Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          oZylLMglelxVXpwPYaiJtS/1rqoLKQx7HywVXXzXHJ8=
Subject key identifier:   CB:0B:D4:CB:7A:5F:6A:B0:22:51:CA:5B:73:21:15:CF:8F:0A:40:9A
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       0958
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          0953
Signing time:             Fri 17 Apr 2026 01:39:33 +0000
Manifest this update:     Fri 17 Apr 2026 01:39:32 +0000
Manifest next update:     Sun 19 Apr 2026 01:39:32 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: saZ0qwscYeUmmaetkMU1hGfYxxaeuFK0Ja02fkHuIFk=)
                          2: C6A2BFC405E511EEBD45AA854AD9E6FC.roa (hash: Q1IVIvXiqdltQfSEHcyv3gRXZTV0bEmCpfge3Kg/Cb4=)
                          3: D7C38FFA755711ED8288669DF1222468.roa (hash: PQHxtKv0UDmTHySSXriAgQgTxVwVkFl4QLy3ZSWrPUk=)
                          4: 0BB5A474755811ED8757D89DF1222468.roa (hash: OhvKA82g/2G8xwPFY7Ln9+Cew82izds05rzgS/FGkpM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 01:39:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2392 (0x958)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Apr 17 01:39:32 2026 GMT
            Not After : Apr 19 01:39:32 2026 GMT
        Subject: CN=69e18f55-a24f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:db:1f:fd:5b:b6:79:a0:05:ad:49:41:fc:68:
                    e2:7b:95:c6:db:a1:93:eb:05:e4:fc:a5:42:3b:34:
                    4d:79:09:40:9e:5d:17:aa:c6:4f:8d:87:ee:70:45:
                    75:d5:9b:b2:1f:cc:60:a5:dc:a1:e7:8b:50:f9:0e:
                    1e:a2:c4:3b:52:de:ed:35:38:99:ba:f2:f3:ec:23:
                    4f:43:4f:f3:de:aa:c7:f4:58:9e:89:5f:93:67:52:
                    5a:3f:21:6f:da:d4:a6:57:fb:a7:ec:c3:19:c5:c6:
                    69:b1:3a:98:d1:90:63:a5:75:06:70:01:2f:12:dd:
                    8f:4d:b3:db:a4:f6:8d:9d:8d:20:4a:40:08:a3:17:
                    d9:e5:41:2c:64:0c:39:05:89:dd:c5:ea:2b:f7:99:
                    e5:c9:ef:fb:33:ab:db:56:38:b0:b1:38:50:0f:45:
                    bb:7b:d5:90:90:e2:9e:c5:83:ce:85:c8:a0:39:16:
                    ec:6b:c9:2c:3f:96:f8:fa:a9:c3:db:13:29:20:78:
                    68:22:0d:b8:1d:78:88:84:76:2f:9e:85:4c:79:21:
                    ad:68:52:a9:25:d9:02:c3:d2:27:7f:12:47:b3:c3:
                    34:ff:31:bc:5b:20:3c:99:45:9b:70:3a:48:ba:8e:
                    1e:d8:60:ad:47:86:aa:cf:fe:c6:b9:58:95:29:ef:
                    d2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:0B:D4:CB:7A:5F:6A:B0:22:51:CA:5B:73:21:15:CF:8F:0A:40:9A
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1a:e9:bc:9e:05:5b:14:c0:f4:be:68:9a:74:6b:18:3a:a3:
         31:42:ac:05:ff:20:18:09:17:9f:83:da:43:a7:41:d9:6b:79:
         17:f9:b1:0f:6e:46:71:da:7f:06:df:e0:c3:19:94:ec:3c:8b:
         a5:cf:cf:c1:ef:1a:fd:fd:af:ef:eb:58:9e:a8:af:4b:f7:4e:
         e6:93:f5:f4:50:6d:a4:05:2d:47:a2:3d:c5:7b:cf:bc:1b:1a:
         98:38:c3:4b:f8:f7:b3:ae:8d:27:f5:0f:b8:87:3d:6b:bc:6c:
         3e:20:73:a6:02:97:1e:e5:69:dd:9e:50:05:c2:1b:2b:e6:aa:
         81:eb:36:e7:c3:8a:a6:5d:d9:94:90:61:1d:d4:91:11:dc:d4:
         25:fb:52:00:5b:7e:19:a9:c5:97:09:34:bf:9d:dc:5d:b1:4a:
         d0:ba:67:29:4f:e2:72:28:61:ec:06:17:a9:98:cb:fc:03:40:
         af:f3:b4:c8:17:78:c0:ca:d5:4e:dd:17:81:56:e6:67:9c:ff:
         f6:dd:f7:79:dc:93:ce:7e:b4:46:d1:40:59:05:95:e4:10:59:
         8d:b6:4d:60:ff:9e:63:da:e2:79:78:82:ba:61:ad:f9:47:0d:
         4e:ab:6a:57:19:41:b1:5c:ab:da:ee:49:87:e9:67:3b:1e:84:
         b1:a7:55:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:14:12 2026 by rpki-client