Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          j4Qa6NGQhb+1nv3MB8GeAicYEAhwR90/YhC52L8N8NQ=
Subject key identifier:   ED:06:F4:3C:C5:82:08:01:95:9E:C2:7A:0C:43:3E:AF:08:78:28:E9
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0C39
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0C32
Signing time:             Mon 28 Sep 2026 01:11:24 +0000
Manifest this update:     Mon 28 Sep 2026 01:11:24 +0000
Manifest next update:     Wed 30 Sep 2026 01:11:24 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: RCpIqmm/tZwrQacJRUeWMKmsQGGy3gqBaAORKzQ6a2s=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Sep 2026 00:07:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3129 (0xc39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: Sep 28 01:11:24 2026 GMT
            Not After : Sep 30 01:11:24 2026 GMT
        Subject: CN=6ab9bebc-7210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:45:c6:0f:a4:64:60:2a:a3:95:bf:aa:bc:08:
                    de:00:cd:91:a1:66:78:b4:46:0a:32:c8:98:c5:cf:
                    0b:e9:78:f3:96:81:1e:1b:d7:ea:ef:96:3b:ff:90:
                    03:6a:b8:c2:ad:85:06:ba:a3:8f:ee:a0:d3:0b:6e:
                    8c:a1:80:c3:35:4f:28:ef:8a:ff:ab:e4:81:67:f8:
                    89:2a:4e:22:ae:63:01:48:0c:57:02:12:b8:9e:36:
                    63:dc:20:38:2f:09:8f:04:a9:4a:8a:36:4f:07:0a:
                    07:02:60:4f:56:e8:76:54:93:90:7b:0a:a4:49:7e:
                    a0:04:96:b8:d3:40:42:a8:43:e9:81:e2:a5:e0:a3:
                    d5:1d:83:72:93:8e:93:9e:9e:94:54:48:bc:c9:c2:
                    62:6b:78:17:7b:87:de:27:12:26:60:70:32:f1:a3:
                    79:d1:f0:6a:9d:41:84:15:90:79:59:15:f0:86:c5:
                    7e:ae:be:44:23:60:41:f4:a7:cb:79:46:fe:a8:f6:
                    bf:1e:03:4e:ce:18:7d:2e:a8:96:4e:80:28:bb:10:
                    d3:7d:2d:42:cb:a8:03:5e:2e:6e:4e:92:85:11:4f:
                    9a:60:53:4d:03:a2:1f:87:dc:7d:49:a2:bc:d4:77:
                    d3:1f:bb:4d:c9:41:ff:cb:0d:27:6a:70:8f:fa:17:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:06:F4:3C:C5:82:08:01:95:9E:C2:7A:0C:43:3E:AF:08:78:28:E9
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:6f:a5:63:dc:d4:46:aa:ec:01:eb:70:8c:96:31:12:cb:89:
         74:64:4c:1f:04:12:6f:7c:11:ee:3b:30:cc:ba:5f:f6:2b:ae:
         a4:ab:2b:81:a1:a4:9d:55:df:7c:9a:ab:40:99:5d:be:fc:5e:
         68:76:18:fa:04:12:c8:a6:c9:da:f6:a3:02:1d:2f:67:fe:78:
         ca:a5:15:7e:b9:a3:53:bf:10:6e:23:19:b9:0a:f6:2a:0f:4b:
         87:e8:7f:6d:56:dc:84:da:1a:20:dc:c6:90:1b:25:d3:81:d1:
         03:44:ea:12:88:6c:6c:bf:f9:05:49:71:f4:ae:c7:b7:60:dd:
         f3:0a:9d:fc:9d:b5:df:df:91:ca:7e:73:05:54:7d:08:a3:c1:
         4c:1e:08:85:cd:1c:d9:c3:42:cd:c0:1a:e8:c8:63:75:6f:80:
         43:a7:1b:d9:ed:29:be:b9:71:03:11:ff:ad:ab:6a:12:cf:d2:
         bc:c5:06:26:d8:88:db:42:4e:3f:4e:36:61:f1:bc:87:01:e7:
         60:e5:46:b6:cc:5f:fc:11:be:6f:65:b5:29:3c:f2:87:1e:e9:
         bc:33:9f:5e:2f:ee:b2:8c:ed:bb:22:60:b2:f3:8c:d8:c9:50:
         76:b7:30:71:e4:e7:ed:1c:70:0d:b7:f5:7e:e6:70:91:5c:13:
         24:e0:2d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----