Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          hf0jcAfu6VG0Ma3F2TOIeyiBm+/oxXhZHEIouqLbTJ4=
Subject key identifier:   33:3E:BF:9F:62:61:0B:28:CF:95:C6:4E:47:28:CC:96:C5:61:76:4C
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       09C8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          09C0
Signing time:             Tue 28 Jul 2026 01:40:57 +0000
Manifest this update:     Tue 28 Jul 2026 01:40:56 +0000
Manifest next update:     Thu 30 Jul 2026 01:40:56 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: SR5pIm6/7KxzxaT/n4TDyH4kbqKj1Cfdb31KPtN1WOM=)
                          2: AA4074F289D111F1A802EACFCE1D38B0.roa (hash: hem0zIKLtZeNSIWMoz0rSJx/832FRGAE3aQ/wjA206w=)
                          3: 8320A09089D111F1A546DECFCE1D38B0.roa (hash: DA5qK7fz+WovThN7j+XSUJLgfIJR5c0CH8vGrCi0D6g=)
                          4: 1E9ACD3A89D111F1AFF6CECBCE1D38B0.roa (hash: +Untrg0WK7+uUtVUE8OjSjSfZ2FmZtLhWuXYFkJyavw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:40:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2504 (0x9c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Jul 28 01:40:56 2026 GMT
            Not After : Jul 30 01:40:56 2026 GMT
        Subject: CN=6a6808a9-a254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:78:b4:33:70:20:80:3f:53:17:15:b9:96:1c:
                    68:24:6c:05:9b:c2:24:f2:53:04:f0:92:c1:47:fa:
                    47:52:c5:23:08:73:69:e1:08:33:ed:e2:a1:c5:af:
                    4c:c0:99:44:80:d9:dd:4c:56:10:c9:f3:59:61:8e:
                    e6:99:e3:9f:93:af:8d:6f:32:f7:58:aa:99:97:d8:
                    86:5a:34:c2:9f:8b:71:79:9e:fa:62:95:92:33:29:
                    dd:ef:df:71:c9:08:92:94:4f:7b:31:62:96:ec:d6:
                    77:1d:a7:13:bf:b2:94:ab:e7:c0:66:a8:da:81:f6:
                    c4:32:18:c4:45:b5:94:9e:a9:7d:e0:7c:44:5c:07:
                    5f:b0:c0:b6:e4:29:6d:ca:96:29:b9:18:e2:d1:3f:
                    0c:4e:a7:60:b1:70:49:af:8f:7d:62:c3:d7:bf:d7:
                    64:93:72:45:61:fc:97:9d:cb:16:ee:48:ca:a9:24:
                    dd:15:3b:26:23:68:ca:cd:19:7b:1f:bd:70:40:23:
                    cc:fe:9f:a4:60:ff:13:eb:7f:cf:b6:57:8c:4b:55:
                    23:fb:06:61:e2:c3:a1:2d:96:b8:e2:bd:f9:77:04:
                    c9:f2:92:ae:bf:10:8f:d7:ab:e2:86:38:39:94:d1:
                    9f:bd:cb:ad:21:01:f9:48:46:93:96:53:a4:85:54:
                    a4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3E:BF:9F:62:61:0B:28:CF:95:C6:4E:47:28:CC:96:C5:61:76:4C
