Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
File:                     CmexDhaar6MDUON3kxMx2R85q5Y.mft (raw, json)
Hash identifier:          RuomNYXADoHReF2JyyIJUvfrni3kpT8WeYkhltzHlFE=
Subject key identifier:   8B:A7:5F:83:3F:00:92:B4:5F:4F:A8:3F:57:12:9A:D4:40:D9:2C:70
Authority key identifier: 0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96
Certificate issuer:       /CN=F3655EE4AF/serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
Certificate serial:       09D1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
Manifest number:          09C9
Signing time:             Thu 06 Aug 2026 01:40:16 +0000
Manifest this update:     Thu 06 Aug 2026 01:40:15 +0000
Manifest next update:     Sat 08 Aug 2026 01:40:15 +0000
Files and hashes:         1: CmexDhaar6MDUON3kxMx2R85q5Y.crl (hash: oObFlAd/19d4IQi+LKpgQz0zArnSDJnzF+hqnSGYDIM=)
                          2: AA4074F289D111F1A802EACFCE1D38B0.roa (hash: hem0zIKLtZeNSIWMoz0rSJx/832FRGAE3aQ/wjA206w=)
                          3: 8320A09089D111F1A546DECFCE1D38B0.roa (hash: DA5qK7fz+WovThN7j+XSUJLgfIJR5c0CH8vGrCi0D6g=)
                          4: 1E9ACD3A89D111F1AFF6CECBCE1D38B0.roa (hash: +Untrg0WK7+uUtVUE8OjSjSfZ2FmZtLhWuXYFkJyavw=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2513 (0x9d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3655EE4AF, serialNumber=0A67B10E169AAFA30350E377931331D91F39AB96
        Validity
            Not Before: Aug  6 01:40:15 2026 GMT
            Not After : Aug  8 01:40:15 2026 GMT
        Subject: CN=6a73e600-bf8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:21:c6:68:2a:40:62:14:c2:40:6e:52:85:0b:
                    3d:5f:47:9a:0e:18:7b:2b:42:28:0f:e9:f5:85:47:
                    0f:a7:69:d9:08:76:93:14:bc:e9:6d:f0:1c:1f:a6:
                    59:8a:ca:03:43:7f:25:a3:2f:69:1b:b3:c6:6c:73:
                    bb:95:67:47:b9:f5:9d:c7:fa:b4:03:f7:93:2e:e6:
                    11:15:8b:c5:6f:c9:c2:10:3b:20:3d:c0:e0:00:b7:
                    8a:92:3a:bc:cc:5c:7a:5a:ec:5a:bf:5e:62:c4:b2:
                    8c:99:08:90:fa:10:e0:37:68:7b:db:d1:03:1d:ab:
                    71:c3:ce:2c:d1:61:07:0f:cd:bd:65:ec:0b:a2:6c:
                    4e:f4:1b:8b:3f:d2:db:f6:90:3d:7f:86:4c:db:36:
                    5c:fe:26:9f:bd:2d:f0:03:08:94:18:70:be:a9:a4:
                    31:e9:9b:9b:c0:2f:c7:15:4b:0e:57:a4:ec:03:d2:
                    4a:71:be:8a:bd:66:a4:72:e1:79:70:c2:a7:77:25:
                    a6:86:0b:07:81:80:32:4b:5f:28:f1:d8:bd:16:11:
                    49:7f:81:ae:3c:08:10:a5:94:20:36:5f:89:be:ac:
                    ab:0f:a5:89:6a:36:cd:f4:65:fa:3f:4e:06:bb:d6:
                    73:d2:5b:65:35:0d:1f:41:a5:ce:11:12:30:97:06:
                    03:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A7:5F:83:3F:00:92:B4:5F:4F:A8:3F:57:12:9A:D4:40:D9:2C:70
            X509v3 Authority Key Identifier:
                keyid:0A:67:B1:0E:16:9A:AF:A3:03:50:E3:77:93:13:31:D9:1F:39:AB:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CmexDhaar6MDUON3kxMx2R85q5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3655EE4/99A5891E181511EA866A317EF8AEA228/CmexDhaar6MDUON3kxMx2R85q5Y.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:42:63:07:a8:b8:4e:35:b0:80:1e:de:f0:39:cf:66:14:5e:
         08:5d:f6:ed:b5:76:68:fd:a7:d0:5f:93:ac:b3:72:4a:87:fc:
         52:d3:f4:37:93:64:34:13:2f:ce:38:c1:70:2e:9f:25:47:7d:
         84:7c:9b:6b:ae:47:4a:6a:95:cb:24:16:3b:48:1f:d0:4b:ee:
         9f:6c:67:02:59:d7:b4:5d:37:9d:d4:e6:e3:28:16:a7:2d:ae:
         5e:49:fa:33:2c:4b:23:94:c8:ee:e3:7c:28:15:6f:9b:5e:e5:
         c8:fb:93:e2:dd:9e:8a:dc:5a:ab:01:3b:a7:b0:9e:cf:33:21:
         ba:25:dd:8c:60:66:e2:4d:64:88:57:29:51:b9:ca:db:8e:81:
         7a:d5:5e:a7:47:8b:ef:92:47:b0:da:53:5a:23:d8:c8:7d:d5:
         13:d2:83:02:d7:c8:27:40:2d:58:74:05:c5:9b:6a:44:b5:2c:
         1e:66:24:40:29:4f:a8:a5:b2:d2:76:4d:9d:4f:dc:12:78:db:
         25:fa:2d:84:b7:50:46:99:79:66:b7:41:6b:f2:f4:67:e9:1d:
         88:35:07:e0:3d:ec:1f:7e:60:bd:cd:93:58:68:35:1d:d4:c2:
         11:28:7e:92:80:15:6b:48:53:59:1f:a9:4e:a2:2a:7c:3b:ea:
         33:ba:a2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:41:17 2026 by rpki-client