Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          eQpzVOnnjwfnZoB/e6eKWMOKukYnX9BmsgC0u8RyZcY=
Subject key identifier:   68:9A:D8:D6:42:3F:48:3A:7C:2C:37:72:A1:E2:38:AF:6E:81:78:0F
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0BFB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0BF4
Signing time:             Tue 28 Jul 2026 01:11:36 +0000
Manifest this update:     Tue 28 Jul 2026 01:11:35 +0000
Manifest next update:     Thu 30 Jul 2026 01:11:35 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: mCgR8sT4jEqb2siqM8A4jGtXCKpdtsg0bUdZgllm/jQ=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 01:11:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3067 (0xbfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: Jul 28 01:11:35 2026 GMT
            Not After : Jul 30 01:11:35 2026 GMT
        Subject: CN=6a6801c8-bbac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:80:05:8c:38:a9:68:f8:b0:87:49:74:53:5e:
                    a1:5f:48:b9:ab:47:c8:0c:2b:5d:ed:66:9c:ff:6c:
                    55:60:ab:41:06:79:7c:4c:77:ce:91:e5:0f:8a:80:
                    22:4f:09:e8:f3:26:94:e2:e2:03:e1:f7:09:35:e7:
                    20:82:c9:01:ff:a8:71:c3:2e:21:3e:8f:7b:30:43:
                    e3:f8:9e:0d:a6:9c:4c:a8:04:8f:4a:46:66:14:5c:
                    02:fe:fa:af:9e:af:ff:4b:ed:8d:cf:53:cb:95:86:
                    21:6b:5e:a0:d2:f7:22:5d:22:0c:46:43:41:f4:91:
                    19:91:27:56:dc:41:d4:fa:41:08:59:5c:3c:a2:2e:
                    46:77:f3:7f:3d:46:c6:27:05:dc:36:24:11:c9:6a:
                    39:24:8c:71:45:49:58:b3:2f:9e:6d:75:e5:33:0d:
                    fc:a9:2c:01:3a:35:00:31:03:df:11:06:54:87:77:
                    ca:a0:43:93:ba:3e:c8:bc:c0:29:a1:e8:bf:31:ee:
                    ef:ae:a4:0f:7e:fb:39:fc:1a:9b:12:ba:18:bc:28:
                    b1:88:2c:0d:a5:a7:de:e8:fc:41:bd:07:7c:80:ad:
                    37:d8:92:d3:b3:a1:62:61:ba:a6:d6:ad:7e:df:2a:
                    c7:e4:88:0a:0e:bc:cb:fe:e0:a1:23:65:04:ee:e5:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9A:D8:D6:42:3F:48:3A:7C:2C:37:72:A1:E2:38:AF:6E:81:78:0F
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8f:f8:32:b5:72:a5:8a:0f:46:b3:e6:98:a6:d7:54:8c:15:
         37:a1:02:ec:7d:76:99:86:29:fc:24:39:ae:bb:13:18:d9:21:
         e7:ef:7f:0a:6c:d5:48:a0:c7:80:44:f0:be:ce:41:9b:8e:94:
         17:a1:cb:f0:f2:e7:24:5f:5b:d1:26:ff:7c:03:f8:36:ce:f4:
         3d:aa:50:74:40:1b:d2:20:e5:d7:44:1c:2c:fc:81:50:7a:75:
         5f:92:d0:80:12:39:cb:ba:ab:de:cd:5f:83:c6:c3:6c:07:1a:
         fa:d4:ef:44:42:39:e0:99:ef:5e:a8:c7:a3:a8:35:f8:8b:d1:
         4a:92:3c:65:ae:eb:c1:db:5c:bd:4e:1c:30:99:d6:be:77:d4:
         f8:90:d7:15:49:ae:11:bd:19:5f:34:6a:87:bd:89:02:76:1b:
         63:42:05:13:4e:e7:10:d0:4b:b8:1d:72:6f:f3:da:cb:f2:67:
         1e:f5:2b:09:a0:93:23:fa:ed:c7:15:a4:5d:f6:24:5e:46:e3:
         c9:f5:88:19:a4:6b:5b:90:a6:1f:4a:cb:dd:83:2a:7b:59:cd:
         e5:d7:52:e8:4e:51:73:24:80:19:50:e6:e0:b5:70:0d:92:36:
         0c:01:c5:21:c8:f2:ff:13:29:30:87:21:02:26:9c:15:31:a6:
         d5:ac:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:43:06 2026 by rpki-client