Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
File:                     kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft (raw, json)
Hash identifier:          hwofiPhnfLDxhn5QWta1AmG0/5jeugNVsZFiPwuN7Fo=
Subject key identifier:   DD:35:62:A5:CD:FD:A7:33:98:01:B4:0D:43:B3:A1:03:1C:88:49:E0
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Certificate issuer:       /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial:       02BE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
Manifest number:          02B2
Signing time:             Thu 26 Mar 2026 05:01:53 +0000
Manifest this update:     Thu 26 Mar 2026 05:01:52 +0000
Manifest next update:     Sat 28 Mar 2026 05:01:52 +0000
Files and hashes:         1: kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl (hash: 1lSeIurRtohv9ifdb6fNopKWJx5j67DCGzL3UJAJ6FU=)
                          2: 12F98C3A322C11F09C0E00A8DAE4EC9C.roa (hash: 3/y2xPCMLAqnZ9fL5r4SiXDKczBJPyz466opmOdw+x8=)
                          3: AA49DBAA0BBA11F0ABCF1C53762E951A.roa (hash: 1gTiKBvUuN5Hp+vmaDEDs42+vihpN5KZK723GLEruGs=)
                          4: C21173B24F4811EF8A277884762E951A.roa (hash: Af8VqHnpag7lv/aOf7jeqaTrvvKqqPvGk8sXdY9C8oE=)
                          5: 2BFA32F04F4911EF85B98B88762E951A.roa (hash: VLnmys2y2qLTP9i5IM1gmNfB2WyHqNq5FeIYAdMqXMg=)
                          6: 8F09B9704F4811EF95C0F883762E951A.roa (hash: Jb7IC1uL5aUvVn+T0mFpr5lxOWcWzHI+l9IojCLU5sE=)
                          7: 4691B7064F4811EFB5EC1580762E951A.roa (hash: Y7dEtQLSXLs6SEUJz5C6Rgx6jukPXe2EL/tguL6OuEc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 702 (0x2be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
        Validity
            Not Before: Mar 26 05:01:52 2026 GMT
            Not After : Mar 28 05:01:52 2026 GMT
        Subject: CN=69c4bdc1-05a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:74:f9:5c:ca:ee:d9:b2:55:70:8b:d5:70:78:
                    c1:cb:cc:4b:96:4d:25:b2:63:99:94:93:47:18:7f:
                    8c:65:31:fd:ba:b6:67:e0:ba:9b:7d:d6:01:47:97:
                    2d:f7:b7:97:9c:50:f9:fa:ad:ee:9c:e2:39:74:83:
                    f5:a8:83:49:ce:99:14:cb:d3:86:34:47:35:0a:ee:
                    05:36:6e:6f:10:4e:fe:df:ed:a0:6b:bd:a5:1e:45:
                    72:c8:8f:f5:5a:a5:d4:36:02:a0:da:3d:30:fa:17:
                    3b:04:ca:95:36:01:1f:61:06:68:23:3e:86:c6:8a:
                    46:95:1e:f2:a9:6e:cf:fe:c5:a5:12:02:2d:c6:3b:
                    de:2c:c6:a9:2e:df:4a:36:6c:98:43:99:be:70:30:
                    33:a1:05:38:93:59:f9:76:3f:41:a7:fa:eb:e6:93:
                    04:83:d7:b4:71:ed:d5:80:12:c8:5d:62:3c:af:98:
                    07:32:32:8e:a9:e6:56:c9:79:a6:2b:a5:a4:4a:8b:
                    04:e4:d1:43:20:73:e3:b1:7f:a5:de:84:d0:84:b1:
                    67:7c:2e:9d:7d:cb:b3:25:e1:8b:f0:fe:3c:82:83:
                    5d:93:f8:40:e7:44:6d:d4:1d:df:33:d5:b5:85:3e:
                    0a:69:7c:d3:77:00:6d:dd:0f:4d:b5:3d:a6:d1:20:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:35:62:A5:CD:FD:A7:33:98:01:B4:0D:43:B3:A1:03:1C:88:49:E0
            X509v3 Authority Key Identifier:
                keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ea:18:05:05:ab:82:d6:ff:16:8e:07:6e:27:0a:5c:ef:9f:
         87:a5:95:14:d9:ba:f0:f5:8a:62:3c:c9:d6:af:a3:d0:23:bd:
         bb:54:17:37:2e:e6:de:fe:17:ff:c3:91:d9:3b:5e:d6:84:39:
         59:ab:9e:0c:2e:c8:04:8e:1c:1f:b9:0b:6b:14:01:5b:90:29:
         ec:b0:3b:da:4c:62:73:5c:8a:37:7f:d2:d4:39:76:bd:e1:46:
         3a:c5:89:59:fd:83:87:14:19:11:21:72:f6:1c:74:7b:2c:e0:
         91:31:83:94:0c:30:15:12:cf:69:64:c9:9b:e6:db:ce:4a:e2:
         ee:09:ca:6e:5f:69:e2:c2:3d:83:86:92:67:96:79:ea:0f:dc:
         3a:5e:33:6c:76:3a:63:96:7b:a9:99:29:2b:c7:9b:f7:86:f6:
         69:31:af:dd:30:3a:f3:f9:58:91:81:b4:c6:8d:d8:e4:d4:ea:
         18:7f:57:ec:32:a6:5c:9c:e4:db:ec:d6:96:00:95:34:04:35:
         1f:54:5a:e7:12:ca:a1:b7:ad:a7:4e:46:ec:fc:bd:cb:5d:00:
         8c:d7:79:c7:ff:b1:41:3e:07:b3:53:a2:68:16:d0:9e:59:ba:
         27:4b:2b:16:6f:c6:af:86:63:9b:44:a1:ee:9d:b3:5b:00:6d:
         fe:5d:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:58:13 2026 by rpki-client