                    c2:4b:e3:5b:a9:45:47:79:61:e3:02:49:f7:ab:ac:
                    6c:a5:ab:5f:d8:0d:85:28:a3:1f:25:e2:4d:6b:1b:
                    e1:9c:ca:68:25:2c:75:7b:cf:93:c8:4f:1f:a1:dd:
                    15:27:02:ea:33:19:a5:f1:bb:b1:ac:72:a5:48:f2:
                    17:71:fa:94:fe:d3:07:52:bc:00:be:ef:a3:6d:08:
                    cb:b7:94:b7:06:01:30:7c:36:02:87:9a:57:e1:8e:
                    5a:5a:cf:a3:66:c8:95:7e:35:4f:8c:1c:4f:10:34:
                    65:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:80:DE:91:44:BE:28:3A:51:00:FE:B9:C8:06:86:3A:01:36:74:C3
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:17:7a:ec:62:a1:64:b8:72:3e:aa:48:16:18:8b:85:cf:ca:
         4f:fe:5e:d2:f4:48:c2:93:64:40:1d:d8:3e:43:3c:4c:6c:41:
         0a:ce:5c:5e:40:e2:8d:2f:dd:90:9b:2e:92:28:ee:1a:4c:97:
         56:c0:76:ef:78:53:45:a9:18:11:a5:87:27:e6:34:fe:a3:58:
         21:0b:2b:c3:8a:24:04:85:71:be:be:9f:5b:f3:33:6a:2d:cf:
         ef:cc:ba:cd:bc:0f:e7:24:ef:e0:a0:d0:71:1a:39:a8:c4:01:
         d3:d3:46:3d:1c:ae:64:42:44:8f:5e:72:bc:fb:a2:06:69:94:
         72:01:cd:2c:15:e5:f3:bd:b0:38:d5:de:de:c4:73:57:49:89:
         a6:e3:5f:5a:1d:07:5a:5b:96:a2:30:b3:38:7e:d3:b5:99:c0:
         8b:81:7f:4e:4d:63:f5:ee:03:4e:92:8b:08:c4:59:69:43:f7:
         55:e8:67:e8:f0:9f:df:2a:fd:72:b2:b0:68:8a:16:40:bb:cf:
         e5:fb:21:40:76:a9:58:fd:93:c8:53:ba:dc:7d:dd:0b:49:18:
         e1:80:69:e9:7b:67:20:a0:52:05:da:78:cd:70:f4:f9:f5:f9:
         8f:04:66:86:b8:6e:09:46:6f:fb:d6:8a:5e:a7:01:55:a4:e4:
         dc:ae:90:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:08:49 2026 by rpki-client