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:81:a2:4d:ad:8c:89:e4:fe:d3:45:eb:c2:e7:b7:b3:8b:51:
         d3:d7:4a:f1:fa:27:ea:be:56:7c:a0:24:ca:31:66:88:b5:69:
         99:e4:a7:47:6e:79:2c:f9:02:3e:8a:4a:87:73:d5:8e:37:f2:
         0f:b1:0d:82:ee:2c:f9:d4:9b:85:10:0c:c5:21:b1:4f:96:cb:
         fa:b5:68:74:17:5e:27:00:be:9e:a0:cf:72:03:b5:9c:aa:73:
         ce:23:dd:37:26:2b:c5:8d:bc:97:fb:41:e8:78:11:a8:ac:5a:
         05:66:02:a9:75:c1:8a:de:5c:7c:ec:62:6c:6d:51:5c:3d:1d:
         8e:1f:64:62:31:4a:2d:b1:c9:b0:02:b1:f7:ae:ac:4f:eb:47:
         3b:23:a3:5f:fd:ce:79:03:ae:6c:f5:76:87:a2:8a:75:35:18:
         87:e8:45:bd:8e:2e:ae:f6:ba:b0:71:59:26:2b:4a:26:4f:6a:
         27:2a:a7:52:de:d7:34:cf:d9:9d:f2:2d:63:39:ab:e3:db:ee:
         77:58:ca:b1:ac:67:6f:65:31:37:1c:1a:0b:cb:9d:d5:63:f1:
         17:b1:46:5d:f9:4e:e4:fb:f8:4b:ea:b6:24:7d:dd:d7:34:94:
         3c:4e:a9:15:dc:68:24:92:33:61:3c:04:18:c1:d7:55:51:3c:
         49:5c:58:4a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCcgwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NTVFRTRBRjExMC8GA1UEBRMoMEE2N0IxMEUxNjlBQUZBMzAzNTBFMzc3OTMxMzMx
RDkxRjM5QUI5NjAeFw0yNjA3MjgwMTQwNTZaFw0yNjA3MzAwMTQwNTZaMBgxFjAU
BgNVBAMTDTZhNjgwOGE5LWEyNTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCleLQzcCCAP1MXFbmWHGgkbAWbwiTyUwTwksFH+kdSxSMIc2nhCDPt4qHF
r0zAmUSA2d1MVhDJ81lhjuaZ45+Tr41vMvdYqpmX2IZaNMKfi3F5nvpilZIzKd3v
33HJCJKUT3sxYpbs1ncdpxO/spSr58BmqNqB9sQyGMRFtZSeqX3gfERcB1+wwLbk
KW3Klim5GOLRPwxOp2CxcEmvj31iw9e/12STckVh/JedyxbuSMqpJN0VOyYjaMrN
GXsfvXBAI8z+n6Rg/xPrf8+2V4xLVSP7BmHiw6Etlrjivfl3BMnykq6/EI/Xq+KG
ODmU0Z+9y60hAflIRpOWU6SFVKTlAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUMz6/
n2JhCyjPlcZORyjMlsVhdkwwHwYDVR0jBBgwFoAUCmexDhaar6MDUON3kxMx2R85
q5YwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjU1RUU0Lzk5QTU4OTFFMTgxNTExRUE4NjZBMzE3RUY4QUVBMjI4L0NtZXhE
aGFhcjZNRFVPTjNreE14MlI4NXE1WS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0NtZXhEaGFhcjZNRFVPTjNreE14MlI4NXE1WS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NTVFRTQvOTlBNTg5MUUxODE1MTFFQTg2NkEzMTdFRjhB
RUEyMjgvQ21leERoYWFyNk1EVU9OM2t4TXgyUjg1cTVZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCBgaJNrYyJ5P7TRevC57ezi1HT10rx
+ifqvlZ8oCTKMWaItWmZ5KdHbnks+QI+ikqHc9WON/IPsQ2C7iz51JuFEAzFIbFP
lsv6tWh0F14nAL6eoM9yA7WcqnPOI903JivFjbyX+0HoeBGorFoFZgKpdcGK3lx8
7GJsbVFcPR2OH2RiMUotscmwArH3rqxP60c7I6Nf/c55A65s9XaHoop1NRiH6EW9
ji6u9rqwcVkmK0omT2onKqdS3tc0z9md8i1jOavj2+53WMqxrGdvZTE3HBoLy53V
Y/EXsUZd+U7k+/hL6rYkfd3XNJQ8TqkV3GgkkjNhPAQYwddVUTxJXFhK
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:45:29 2026 by rpki-client