Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          Hz4/KhIcVA2zchb5z4jXmJKQkuBugPh327e61sgRmp0=
Subject key identifier:   B5:BC:53:5D:C0:E9:4B:CA:89:9E:CE:B8:16:9B:AC:B9:93:8F:91:42
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0BAF
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0BA8
Signing time:             Wed 13 May 2026 01:10:48 +0000
Manifest this update:     Wed 13 May 2026 01:10:47 +0000
Manifest next update:     Fri 15 May 2026 01:10:47 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: MvH51ZT3IvTv9HzZzS0MIr0AXgXbOF63jEi/HyhrUBU=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 May 2026 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2991 (0xbaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: May 13 01:10:47 2026 GMT
            Not After : May 15 01:10:47 2026 GMT
        Subject: CN=6a03cf97-dcfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0a:10:91:6e:1a:1f:a6:22:8d:e4:bd:c8:e1:
                    df:41:2f:27:5d:94:c3:a4:eb:a4:58:95:cf:3f:b7:
                    1e:ae:3f:75:20:e8:08:38:b1:41:d9:8d:50:29:5f:
                    95:be:98:e6:b6:16:46:b6:86:2a:a5:46:b7:10:72:
                    51:d4:0f:80:bf:47:5e:7f:13:fb:6d:9d:ef:9d:81:
                    26:01:ae:0e:98:7d:84:86:35:88:82:07:d0:dc:14:
                    1d:11:61:4e:a2:61:a7:17:26:88:a9:1d:5d:d0:d1:
                    e7:65:e2:bc:3b:25:78:83:10:02:c5:d7:a8:87:78:
                    c3:d3:e5:49:cf:4d:1c:e2:9f:0f:57:0b:f0:2d:35:
                    4a:7c:57:68:15:e8:e2:a4:14:51:6f:52:f3:e4:3e:
                    e2:a3:4d:c1:72:2d:f8:fa:d5:90:7d:38:ae:52:48:
                    89:18:ec:6a:52:a6:cd:37:62:e0:b5:53:6f:a0:d2:
                    79:b1:e4:5c:5a:0c:d6:64:08:5d:8d:7e:31:30:69:
                    d9:33:c8:03:3b:6f:a4:76:1f:7f:7e:28:fd:0d:e5:
                    91:99:0a:ad:03:8d:d9:33:a2:be:1a:81:1a:65:4c:
                    60:85:e2:03:ea:f5:5f:20:cc:0e:f3:b0:f3:25:3e:
                    93:a2:00:5a:00:f0:01:8b:30:4d:35:35:0e:d4:7a:
                    46:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BC:53:5D:C0:E9:4B:CA:89:9E:CE:B8:16:9B:AC:B9:93:8F:91:42
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:0a:29:63:19:1d:93:57:04:1c:19:15:f1:43:42:86:3b:18:
         27:8d:52:2a:61:84:4b:ba:c8:80:54:ab:a6:1b:53:62:fd:42:
         db:63:55:62:d4:a7:48:8e:4c:c1:55:6c:e7:04:cd:b7:10:60:
         b6:42:aa:20:0a:02:9e:bd:0b:8f:5d:e9:38:86:ff:66:24:42:
         04:c3:fb:c8:4c:bd:c7:d9:20:68:5f:9f:77:d0:79:10:0e:b9:
         48:7e:45:2e:4f:1f:ba:d4:ca:e3:b7:60:b9:99:70:87:8a:68:
         8f:8a:13:85:c6:18:ea:b1:3b:07:40:e2:01:73:36:0e:ab:d8:
         49:9b:80:29:49:fa:d1:25:5c:0d:67:a2:2f:d4:9b:38:dc:e4:
         dc:09:62:7a:c1:6d:80:58:d8:0b:68:20:1b:1f:2d:79:0e:a9:
         60:2d:c1:0e:24:47:9a:63:e7:a8:58:cc:d4:73:1d:7c:98:8b:
         94:26:e2:e7:e3:2d:cb:ac:ca:40:1d:0d:23:b4:c4:34:5b:d9:
         f5:54:9a:c5:c5:a5:fc:1f:05:9c:d6:89:5f:20:7d:aa:84:26:
         9a:ff:1e:7f:dd:f8:fd:6e:68:b4:b5:99:f7:72:7c:7e:a0:10:
         d0:77:8b:d2:5a:40:f7:7f:d4:eb:41:f3:c0:41:58:53:eb:34:
         a4:5a:08:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:26 2026 by rpki-client