Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          V7+cwC8mWmN8PrxeJGmxddv0EjNnLAS1M230BGTRCwc=
Subject key identifier:   CE:CF:CE:83:F4:30:A4:7B:AB:0A:AB:5E:61:1E:8E:01:33:38:90:18
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       0A12
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          0A0A
Signing time:             Sat 10 Oct 2026 01:40:40 +0000
Manifest this update:     Sat 10 Oct 2026 01:40:39 +0000
Manifest next update:     Mon 12 Oct 2026 01:40:39 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: S6FS5quTUBbUQv7jcgz53CdKDuTM7sf+nYjMlMJRmvc=)
                          2: AA4074F289D111F1A802EACFCE1D38B0.roa (hash: hem0zIKLtZeNSIWMoz0rSJx/832FRGAE3aQ/wjA206w=)
                          3: 8320A09089D111F1A546DECFCE1D38B0.roa (hash: DA5qK7fz+WovThN7j+XSUJLgfIJR5c0CH8vGrCi0D6g=)
                          4: 1E9ACD3A89D111F1AFF6CECBCE1D38B0.roa (hash: +Untrg0WK7+uUtVUE8OjSjSfZ2FmZtLhWuXYFkJyavw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 12 Oct 2026 00:08:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2578 (0xa12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Oct 10 01:40:39 2026 GMT
            Not After : Oct 12 01:40:39 2026 GMT
        Subject: CN=6ac99798-cb26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:bb:a9:64:b8:f8:9a:68:eb:fe:a0:be:2e:
                    0a:69:69:d0:37:48:d1:fd:8d:a6:e2:ed:fb:c2:4a:
                    81:db:f8:27:1c:8e:74:fb:fc:b0:a7:2b:93:f3:8b:
                    05:3e:3c:29:65:ff:93:69:ca:c6:40:84:d7:11:80:
                    4e:9c:c9:a5:62:e0:b8:81:92:4a:8d:a4:2e:3c:a3:
                    b6:8e:69:0a:3b:c4:5a:99:81:75:e2:5e:d4:f1:56:
                    9b:24:2b:17:3d:01:60:36:1a:4c:dd:67:e1:9a:0f:
                    40:34:b7:1d:36:da:24:27:bd:17:2d:89:74:be:f0:
                    49:ca:49:ae:6c:10:73:ad:c3:85:6e:4e:37:68:08:
                    7c:1d:6d:23:f3:44:35:0a:57:22:aa:5a:df:1c:79:
                    2d:fb:1c:9a:6f:cc:3d:86:2e:f5:d4:e8:62:8b:4c:
                    ee:90:7e:6e:b0:94:dd:e3:61:4f:f0:79:b6:41:8e:
                    32:f5:93:7a:35:11:af:ca:85:93:8f:a5:2d:3f:4c:
                    16:cf:87:7d:ae:04:fa:cc:04:a9:72:e9:a0:5f:46:
                    e4:39:18:7e:50:c1:11:0e:92:24:3d:30:2f:24:d5:
                    0b:72:95:f3:4b:5f:fa:71:08:29:75:1c:c0:ef:af:
                    85:85:35:54:0a:02:7c:c1:a9:7f:63:5b:e5:1d:2a:
                    a1:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CF:CE:83:F4:30:A4:7B:AB:0A:AB:5E:61:1E:8E:01:33:38:90:18
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:d6:d7:3f:33:a5:24:df:2f:f4:4a:0e:50:f7:8b:ad:1f:e3:
         79:04:12:f1:05:0e:de:b3:3a:e8:6f:17:ea:21:69:86:a0:53:
         2b:ce:f3:43:b4:51:ff:88:d2:59:cc:b9:3d:03:55:87:af:bf:
         78:4e:9b:1e:3d:69:a4:54:28:50:25:fe:0c:0a:bb:fa:92:d4:
         3f:d9:2c:36:20:31:d9:b5:96:c5:14:62:43:d5:6f:af:de:f2:
         81:91:31:e8:74:74:93:98:76:aa:f1:b9:0d:01:5d:6b:1a:79:
         b9:6e:96:15:9f:1c:f9:ed:d4:c6:cd:cd:fe:0c:5e:70:71:30:
         8a:8b:fd:fb:e6:8a:e6:de:d5:f2:93:f0:fa:49:33:e5:81:2e:
         e0:61:84:ab:e7:e9:f5:7c:72:f5:82:d9:b2:97:ad:7d:e8:f0:
         3c:de:e8:79:a6:71:1c:69:97:54:3c:9b:1c:81:2a:81:50:34:
         c8:a4:9a:8d:b9:57:79:93:be:44:db:59:ae:b7:c6:a9:31:f3:
         b3:ec:38:69:16:b6:6f:8a:47:1e:c1:e3:cd:f3:80:22:6b:ed:
         34:b2:68:39:05:17:c9:00:a2:2d:f1:96:bb:de:91:36:1c:0c:
         2a:61:da:b1:d7:76:43:22:9a:18:87:2c:83:ce:07:0f:43:9a:
         9e:97:11:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----