Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
File:                     kkLGCS_iI5rNMMSPNawbxN313L4.mft (raw, json)
Hash identifier:          phAChMS4UDL9crYnJa2LDb7LwS9Q8FAz+3B8IeuXruI=
Subject key identifier:   E6:50:6A:FD:B9:01:36:2B:E0:7B:50:94:B5:33:89:8C:FE:08:74:56
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Certificate issuer:       /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial:       0580
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
Manifest number:          057E
Signing time:             Wed 04 Nov 2026 03:13:03 +0000
Manifest this update:     Wed 04 Nov 2026 03:13:02 +0000
Manifest next update:     Fri 06 Nov 2026 03:13:02 +0000
Files and hashes:         1: kkLGCS_iI5rNMMSPNawbxN313L4.crl (hash: MaZUoMCneYj3qIxwRZpj/kcowap1j3NvXmJVw2fyW08=)
                          2: 8568E0228A7D11F1B05FC1F0CE1D38B0.roa (hash: m+DW1WbSqUnYVurlM4DfNSJoRuEkj2+yIMkYYUFHOpQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                          rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Nov 2026 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1408 (0x580)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AR, serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
        Validity
            Not Before: Nov  4 03:13:02 2026 GMT
            Not After : Nov  6 03:13:02 2026 GMT
        Subject: CN=6aeaa2bf-ca50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9f:35:6c:de:88:07:6f:98:1e:7e:6b:5c:a0:
                    8b:d1:2a:5a:af:78:c8:3d:cc:ed:d6:38:b9:e9:1b:
                    f1:9b:2f:be:c5:c5:7c:cf:a4:5e:67:9f:aa:b7:7c:
                    f2:fe:05:4d:1c:a0:8b:50:ef:a3:46:6d:f5:40:dd:
                    d3:02:ac:55:f0:78:6c:de:b2:65:28:53:c4:3e:31:
                    2d:ad:17:18:a3:87:e2:6a:a3:51:22:80:a4:f3:35:
                    b7:cd:1e:e7:eb:a2:86:5b:b7:fa:52:6e:c9:9e:cb:
                    0b:15:ad:d5:32:5b:86:45:aa:0a:d1:06:0e:7d:06:
                    a4:6f:36:ae:b6:23:d7:e9:8a:1d:03:a4:44:d7:86:
                    5f:6d:75:a7:05:27:ae:32:12:98:01:84:3e:55:51:
                    02:69:e3:11:d0:ea:4b:e3:dc:dc:c1:2f:cd:20:0e:
                    c2:52:fe:4c:fd:6c:23:3b:78:37:cb:dd:57:40:ad:
                    b6:4b:c6:47:4b:c3:66:90:96:80:2c:b6:6c:4c:09:
                    8a:26:f3:62:8f:b9:32:0d:ee:13:14:fd:41:45:92:
                    45:9c:ed:05:71:d2:1c:0e:d8:0a:da:87:bc:76:59:
                    08:61:19:0e:21:14:e0:7d:b3:c7:e8:89:ca:80:63:
                    bc:f0:15:a2:f4:c2:e8:3f:a1:09:d2:52:87:20:e1:
                    24:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:50:6A:FD:B9:01:36:2B:E0:7B:50:94:B5:33:89:8C:FE:08:74:56
            X509v3 Authority Key Identifier:
                keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:58:b4:f9:68:29:e9:72:70:62:d4:e2:9b:5e:92:13:4b:09:
         fc:12:f7:ac:16:dc:02:81:2f:d1:f7:16:96:f3:bd:60:0e:2d:
         3a:08:fd:b8:b0:f2:1a:be:41:ce:85:96:37:6a:2e:a9:79:b6:
         9e:09:d4:11:fe:8b:da:67:9a:0f:d9:98:2c:de:6b:bd:4c:bb:
         43:07:d0:c3:7a:85:78:ac:b1:8c:69:72:70:e9:df:3a:32:0a:
         48:cb:0d:25:87:ba:ab:05:83:53:cf:49:e0:32:39:0d:a9:46:
         3b:f7:53:10:ca:09:c9:56:8b:4e:11:d5:38:5a:e1:0a:0c:ba:
         07:66:16:f0:c6:8b:6a:72:da:03:74:3e:30:dd:12:70:a5:9b:
         2c:5c:23:6e:09:17:1f:af:64:76:72:95:04:d7:64:f0:e8:28:
         67:cb:52:bb:20:f6:02:a1:0c:b0:a9:50:eb:80:24:42:2e:1f:
         d8:8d:16:aa:c0:eb:9b:9d:06:fa:31:42:aa:fe:b5:25:dd:36:
         91:da:e8:89:56:2c:a7:bf:0b:b4:74:f0:ab:62:ae:34:01:ad:
         e2:5e:e9:d2:a8:75:9f:11:73:03:37:05:a8:1f:e9:86:d4:b8:
         3c:42:e6:6c:44:21:91:8d:3f:43:dc:bf:f6:fb:b7:1b:6e:86:
         ae:f4:1c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----