Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          D+SpO7SPycDy7+3MtM+AneqsGZqNuLuY2SwyreqSqC0=
Subject key identifier:   AB:74:79:5B:D3:32:7A:BD:15:E9:79:0D:FF:37:D8:FD:CD:B2:F2:9B
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0B7E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0B77
Signing time:             Thu 26 Mar 2026 01:17:07 +0000
Manifest this update:     Thu 26 Mar 2026 01:17:06 +0000
Manifest next update:     Sat 28 Mar 2026 01:17:06 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: Dz/9CoJS9fQwRRanHnRuV183C6vE48m2PGka288ysDo=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2942 (0xb7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: Mar 26 01:17:06 2026 GMT
            Not After : Mar 28 01:17:06 2026 GMT
        Subject: CN=69c48913-7f12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:ad:ce:3f:6d:27:8f:8a:b8:ac:3e:33:18:87:
                    f4:2f:6d:32:ec:d9:56:0b:7c:7b:6c:4d:66:02:34:
                    53:ca:13:34:8f:64:4c:49:a7:b2:44:07:4f:dd:92:
                    af:a6:68:e2:a2:28:47:66:26:f1:8b:41:05:f6:80:
                    c1:1d:f4:38:4e:31:5a:2f:f2:f9:62:de:d8:b5:43:
                    84:08:06:ff:be:f4:f1:1a:51:25:ec:19:b7:2a:b7:
                    3b:d0:2d:30:6d:f3:24:96:4a:23:91:22:c0:11:8b:
                    45:6a:70:83:b8:fe:8f:60:44:ca:a9:d5:90:45:61:
                    ed:7a:64:ae:9c:41:e3:af:64:15:36:b3:cb:3c:b6:
                    31:75:c5:41:4a:8a:43:1b:64:99:bc:d3:93:29:25:
                    de:2e:1f:21:6b:91:c7:2e:9b:ca:30:56:f5:c0:b3:
                    89:fe:92:83:93:fe:b7:2c:32:be:ba:3b:98:94:c0:
                    bd:3d:42:ce:2c:ef:8f:4a:16:87:dc:ff:99:e1:48:
                    7f:8e:80:1a:a3:d1:a3:04:c9:29:d1:b3:74:1e:59:
                    ca:cf:d6:ee:fe:53:12:92:82:df:51:db:ae:50:cb:
                    94:ae:41:98:04:aa:0f:4f:92:93:85:fb:97:1b:c1:
                    35:47:34:5b:6a:ca:1e:2f:fa:1d:1f:f9:c9:c4:85:
                    d8:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:74:79:5B:D3:32:7A:BD:15:E9:79:0D:FF:37:D8:FD:CD:B2:F2:9B
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:5b:f3:36:71:a3:19:d1:79:a6:78:d3:30:81:17:ad:92:7c:
         ff:15:e9:9b:16:53:52:1e:c2:fe:6a:de:a1:f3:35:9f:fd:0e:
         b4:34:85:d6:82:7b:e0:e2:43:6f:6b:e2:48:88:60:3a:c5:29:
         c4:29:5b:6c:ac:4e:be:da:64:79:c7:42:61:f2:a2:a8:f1:1e:
         c9:2b:f7:5c:70:45:9b:7a:d5:27:59:d7:d9:a4:ae:ac:df:16:
         53:9b:bc:3d:b7:af:14:9b:85:8c:b4:42:ce:85:8d:b1:cd:85:
         d8:b9:c1:f1:17:b2:a9:a5:0c:66:8b:6b:be:77:59:0e:fb:1b:
         24:e1:de:f7:a0:db:bb:ea:50:50:12:b5:47:04:86:e0:19:52:
         ab:4a:0b:aa:f7:6a:31:c6:18:01:d3:20:fe:d7:5e:0c:c5:d7:
         ac:84:06:6c:60:dd:6c:09:cb:9c:75:5b:af:a0:13:e6:f8:81:
         7d:49:f1:79:db:83:3e:f2:40:46:82:dd:e6:4f:d1:01:b1:18:
         79:bd:8a:32:18:e1:aa:f7:c8:1b:d1:ed:cc:c9:cf:bf:f9:93:
         1a:03:bb:e5:ec:8e:7d:ad:d6:55:7c:df:bf:b5:1a:97:4d:2f:
         9c:f2:fb:64:e4:56:78:14:f7:0f:d6:9a:36:89:17:18:c0:0d:
         c9:df:04:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:58:21 2026 by rpki-client