Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          s4Q3meChc8irjlBYFy1UBSviuDDBWQpHEypObLVIws4=
Subject key identifier:   92:BB:BE:17:FC:9D:8A:41:32:F2:1B:3B:03:D9:7F:CF:37:66:DF:C9
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0C42
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0C3B
Signing time:             Wed 07 Oct 2026 01:11:13 +0000
Manifest this update:     Wed 07 Oct 2026 01:11:13 +0000
Manifest next update:     Fri 09 Oct 2026 01:11:13 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: S7dTo+6mvYIKCJJzaIgdQrCtF2xVRvTl/aB2bWKQPAE=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 09 Oct 2026 00:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3138 (0xc42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: Oct  7 01:11:13 2026 GMT
            Not After : Oct  9 01:11:13 2026 GMT
        Subject: CN=6ac59c31-3421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:11:32:97:27:16:92:0b:57:ec:df:65:15:a3:
                    61:c2:fd:c0:7c:47:50:66:73:67:e4:b2:31:d2:09:
                    77:06:d4:be:21:c9:6a:1e:02:3a:79:6c:ba:6a:7d:
                    bd:fa:2f:d5:42:b5:7e:73:75:f5:77:33:04:3c:39:
                    4f:54:1c:94:fd:f3:94:de:1f:d6:d5:f8:02:d4:2b:
                    86:9f:24:28:ba:a6:04:b3:24:d0:f1:1d:f1:fc:eb:
                    a8:b7:9d:5d:ce:24:c9:46:9e:4d:0f:21:b1:ce:ef:
                    d3:45:e9:47:12:30:4b:7d:9b:ec:b6:2b:ea:6f:47:
                    be:8b:69:d1:34:73:28:13:25:45:54:53:25:52:31:
                    3f:e7:02:28:45:fa:29:26:0b:9d:f7:b8:36:84:fa:
                    3f:48:3e:bd:b2:71:c0:08:e0:ac:72:40:09:84:db:
                    de:b1:b1:d5:f4:bb:08:98:0c:c0:01:26:ee:ed:cf:
                    1d:da:99:e1:dd:c6:0a:ae:00:86:b5:2f:3d:2c:b0:
                    14:82:70:09:bc:b6:d1:cb:48:81:f4:5a:00:86:11:
                    ec:01:13:25:07:be:02:c8:8f:f6:4d:50:35:fc:55:
                    ec:2c:0c:b2:ac:49:b5:92:f6:4d:ac:65:e9:0d:9e:
                    05:96:06:ed:9e:2d:cb:a0:8e:6a:ab:43:b6:df:97:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BB:BE:17:FC:9D:8A:41:32:F2:1B:3B:03:D9:7F:CF:37:66:DF:C9
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:7f:6c:07:ed:6d:b3:14:36:a5:e6:14:39:95:0b:27:8b:fe:
         9d:b3:23:b5:d0:27:4e:00:40:75:8c:c0:70:1e:56:12:a0:2c:
         1b:ea:c7:10:16:0f:e1:55:25:2e:c3:22:98:94:29:2e:4b:55:
         a2:1e:14:9f:55:e1:0d:2b:22:bd:2f:6e:64:9c:31:a0:a2:44:
         9a:20:91:fd:0b:18:4c:0e:e3:7a:0d:a0:4a:98:36:59:52:84:
         8b:4b:6f:e5:98:74:e0:70:0a:e7:9e:47:08:a4:4e:b3:69:a6:
         5d:be:f6:bf:2e:ab:a1:df:ef:52:1a:ea:25:ed:dd:3a:28:23:
         ee:3e:e5:07:a4:ab:0a:59:35:18:ca:dd:33:74:a9:06:de:16:
         1f:ca:43:bf:3c:22:c5:5a:0b:e3:d4:dc:4e:de:16:dc:8e:26:
         c0:92:5b:58:24:77:ad:7a:7f:03:77:e7:e2:34:f0:4c:40:d9:
         17:5d:1e:59:33:56:f2:bd:e2:2a:6e:40:73:07:e6:89:78:8c:
         e5:96:15:ca:53:31:dd:0f:fa:05:51:1b:f1:ff:9c:7c:e3:ad:
         ee:a4:13:d9:e8:3f:ee:ce:82:93:e3:6a:e0:1c:39:fd:0c:0c:
         32:d1:43:e4:62:36:94:7d:87:db:30:ab:5b:11:a6:c4:3d:5b:
         96:14:65:75
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDEIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkZBRDNBRjExMC8GA1UEBRMoNkI5MEZFMzRBODY2OUE4ODM4RkQyMzhDQzY1QTEx
NTJDNDQxNjUwNTAeFw0yNjEwMDcwMTExMTNaFw0yNjEwMDkwMTExMTNaMBgxFjAU
BgNVBAMTDTZhYzU5YzMxLTM0MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7ETKXJxaSC1fs32UVo2HC/cB8R1Bmc2fksjHSCXcG1L4hyWoeAjp5bLpq
fb36L9VCtX5zdfV3MwQ8OU9UHJT985TeH9bV+ALUK4afJCi6pgSzJNDxHfH866i3
nV3OJMlGnk0PIbHO79NF6UcSMEt9m+y2K+pvR76LadE0cygTJUVUUyVSMT/nAihF
+ikmC533uDaE+j9IPr2yccAI4KxyQAmE296xsdX0uwiYDMABJu7tzx3ameHdxgqu
AIa1Lz0ssBSCcAm8ttHLSIH0WgCGEewBEyUHvgLIj/ZNUDX8VewsDLKsSbWS9k2s
ZekNngWWBu2eLcugjmqrQ7bfl+UHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUkru+
F/ydikEy8hs7A9l/zzdm38kwHwYDVR0jBBgwFoAUa5D+NKhmmog4/SOMxloRUsRB
ZQUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGQUQzLzY2NkY5NjI0NjRERjExRThBRkU0NzYyN0Y4QUVBMjI4L2E1RC1O
S2htbW9nNF9TT014bG9SVXNSQlpRVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2E1RC1OS2htbW9nNF9TT014bG9SVXNSQlpRVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkZBRDMvNjY2Rjk2MjQ2NERGMTFFOEFGRTQ3NjI3RjhB
RUEyMjgvYTVELU5LaG1tb2c0X1NPTXhsb1JVc1JCWlFVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7f2wH7W2zFDal5hQ5lQsni/6dsyO1
0CdOAEB1jMBwHlYSoCwb6scQFg/hVSUuwyKYlCkuS1WiHhSfVeENKyK9L25knDGg
okSaIJH9CxhMDuN6DaBKmDZZUoSLS2/lmHTgcArnnkcIpE6zaaZdvva/Lquh3+9S
Guol7d06KCPuPuUHpKsKWTUYyt0zdKkG3hYfykO/PCLFWgvj1NxO3hbcjibAkltY
JHeten8Dd+fiNPBMQNkXXR5ZM1byveIqbkBzB+aJeIzllhXKUzHdD/oFURvx/5x8
463upBPZ6D/uzoKT42rgHDn9DAwy0UPkYjaUfYfbMKtbEabEPVuWFGV1
-----END CERTIFICATE-----