Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          DITIUNHg5g0rCAN3csuxVo947WzfLbwdJXyTVWpHYJc=
Subject key identifier:   37:7F:22:86:86:67:28:11:05:71:28:87:DD:FA:F3:88:6A:65:0B:9F
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       092A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          0925
Signing time:             Mon 02 Mar 2026 01:21:14 +0000
Manifest this update:     Mon 02 Mar 2026 01:21:14 +0000
Manifest next update:     Wed 04 Mar 2026 01:21:14 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: MwnA5s+zS+J3O+zpj1G7r4kUh93hKf0dKlw4jjBQJP8=)
                          2: C6A2BFC405E511EEBD45AA854AD9E6FC.roa (hash: Q1IVIvXiqdltQfSEHcyv3gRXZTV0bEmCpfge3Kg/Cb4=)
                          3: D7C38FFA755711ED8288669DF1222468.roa (hash: PQHxtKv0UDmTHySSXriAgQgTxVwVkFl4QLy3ZSWrPUk=)
                          4: 0BB5A474755811ED8757D89DF1222468.roa (hash: OhvKA82g/2G8xwPFY7Ln9+Cew82izds05rzgS/FGkpM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2346 (0x92a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Mar  2 01:21:14 2026 GMT
            Not After : Mar  4 01:21:14 2026 GMT
        Subject: CN=69a4e60a-eef6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:70:68:ec:3b:67:e9:e4:ae:7f:9a:a8:bc:bc:
                    1f:3a:03:3e:49:47:7f:d4:68:c8:01:8a:59:f7:71:
                    52:60:6f:e8:ec:09:16:7f:2f:5e:d3:22:61:fd:c0:
                    ef:50:2f:74:c0:cb:d1:3f:e7:3d:07:52:09:e9:b7:
                    ed:b9:83:9f:d6:3d:72:d6:3b:8f:df:3e:03:61:ae:
                    a3:b7:03:0a:0b:b7:3f:fe:c0:17:5a:c1:72:bf:6b:
                    dd:91:26:be:cd:0f:9e:54:f9:25:fe:c7:95:21:41:
                    d2:9c:30:ed:d5:45:32:70:80:a2:37:bc:cd:ee:86:
                    de:89:d2:58:3e:7e:ef:a5:f5:74:ee:ba:cc:47:41:
                    0a:3e:43:f2:f2:12:b1:09:52:74:f8:67:e0:57:09:
                    fa:2c:1a:de:c5:a8:1b:2c:80:4f:0b:70:75:e7:18:
                    2f:38:be:72:b2:bb:f3:9d:32:40:2b:1a:cd:7b:1c:
                    90:72:b1:bd:92:2c:db:c4:64:a5:5d:f4:54:d7:b6:
                    7e:7c:55:36:d8:0b:1e:bb:c8:6a:25:c2:87:e9:5c:
                    f1:2a:e1:b5:17:27:e5:18:4c:07:06:d5:0d:68:d7:
                    cf:2a:88:a0:a5:46:06:b6:47:b7:80:06:02:f6:11:
                    23:b2:d0:72:b7:f1:cb:7d:2f:b4:57:e3:1e:c5:20:
                    26:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7F:22:86:86:67:28:11:05:71:28:87:DD:FA:F3:88:6A:65:0B:9F
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:65:ee:79:47:c5:eb:d3:3f:63:22:29:5a:ff:a1:f8:fd:10:
         0a:20:11:97:54:82:14:68:37:62:ba:58:a1:07:ab:1a:9c:7b:
         23:c8:b5:c6:63:a3:66:89:fe:fa:e7:2e:b3:6d:c9:8c:ee:fb:
         ca:1f:a0:42:a1:a5:8d:d1:9c:51:26:49:6b:3a:c3:cb:5f:38:
         90:96:cb:9f:70:ee:0d:21:c1:39:fa:d9:ba:c4:27:44:83:fa:
         b5:b9:9e:45:9c:9f:87:a0:ac:40:fe:f2:66:47:b9:01:79:e6:
         93:9c:2d:3e:2d:0c:6f:81:b5:6e:6c:2f:a9:8c:df:27:42:9d:
         c2:0a:e4:19:2d:cb:3d:31:5a:92:2b:91:6b:54:be:27:0b:0f:
         32:74:e4:05:71:5e:be:66:c8:f3:6e:bc:02:e5:2b:22:59:bd:
         16:e9:f5:90:c5:e8:47:b6:7e:15:03:af:74:03:51:1b:65:91:
         42:3f:78:f0:9c:fd:12:00:74:51:ce:46:ce:ea:e1:31:f6:cc:
         e6:2e:ca:f7:e0:f5:76:c8:2b:26:5a:54:4c:a6:5f:e3:38:e8:
         22:9f:a7:b0:99:9d:3e:3b:95:40:cb:ce:f0:88:fd:f7:0c:5e:
         ac:9d:ad:ab:3d:5d:cf:a4:47:26:3b:e4:4b:20:f4:86:76:b1:
         87:c2:82:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:11:33 2026 by rpki-client