Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
File:                     a5D-NKhmmog4_SOMxloRUsRBZQU.mft (raw, json)
Hash identifier:          XIbq89VhC+bE1Wk4eDhhP8LZ9xPSDujUnIhFhbB5AnI=
Subject key identifier:   4A:D6:C9:26:F7:A8:BB:02:30:C3:2B:85:AD:16:6D:3F:75:6F:FD:73
Authority key identifier: 6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05
Certificate issuer:       /CN=F366FAD3AF/serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
Certificate serial:       0C04
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
Manifest number:          0BFD
Signing time:             Thu 06 Aug 2026 01:11:16 +0000
Manifest this update:     Thu 06 Aug 2026 01:11:15 +0000
Manifest next update:     Sat 08 Aug 2026 01:11:15 +0000
Files and hashes:         1: a5D-NKhmmog4_SOMxloRUsRBZQU.crl (hash: q5mgU0bAlNHB7qDqKIxJTd3u04IBIGioJCFTIdYephE=)
                          2: 053A807256FF11E996D74E7BF8AEA228.roa (hash: hO2TDaSMWg20HoMHgfojmos9nkNQYyH0a66GXivwXhY=)
                          3: 8F2CFCDE56E511E98093C968F8AEA228.roa (hash: 9+KvA5vBTldHkBa01AwWhEOmwfdSKfq79Dv4LMRkqU8=)
                          4: 2B44E2DA56FF11E98AB1737BF8AEA228.roa (hash: KthwQ1M/ZZ2vEvLYbI5jDmjg5aaJSRqGQpQ+loYoav8=)
                          5: 5CDDF2D65F8411E9A487E246F8AEA228.roa (hash: W5D3/ionOUfSBEwoAu8Mc+CDPfPuMjEyhVg8cxMPW1Y=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 08 Aug 2026 00:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3076 (0xc04)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F366FAD3AF, serialNumber=6B90FE34A8669A8838FD238CC65A1152C4416505
        Validity
            Not Before: Aug  6 01:11:15 2026 GMT
            Not After : Aug  8 01:11:15 2026 GMT
        Subject: CN=6a73df34-8e80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:24:94:18:12:9f:35:d7:b6:a8:92:b9:14:5f:
                    3c:68:15:83:b9:5c:6c:1b:14:4d:0f:23:eb:fb:da:
                    b2:d1:c5:b8:36:6d:8c:81:82:5d:5d:5e:c6:9f:8c:
                    43:c1:a0:bd:72:3c:cb:70:00:09:06:f0:2a:24:dc:
                    6c:17:24:b4:cf:9d:94:f0:51:8e:06:24:32:43:35:
                    a5:a4:60:77:25:9a:07:3d:7b:c0:ff:8c:d0:4f:83:
                    2f:41:a7:a5:2c:97:fb:9d:7e:5b:41:b8:9d:fc:1a:
                    6a:5c:c4:6f:26:e1:7f:b1:15:79:f9:53:2f:53:75:
                    6d:3c:5a:ce:d6:67:a0:67:a9:54:1a:b3:98:34:21:
                    ee:f8:90:c8:72:85:04:ab:63:65:13:90:d5:fe:9e:
                    a6:51:dc:b5:07:ec:11:ce:05:0f:8d:e7:df:f9:90:
                    38:86:98:7d:83:37:e9:97:da:7f:67:f9:ca:8c:05:
                    ea:e4:a9:dc:ef:04:a5:b0:f6:76:20:0b:4b:05:50:
                    19:0e:f8:ac:65:5c:a7:2e:be:3e:4c:98:27:b7:18:
                    ba:cb:d4:e9:b9:22:ce:99:8b:41:fc:81:fb:6b:4d:
                    45:07:29:5c:67:48:d5:c8:84:e7:41:a8:61:ab:41:
                    26:95:79:5e:21:69:8f:e3:28:a3:eb:b3:f4:5a:03:
                    d4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D6:C9:26:F7:A8:BB:02:30:C3:2B:85:AD:16:6D:3F:75:6F:FD:73
            X509v3 Authority Key Identifier:
                keyid:6B:90:FE:34:A8:66:9A:88:38:FD:23:8C:C6:5A:11:52:C4:41:65:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/a5D-NKhmmog4_SOMxloRUsRBZQU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F366FAD3/666F962464DF11E8AFE47627F8AEA228/a5D-NKhmmog4_SOMxloRUsRBZQU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:04:55:a3:37:2e:ec:fb:2b:24:a2:62:2f:ee:30:77:96:90:
         5a:c0:5f:c9:b1:73:f7:a1:b6:fd:4b:bf:13:78:10:63:e0:4f:
         38:9d:dc:da:4d:40:11:55:86:ed:f1:91:f3:bb:4b:d4:37:6a:
         42:6c:c8:83:42:06:0e:a5:a5:d8:d5:15:dc:56:97:28:41:24:
         43:6f:32:69:f2:96:34:5e:ec:1c:6e:44:cf:62:56:c9:1c:7e:
         be:cd:e0:57:0f:c8:89:4b:4f:65:57:9e:61:56:ff:7d:40:e6:
         3f:1d:b2:e7:8d:8c:f9:a2:90:91:9f:58:7d:6d:52:92:c3:b3:
         19:b9:f5:60:99:e7:e3:45:7f:1a:8a:1c:9e:04:74:3e:59:96:
         f5:5d:c8:da:7b:1c:0d:60:20:64:36:3d:a3:fd:1d:b6:78:51:
         39:7d:c2:a5:c4:a2:e8:20:65:f1:42:bb:66:7b:25:73:b5:c1:
         89:f5:8a:08:21:a0:c8:a0:fc:85:3e:9b:69:47:42:fa:ef:56:
         e8:40:2e:4c:70:ce:1b:d3:a4:1d:b5:72:98:a5:fa:16:ed:44:
         1e:bf:b0:6f:26:39:8d:c8:6c:8d:f6:f2:68:a9:8e:87:05:b8:
         3a:23:a3:ae:78:cf:c5:f7:90:2d:32:36:b6:9b:e2:56:e5:9d:
         08:d4:3b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 6 11:38:41 2026 by rpki-client