Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          SslrJn2pQlfl+n5hMOL1sjdZwoRO1UB+v57SmGdLPP8=
Subject key identifier:   55:DE:F8:1D:79:4C:56:5D:54:42:CF:C9:B5:CD:33:03:4F:64:CF:FF
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       08B2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          08AD
Signing time:             Wed 05 Nov 2025 01:41:02 +0000
Manifest this update:     Wed 05 Nov 2025 01:41:01 +0000
Manifest next update:     Fri 07 Nov 2025 01:41:01 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: w6uTvsyyxorQzWTe2osaF0Ttcm9ygyqdE8T/eOwKLFI=)
                          2: C6A2BFC405E511EEBD45AA854AD9E6FC.roa (hash: Q1IVIvXiqdltQfSEHcyv3gRXZTV0bEmCpfge3Kg/Cb4=)
                          3: D7C38FFA755711ED8288669DF1222468.roa (hash: PQHxtKv0UDmTHySSXriAgQgTxVwVkFl4QLy3ZSWrPUk=)
                          4: 0BB5A474755811ED8757D89DF1222468.roa (hash: OhvKA82g/2G8xwPFY7Ln9+Cew82izds05rzgS/FGkpM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2226 (0x8b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Nov  5 01:41:01 2025 GMT
            Not After : Nov  7 01:41:01 2025 GMT
        Subject: CN=690aab2e-6916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:02:70:66:a9:24:d3:0f:e6:aa:42:10:8d:98:
                    d9:de:0a:e8:a7:2e:40:dd:47:bf:a9:3f:74:ed:fc:
                    96:e3:e7:3f:31:c7:d0:c6:a9:97:d5:8a:a8:d2:04:
                    2b:c6:c2:d0:3b:8e:1c:73:7d:58:3f:c5:78:cf:ea:
                    40:5d:42:3e:ab:38:98:19:98:d5:68:37:87:9d:09:
                    43:00:f6:0f:4f:2f:b5:81:f8:6f:64:b4:4f:7d:e3:
                    22:54:03:76:a4:e2:43:5b:78:07:d2:ee:45:32:61:
                    67:cd:43:4b:d2:08:23:16:5d:48:af:39:a0:2e:70:
                    20:da:2c:c3:8a:76:a0:96:49:8e:22:2f:e9:84:e5:
                    e8:ab:5e:9e:d9:3b:97:e7:71:ca:4d:82:40:27:98:
                    a9:07:a0:40:ff:bb:ae:92:d4:10:85:1b:7b:c2:f7:
                    75:4b:e1:9e:5c:35:9b:8e:b7:87:06:c0:22:48:dd:
                    fd:82:12:d5:c6:9c:28:b9:bf:98:84:44:cd:b2:ce:
                    0f:c2:88:fa:07:3e:21:a2:a0:99:b5:e9:89:8a:3e:
                    43:dc:da:da:a6:2c:d2:8e:8b:1f:98:aa:9f:9b:89:
                    43:fc:9e:53:92:d0:55:87:52:10:c7:86:8a:c8:2e:
                    d7:af:bc:1a:64:a8:14:3a:bb:a4:59:07:fe:12:66:
                    7c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DE:F8:1D:79:4C:56:5D:54:42:CF:C9:B5:CD:33:03:4F:64:CF:FF
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:c7:4b:6f:f3:4f:e7:ba:10:c2:51:4d:77:30:8d:5d:01:3c:
         15:59:a5:18:06:a6:43:65:e4:2c:9b:e6:d5:2f:89:2e:7b:8d:
         08:55:da:35:b4:ae:c5:41:90:0c:fa:8e:9f:d4:93:0a:ca:e0:
         f4:f8:51:9e:95:41:83:bc:f2:9e:16:0c:9b:25:cd:e2:c1:ad:
         de:1d:85:e3:4d:22:30:61:96:a2:e7:44:d0:cf:09:07:1f:66:
         15:03:63:3d:4b:bc:47:d7:66:f3:83:0a:09:b1:86:7d:2e:84:
         48:c3:4f:6a:55:3e:57:13:a1:ed:30:0b:1b:20:95:c5:82:88:
         ba:9b:5a:c0:d8:a4:49:57:68:53:0d:94:ad:22:d7:e8:0c:36:
         f9:60:0e:39:f9:00:c4:c4:ae:83:ec:69:6e:ae:36:53:cc:2b:
         6b:fa:b1:cb:10:40:2e:c4:5a:fb:ce:95:0d:f8:42:8b:44:18:
         24:a9:49:3f:66:37:ec:d5:d0:13:8e:05:41:20:4f:e0:b2:d7:
         a5:49:77:ac:59:df:0e:65:bf:82:8e:37:ba:47:8b:92:b9:3f:
         5b:03:a1:44:ea:26:af:58:f7:5b:46:e1:51:20:b8:81:6c:8b:
         71:0a:65:c1:87:66:4a:91:9c:24:05:60:c0:33:5e:bf:db:e9:
         d0:57:5d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:44:00 2025 by rpki-client