Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
File:                     kkLGCS_iI5rNMMSPNawbxN313L4.mft (raw, json)
Hash identifier:          54NsVOjAQT/I4YQPYiqZPtcjSCffdDzSAeQItZOKTtc=
Subject key identifier:   AC:01:34:5F:C8:2D:76:A6:86:92:A7:AB:F8:6D:52:B9:3A:E3:24:61
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Certificate issuer:       /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial:       0556
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
Manifest number:          0554
Signing time:             Wed 23 Sep 2026 03:13:56 +0000
Manifest this update:     Wed 23 Sep 2026 03:13:56 +0000
Manifest next update:     Fri 25 Sep 2026 03:13:56 +0000
Files and hashes:         1: kkLGCS_iI5rNMMSPNawbxN313L4.crl (hash: UUNUCJb/0HUbLkD3C5ehxfK7GD9Z0v2gQWK0nVbHcRg=)
                          2: 8568E0228A7D11F1B05FC1F0CE1D38B0.roa (hash: m+DW1WbSqUnYVurlM4DfNSJoRuEkj2+yIMkYYUFHOpQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                          rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1366 (0x556)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AR, serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
        Validity
            Not Before: Sep 23 03:13:56 2026 GMT
            Not After : Sep 25 03:13:56 2026 GMT
        Subject: CN=6ab343f4-c4fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:82:4c:41:db:7f:ff:fc:c1:d1:24:b1:8a:13:
                    a5:e5:0a:d2:e0:91:c0:15:77:11:90:d4:19:15:41:
                    ea:6d:09:19:25:d6:3c:24:8d:9d:07:12:97:39:b8:
                    39:04:76:9e:42:f2:24:cd:9c:d7:27:40:a6:86:fc:
                    d8:6a:c9:8d:2a:75:bb:ea:fb:17:3e:70:77:f3:48:
                    c2:fc:dd:a5:bd:a3:c9:d2:ee:11:1f:f2:6d:fe:3a:
                    fa:b3:16:c3:29:e6:50:8d:12:6a:0c:3d:b0:fb:56:
                    4f:bb:e7:54:85:7a:6c:ad:6b:57:87:53:be:15:61:
                    d4:e1:86:d6:35:9b:cc:41:5c:db:0f:7f:48:91:62:
                    90:f4:8f:2d:a6:13:bf:09:c8:f4:18:66:a6:12:04:
                    38:30:8b:f8:e4:39:30:69:34:fb:f3:fd:81:84:de:
                    44:f7:8e:6a:f0:2d:8f:3e:77:69:26:a8:7f:5b:37:
                    19:80:0e:5d:ac:b7:85:27:f4:52:79:2a:02:1a:7f:
                    60:f0:9e:53:e1:68:8b:f9:50:b6:7c:c7:11:08:f6:
                    3a:54:e4:d8:53:22:18:05:d5:0e:a3:bf:42:ca:ec:
                    46:7b:3a:9b:1f:99:22:8d:ae:64:ab:9a:27:72:cd:
                    63:0f:34:dd:5a:42:ea:a8:0a:fd:de:10:44:b6:fd:
                    fc:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:01:34:5F:C8:2D:76:A6:86:92:A7:AB:F8:6D:52:B9:3A:E3:24:61
