Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          eZmpEj80oQYiWvMfqA3UMdn5E0DLhXofL1KMg41ejUc=
Subject key identifier:   E0:AE:83:EA:CD:50:C6:2E:35:81:62:DF:DD:62:46:28:2E:34:05:FF
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0C41
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0C3A
Signing time:             Tue 06 Oct 2026 01:11:11 +0000
Manifest this update:     Tue 06 Oct 2026 01:11:10 +0000
Manifest next update:     Thu 08 Oct 2026 01:11:10 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: nrqVYuTumoAgyXjudOJsBohfurdJnLAscNQTrt3za5A=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 08 Oct 2026 01:11:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3137 (0xc41)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: Oct  6 01:11:10 2026 GMT
            Not After : Oct  8 01:11:10 2026 GMT
        Subject: CN=6ac44aaf-cb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:11:e9:1e:91:6e:45:0e:a3:91:eb:2e:f3:c0:
                    32:f6:64:ff:19:3e:1d:42:bb:4c:c5:89:72:cd:f2:
                    02:3d:00:2a:f1:33:95:15:ba:32:e2:0b:91:45:2c:
                    40:40:bc:9e:de:5f:f0:fe:b5:57:5f:67:fc:34:34:
                    1a:51:a5:23:2c:67:ec:86:8a:9d:4c:ae:18:c9:95:
                    6c:0e:37:ca:20:de:ac:ea:5a:fb:79:53:c2:0d:27:
                    f4:ff:68:9b:e3:f6:4e:d9:85:4d:01:9c:8f:08:66:
                    9c:c2:f1:ee:01:24:db:34:56:bf:57:f5:93:6e:e4:
                    c9:88:08:3a:5e:a4:a2:18:92:8c:33:7c:3b:75:e3:
                    b4:97:f5:81:ae:46:20:ef:1b:81:06:7e:00:18:0e:
                    ce:c9:bb:d6:a1:a9:67:45:65:14:c9:b5:1f:c7:ce:
                    e7:7c:4f:af:ca:24:a8:5e:12:90:a2:a2:bc:40:bf:
                    72:83:7d:4a:e5:68:8d:ba:1d:a1:52:d1:d0:af:91:
                    4d:16:43:18:1e:28:d4:20:ac:66:2a:05:9e:7d:8d:
                    36:0c:9b:a4:7f:28:f6:b0:af:9d:c3:18:76:89:d2:
                    80:98:86:b3:15:64:5c:09:85:4c:e3:b9:03:d2:5c:
                    65:55:bf:bf:94:5d:43:dd:d9:d0:c1:58:c6:cf:fa:
                    55:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AE:83:EA:CD:50:C6:2E:35:81:62:DF:DD:62:46:28:2E:34:05:FF
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:7e:e5:4d:85:6b:ed:02:f2:50:bf:29:a9:64:67:16:be:08:
         cb:2d:3d:74:3f:e6:c7:8e:11:c2:ef:4c:a8:c0:ff:40:c0:4a:
         16:6b:15:9d:da:18:b7:6d:f8:d3:24:bb:61:f4:7d:89:08:88:
         9a:36:62:02:14:bf:fb:9f:1d:ff:70:bd:b6:dd:3c:f5:8a:f0:
         76:0e:6b:d2:49:26:69:d4:a5:02:e5:b9:06:67:45:cb:d1:a0:
         7e:99:99:82:5a:67:79:de:9d:bc:fa:23:17:c2:3c:14:d1:dd:
         07:fc:56:f1:11:e8:d9:e0:2f:a9:1e:76:02:e8:4d:03:ff:ed:
         23:a8:0d:68:6c:ec:0f:ec:1d:24:bf:53:dc:70:0d:b0:ff:73:
         44:ac:6b:d3:09:60:ca:e1:35:b8:b6:15:2d:ee:c6:74:e5:c6:
         0e:5a:0f:9a:91:ff:a0:dc:68:13:8e:90:72:de:72:84:cd:e5:
         31:e4:f0:ce:dc:e2:22:c5:5b:47:a3:40:58:71:73:94:26:7d:
         d1:00:4c:6b:9c:f7:7e:ad:c4:7a:65:00:a2:58:5e:83:fa:43:
         c7:a1:cb:03:06:f1:98:f6:c2:02:c1:59:08:cc:b8:52:94:61:
         8a:c0:54:e9:2d:76:26:27:da:03:dd:82:da:99:14:cf:25:03:
         ba:0d:99:a8
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDEEwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NkZBRDNBRjExMC8GA1UEBRMoNkI5MEZFMzRBODY2OUE4ODM4RkQyMzhDQzY1QTEx
NTJDNDQxNjUwNTAeFw0yNjEwMDYwMTExMTBaFw0yNjEwMDgwMTExMTBaMBgxFjAU
BgNVBAMTDTZhYzQ0YWFmLWNiM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfEekekW5FDqOR6y7zwDL2ZP8ZPh1Cu0zFiXLN8gI9ACrxM5UVujLiC5FF
LEBAvJ7eX/D+tVdfZ/w0NBpRpSMsZ+yGip1MrhjJlWwON8og3qzqWvt5U8INJ/T/
aJvj9k7ZhU0BnI8IZpzC8e4BJNs0Vr9X9ZNu5MmICDpepKIYkowzfDt147SX9YGu
RiDvG4EGfgAYDs7Ju9ahqWdFZRTJtR/Hzud8T6/KJKheEpCiorxAv3KDfUrlaI26
HaFS0dCvkU0WQxgeKNQgrGYqBZ59jTYMm6R/KPawr53DGHaJ0oCYhrMVZFwJhUzj
uQPSXGVVv7+UXUPd2dDBWMbP+lVbAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4K6D
6s1Qxi41gWLf3WJGKC40Bf8wHwYDVR0jBBgwFoAUa5D+NKhmmog4/SOMxloRUsRB
ZQUwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjZGQUQzLzY2NkY5NjI0NjRERjExRThBRkU0NzYyN0Y4QUVBMjI4L2E1RC1O
S2htbW9nNF9TT014bG9SVXNSQlpRVS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2E1RC1OS2htbW9nNF9TT014bG9SVXNSQlpRVS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NkZBRDMvNjY2Rjk2MjQ2NERGMTFFOEFGRTQ3NjI3RjhB
RUEyMjgvYTVELU5LaG1tb2c0X1NPTXhsb1JVc1JCWlFVLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4fuVNhWvtAvJQvympZGcWvgjLLT10
P+bHjhHC70yowP9AwEoWaxWd2hi3bfjTJLth9H2JCIiaNmICFL/7nx3/cL223Tz1
ivB2DmvSSSZp1KUC5bkGZ0XL0aB+mZmCWmd53p28+iMXwjwU0d0H/FbxEejZ4C+p
HnYC6E0D/+0jqA1obOwP7B0kv1PccA2w/3NErGvTCWDK4TW4thUt7sZ05cYOWg+a
kf+g3GgTjpBy3nKEzeUx5PDO3OIixVtHo0BYcXOUJn3RAExrnPd+rcR6ZQCiWF6D
+kPHocsDBvGY9sICwVkIzLhSlGGKwFTpLXYmJ9oD3YLamRTPJQO6DZmo
-----END CERTIFICATE-----