Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
File:                     kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft (raw, json)
Hash identifier:          qdac/NavfM+7gN4MEQIpXK4jfITxpSXwgfAieQbthxY=
Subject key identifier:   A4:07:99:25:A8:51:7A:2C:68:3B:24:47:B6:EC:28:87:8B:13:AD:BF
Authority key identifier: 91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9
Certificate issuer:       /CN=F36AE219AF/serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
Certificate serial:       035D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
Manifest number:          034F
Signing time:             Thu 27 Aug 2026 04:14:00 +0000
Manifest this update:     Thu 27 Aug 2026 04:14:00 +0000
Manifest next update:     Sat 29 Aug 2026 04:14:00 +0000
Files and hashes:         1: kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl (hash: +QAx7PUrApTwxDlJmkcQ3CWeqEwU/MI6u4JxmAJH+4k=)
                          2: 12F98C3A322C11F09C0E00A8DAE4EC9C.roa (hash: 3/y2xPCMLAqnZ9fL5r4SiXDKczBJPyz466opmOdw+x8=)
                          3: AA49DBAA0BBA11F0ABCF1C53762E951A.roa (hash: 1gTiKBvUuN5Hp+vmaDEDs42+vihpN5KZK723GLEruGs=)
                          4: C21173B24F4811EF8A277884762E951A.roa (hash: Af8VqHnpag7lv/aOf7jeqaTrvvKqqPvGk8sXdY9C8oE=)
                          5: 2BFA32F04F4911EF85B98B88762E951A.roa (hash: VLnmys2y2qLTP9i5IM1gmNfB2WyHqNq5FeIYAdMqXMg=)
                          6: 62A764BA4D5511F1B840B716CF1D38B0.roa (hash: bJTjExMhaMX3ZBR8/uY7C7E1lDCmRfterL/t1acckIw=)
                          7: 3128F838389511F1B959E80BCF1D38B0.roa (hash: o3mY/PHhe4PtkVQyaPKBNxFpCBc+yL0m9QVPhkGqaLs=)
                          8: 8F09B9704F4811EF95C0F883762E951A.roa (hash: Jb7IC1uL5aUvVn+T0mFpr5lxOWcWzHI+l9IojCLU5sE=)
                          9: 4691B7064F4811EFB5EC1580762E951A.roa (hash: Y7dEtQLSXLs6SEUJz5C6Rgx6jukPXe2EL/tguL6OuEc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 29 Aug 2026 04:13:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861 (0x35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36AE219AF, serialNumber=91C99E457967B9929B2EDE7979728B0FE2639AD9
        Validity
            Not Before: Aug 27 04:14:00 2026 GMT
            Not After : Aug 29 04:14:00 2026 GMT
        Subject: CN=6a8fb988-0e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b4:21:af:d3:8a:25:82:d7:bc:0b:a9:64:c8:
                    8e:d4:d3:f2:c5:91:2f:c6:2d:6a:4a:9f:20:51:65:
                    18:6e:7d:7d:39:20:06:87:93:2b:30:08:75:d6:a8:
                    98:76:a8:20:5e:a1:1d:9c:c0:82:a0:15:53:ae:48:
                    23:d4:53:a4:9a:ce:c7:ce:0d:ea:27:74:98:e6:41:
                    47:8a:2a:49:2b:44:2e:df:5f:57:ee:31:c3:da:12:
                    b4:84:08:ff:2a:f9:ae:49:46:bf:df:d5:16:71:5c:
                    f8:42:1a:5c:d5:52:7e:0b:79:7a:b1:2c:54:5a:b0:
                    d4:af:67:f6:75:7a:61:23:2f:4b:a3:39:f9:43:04:
                    64:e2:b4:21:ab:ad:c5:8c:96:f3:f2:80:13:94:89:
                    24:03:b1:31:87:b2:6c:5c:c7:ce:91:d4:a7:37:f8:
                    14:1b:6d:c4:82:91:c0:7b:25:e7:41:41:8e:ba:21:
                    6c:58:7d:3e:06:09:0d:5b:59:5a:e9:a7:f0:0c:84:
                    92:36:be:9f:44:ec:9a:62:65:e9:29:86:fb:4b:8d:
                    cd:33:53:b9:85:ff:89:4b:b2:09:f2:8f:94:62:00:
                    53:ed:c3:6a:be:3d:8f:7a:31:fb:5d:be:3a:c5:93:
                    8c:a8:50:33:8c:71:18:36:cc:2e:51:a5:c4:02:56:
                    98:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:07:99:25:A8:51:7A:2C:68:3B:24:47:B6:EC:28:87:8B:13:AD:BF
            X509v3 Authority Key Identifier:
                keyid:91:C9:9E:45:79:67:B9:92:9B:2E:DE:79:79:72:8B:0F:E2:63:9A:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/kcmeRXlnuZKbLt55eXKLD-Jjmtk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36AE219/52BAC3D8231011EF92871F3A7DDC24C2/kcmeRXlnuZKbLt55eXKLD-Jjmtk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:03:ea:10:80:4d:12:81:62:b8:15:de:fb:74:1f:a0:48:d8:
         5f:3f:4a:d4:f0:76:3e:0b:c2:36:6f:1b:10:91:8a:7b:6c:5b:
         83:1c:2d:20:8f:63:89:ef:34:54:68:89:dd:a1:df:b2:92:1d:
         3c:7d:f6:63:7d:96:73:a2:56:bf:17:ee:a7:83:1c:6d:4c:6e:
         13:03:37:33:3a:01:6c:e1:35:c5:e6:d8:db:34:f1:9b:54:d3:
         34:e8:af:81:36:82:02:f1:d6:ea:6d:e3:51:77:c7:cc:7d:38:
         38:4f:5a:27:4e:6b:c9:8e:0a:bb:b7:d8:4f:bb:09:03:c0:0f:
         91:7f:e0:86:21:47:ac:8f:8f:4c:13:b9:b8:76:62:ee:cf:0b:
         2a:d8:8d:8b:cb:ef:05:69:b9:d7:7c:6d:9c:b0:dc:71:bc:06:
         f9:1b:32:98:ba:4d:1a:74:6c:d4:fc:5a:34:f9:ae:7c:dd:e7:
         1b:38:06:8e:a5:61:cd:ed:96:92:bc:f3:b4:80:12:85:f5:4b:
         20:27:9b:5f:86:96:3f:dd:a0:ef:c6:24:13:ac:97:37:e2:08:
         ec:83:1d:fc:3f:4f:f6:f5:67:44:d2:ce:07:e2:84:08:52:56:
         c4:1f:ff:86:7f:95:d8:a5:11:ff:59:a5:83:4c:e3:d8:6a:59:
         63:75:36:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----