Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
File:                     kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft (raw, json)
Hash identifier:          C747wRMzNoT13gR+SjjK0PNrneBaRicB9Rncf4Ex2BM=
Subject key identifier:   E7:0E:95:F8:71:48:6C:F8:FE:DE:3D:05:FD:2C:FC:EC:03:24:ED:A1
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Certificate issuer:       /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial:       01E3
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
Manifest number:          01D7
Signing time:             Sat 23 Aug 2025 04:32:33 +0000
Manifest this update:     Sat 23 Aug 2025 04:32:32 +0000
Manifest next update:     Mon 25 Aug 2025 04:32:32 +0000
Files and hashes:         1: kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl (hash: H8d70cN2KcspblnJ1yEcynfec8ogwK7A5xBPEgOSs18=)
                          2: 12F98C3A322C11F09C0E00A8DAE4EC9C.roa (hash: 3/y2xPCMLAqnZ9fL5r4SiXDKczBJPyz466opmOdw+x8=)
                          3: AA49DBAA0BBA11F0ABCF1C53762E951A.roa (hash: 1gTiKBvUuN5Hp+vmaDEDs42+vihpN5KZK723GLEruGs=)
                          4: C21173B24F4811EF8A277884762E951A.roa (hash: Af8VqHnpag7lv/aOf7jeqaTrvvKqqPvGk8sXdY9C8oE=)
                          5: 2BFA32F04F4911EF85B98B88762E951A.roa (hash: VLnmys2y2qLTP9i5IM1gmNfB2WyHqNq5FeIYAdMqXMg=)
                          6: 8F09B9704F4811EF95C0F883762E951A.roa (hash: Jb7IC1uL5aUvVn+T0mFpr5lxOWcWzHI+l9IojCLU5sE=)
                          7: 4691B7064F4811EFB5EC1580762E951A.roa (hash: Y7dEtQLSXLs6SEUJz5C6Rgx6jukPXe2EL/tguL6OuEc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 483 (0x1e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
        Validity
            Not Before: Aug 23 04:32:32 2025 GMT
            Not After : Aug 25 04:32:32 2025 GMT
        Subject: CN=68a94461-4d37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d6:1f:d8:4d:a0:78:a9:2d:e1:4d:03:56:23:
                    2f:ec:32:2c:00:76:4a:bf:54:8d:e1:4d:df:48:8b:
                    3d:64:08:95:5d:65:fe:eb:6e:61:e2:70:7f:89:b4:
                    2c:4e:5b:b7:00:4a:5c:64:a9:f0:f0:dd:bb:a9:25:
                    9d:be:24:10:33:2c:3d:12:d1:73:bf:3c:65:36:c9:
                    5a:8b:8f:bb:11:83:03:98:f6:c6:a3:a8:63:e5:08:
                    94:fe:6d:14:78:67:23:d9:de:d0:39:1d:69:b0:a5:
                    2a:e7:f5:c6:91:c4:2e:fc:18:e3:0f:38:68:7e:26:
                    68:89:cf:c6:e2:09:71:ae:45:23:d3:b6:a5:57:8e:
                    4f:80:6f:96:8a:7a:58:90:8d:22:15:da:6e:87:51:
                    bc:c2:1c:6c:49:0e:e3:26:e7:db:b0:57:16:46:45:
                    b0:d2:40:da:12:88:52:26:ab:b6:8e:de:57:40:a8:
                    90:54:bf:21:fb:63:b6:c8:5e:94:f9:37:b5:22:19:
                    0a:24:f7:44:2a:55:19:1d:4d:d0:3f:00:51:31:29:
                    d3:c2:6b:2d:32:8f:9a:3e:e3:5c:cc:55:84:80:d0:
                    37:18:b4:07:35:27:fd:8a:de:93:6f:1b:ed:b0:8e:
                    80:f8:00:be:b0:8d:b4:ff:c6:7e:b9:53:a0:d5:3a:
                    8d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0E:95:F8:71:48:6C:F8:FE:DE:3D:05:FD:2C:FC:EC:03:24:ED:A1
            X509v3 Authority Key Identifier:
                keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:3a:6e:63:9e:87:56:f0:49:4d:b0:3e:2b:a4:44:85:94:dd:
         29:7b:c0:6e:65:a8:1a:ec:51:88:9a:8d:41:d5:52:9c:cf:40:
         e0:bb:6a:ca:c1:10:c7:d1:3b:01:ef:8e:75:b0:39:62:d6:ba:
         50:f7:e6:86:d7:d5:eb:8c:f7:49:76:87:c3:eb:83:8e:35:64:
         84:3d:96:c0:3b:a4:7e:f9:63:7b:4a:86:da:16:92:b5:02:a3:
         43:4e:63:9f:ff:cc:e2:b0:d7:38:67:39:35:5c:ff:0f:24:fc:
         9b:f9:9b:b8:04:f8:ff:9b:4e:9a:44:c6:bd:89:4a:e4:fc:6d:
         a0:e3:d3:ce:38:1c:d4:1f:ce:75:a0:1e:79:a1:63:6a:08:2e:
         37:80:13:a5:2f:34:c8:97:19:80:20:d3:7c:43:4e:1b:36:63:
         3e:46:53:9a:e3:61:cf:3b:c5:a7:11:b3:6c:12:b6:2b:d4:41:
         e9:ba:27:34:29:67:fb:f8:ea:cb:37:89:25:f9:f6:73:24:83:
         49:cb:c0:ba:a7:4c:8c:09:96:d0:70:e8:7b:8d:06:c6:02:44:
         6f:3d:d4:8a:9f:9e:e1:48:d6:4c:08:e0:19:0d:98:10:e6:2d:
         a1:f3:1c:77:25:9e:60:df:91:8c:d1:e8:7b:b3:e2:76:59:7a:
         41:94:ec:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:30 2025 by rpki-client