Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          gesYVpCEQwpS+eAWHQjhPI7RpChNqEfDJnFENsXngdM=
Subject key identifier:   9B:B5:5C:C2:E0:CF:E7:65:A5:27:3D:1D:0C:3C:D6:B5:43:45:D5:16
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0C34
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0C2D
Signing time:             Wed 23 Sep 2026 01:11:18 +0000
Manifest this update:     Wed 23 Sep 2026 01:11:17 +0000
Manifest next update:     Fri 25 Sep 2026 01:11:17 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: i+JZG92NTcnZFLTXdbB7LA580Ct+oRw8EK92xQsZtfw=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 01:11:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3124 (0xc34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: Sep 23 01:11:17 2026 GMT
            Not After : Sep 25 01:11:17 2026 GMT
        Subject: CN=6ab32736-8d5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:ea:03:cd:53:3f:f0:0b:63:0b:96:0c:00:
                    63:09:d4:bf:1d:00:61:7d:09:71:d5:dd:e3:d5:ad:
                    a8:d5:fa:9e:c4:c6:03:a2:62:3b:9c:93:93:db:e8:
                    0d:40:bd:ea:80:d0:09:41:d6:f7:f8:07:54:54:d6:
                    6c:8d:81:ba:b9:6d:17:60:7a:f3:c3:3d:dc:c3:41:
                    bd:57:c4:59:5e:62:90:e9:df:b4:62:87:73:54:f4:
                    bc:85:f6:ff:62:e0:d2:e8:e6:d5:77:61:0d:23:d3:
                    f6:2b:d4:6a:4b:7e:32:2d:1f:05:37:5a:d6:0a:6f:
                    27:d1:f1:08:7c:4b:41:9e:88:a9:a2:9c:ed:83:59:
                    12:e8:e6:04:d0:63:25:c7:38:a4:f7:4f:bf:c2:e4:
                    99:18:ab:83:68:d4:c5:65:a2:89:b4:4f:ac:5e:7c:
                    14:fd:1f:45:aa:97:5d:60:38:44:a1:9f:d2:82:6f:
                    bb:b7:cd:8c:d5:f7:8a:87:a2:9b:21:c7:eb:3b:a2:
                    39:79:73:74:4a:32:0b:66:1c:21:7a:e3:a6:83:f3:
                    66:88:de:24:7d:52:f4:77:1f:6c:2d:91:3f:bb:1d:
                    e0:f0:4a:5b:4c:e0:fc:ef:5d:12:f8:f1:e3:12:b0:
                    fb:52:ce:6c:8f:be:9b:bd:27:74:f5:9b:2e:d8:69:
                    1f:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:B5:5C:C2:E0:CF:E7:65:A5:27:3D:1D:0C:3C:D6:B5:43:45:D5:16
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:6f:26:1f:ce:e0:fb:6e:92:10:1e:f5:bb:35:9f:cb:bb:30:
         77:c3:86:07:ad:fe:e0:00:71:72:c5:36:82:dc:df:ee:70:08:
         ad:d5:92:d2:3a:1e:83:65:1c:b4:b5:ff:6c:bf:41:95:d8:04:
         5c:a1:b6:fd:da:47:2a:54:43:4b:50:a7:cc:4b:c8:24:bd:66:
         71:0e:ae:1d:54:79:07:e4:c6:70:90:4b:41:c9:fe:91:7c:6a:
         80:76:8d:8b:75:02:d6:7b:88:af:4d:05:bb:c5:c2:3b:d2:ce:
         f9:76:02:d1:a9:35:64:b9:28:39:be:88:3b:c7:f6:b4:a5:4a:
         de:ff:7d:66:c7:56:a3:06:9f:33:4a:46:ed:b0:ca:b0:8e:aa:
         13:df:7a:b8:17:7f:aa:6c:2a:26:be:a9:fe:45:db:c0:1f:30:
         95:32:6a:bb:2e:a5:7a:69:14:fe:9e:f4:8b:89:6f:41:8b:aa:
         cd:90:88:37:da:19:f8:60:3a:1a:45:b5:4b:25:a6:61:fd:87:
         d0:e0:36:2d:dc:b2:ab:8b:63:8a:0a:65:ca:1b:1f:7d:f2:40:
         91:69:2a:14:13:19:95:b7:cc:ed:b8:70:db:38:9c:7f:e0:e6:
         82:a7:b6:27:4b:4d:12:db:07:69:5c:8c:fd:51:bb:35:ef:f5:
         7e:38:b7:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----