            X509v3 Authority Key Identifier:
                keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:7f:c9:40:8b:34:22:ff:58:85:dd:b3:bf:63:c1:73:a5:e3:
         4a:cd:37:d6:33:43:c9:79:32:16:eb:9c:0b:ee:ef:6d:7a:c8:
         aa:ca:d7:d7:a1:87:e3:3b:a1:48:e4:3f:10:29:ad:44:6e:7c:
         ef:34:76:51:24:82:67:b4:18:03:1c:ac:f0:68:50:d2:d8:70:
         14:66:c7:26:49:83:ed:0f:ef:69:ed:26:57:74:1c:46:b3:fe:
         1c:ba:ce:32:5d:b0:b6:e1:54:1b:70:a3:1f:8c:c8:0a:31:d1:
         ca:65:41:19:0c:7e:eb:78:45:17:15:0c:58:87:28:95:fe:12:
         82:c0:a6:6a:86:a4:b6:77:c8:c8:2d:39:d3:c8:03:00:72:dc:
         9b:0a:56:c7:4b:0a:4e:76:42:49:5a:06:84:6a:1c:ed:51:51:
         1b:cf:64:fa:03:63:0c:57:4e:a5:0b:81:cc:c8:02:58:00:53:
         47:47:84:86:65:a6:ec:3d:93:ba:7d:cb:f9:8b:21:6c:98:f0:
         2e:ea:18:8c:ad:1f:7a:dc:99:52:a6:23:cd:70:e7:59:4e:eb:
         4c:43:f2:d4:c8:a2:71:d1:2a:9c:28:a6:84:56:3a:b0:87:44:
         76:a4:9c:0b:b7:85:95:b5:36:29:55:73:35:40:1b:da:d1:48:
         82:44:87:bf
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBVYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUNBQTJBUjExMC8GA1UEBRMoOTI0MkM2MDkyRkUyMjM5QUNEMzBDNDhGMzVBQzFC
QzREREY1RENCRTAeFw0yNjA5MjMwMzEzNTZaFw0yNjA5MjUwMzEzNTZaMBgxFjAU
BgNVBAMTDTZhYjM0M2Y0LWM0ZmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUgkxB23///MHRJLGKE6XlCtLgkcAVdxGQ1BkVQeptCRkl1jwkjZ0HEpc5
uDkEdp5C8iTNnNcnQKaG/NhqyY0qdbvq+xc+cHfzSML83aW9o8nS7hEf8m3+Ovqz
FsMp5lCNEmoMPbD7Vk+751SFemyta1eHU74VYdThhtY1m8xBXNsPf0iRYpD0jy2m
E78JyPQYZqYSBDgwi/jkOTBpNPvz/YGE3kT3jmrwLY8+d2kmqH9bNxmADl2st4Un
9FJ5KgIaf2DwnlPhaIv5ULZ8xxEI9jpU5NhTIhgF1Q6jv0LK7EZ7OpsfmSKNrmSr
midyzWMPNN1aQuqoCv3eEES2/fyrAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUrAE0
X8gtdqaGkqer+G1SuTrjJGEwHwYDVR0jBBgwFoAUkkLGCS/iI5rNMMSPNawbxN31
3L4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDQUEyLzNDNUUwQTYyQTYwOTExRURBMkU3OTJCOUYxMjIyNDY4L2trTEdD
U19pSTVyTk1NU1BOYXdieE4zMTNMNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2trTEdDU19pSTVyTk1NU1BOYXdieE4zMTNMNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RUNBQTIvM0M1RTBBNjJBNjA5MTFFREEyRTc5MkI5RjEyMjI0
Njgva2tMR0NTX2lJNXJOTU1TUE5hd2J4TjMxM0w0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQC6f8lAizQi/1iF3bO/Y8FzpeNKzTfWM0PJ
eTIW65wL7u9tesiqytfXoYfjO6FI5D8QKa1EbnzvNHZRJIJntBgDHKzwaFDS2HAU
ZscmSYPtD+9p7SZXdBxGs/4cus4yXbC24VQbcKMfjMgKMdHKZUEZDH7reEUXFQxY
hyiV/hKCwKZqhqS2d8jILTnTyAMActybClbHSwpOdkJJWgaEahztUVEbz2T6A2MM
V06lC4HMyAJYAFNHR4SGZabsPZO6fcv5iyFsmPAu6hiMrR963JlSpiPNcOdZTutM
Q/LUyKJx0SqcKKaEVjqwh0R2pJwLt4WVtTYpVXM1QBva0UiCRIe/
-----END CERTIFICATE-----