Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
File:                     kkLGCS_iI5rNMMSPNawbxN313L4.mft (raw, json)
Hash identifier:          2vBH8ETcegfoxn6EG+MB8mpGO4IUFcdeCtSJcEe/yqo=
Subject key identifier:   A0:4A:9D:1F:98:F8:08:8A:4C:08:CA:A7:C2:F1:F6:F7:5F:E5:5C:70
Authority key identifier: 92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE
Certificate issuer:       /CN=F36ECAA2AR/serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
Certificate serial:       052E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
Manifest number:          052C
Signing time:             Fri 14 Aug 2026 03:14:38 +0000
Manifest this update:     Fri 14 Aug 2026 03:14:38 +0000
Manifest next update:     Sun 16 Aug 2026 03:14:38 +0000
Files and hashes:         1: kkLGCS_iI5rNMMSPNawbxN313L4.crl (hash: OZSzGjHRGu4FPwZ6vURITykZumJiVOYPP+/htIlubQQ=)
                          2: 8568E0228A7D11F1B05FC1F0CE1D38B0.roa (hash: m+DW1WbSqUnYVurlM4DfNSJoRuEkj2+yIMkYYUFHOpQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                          rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 16 Aug 2026 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1326 (0x52e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ECAA2AR, serialNumber=9242C6092FE2239ACD30C48F35AC1BC4DDF5DCBE
        Validity
            Not Before: Aug 14 03:14:38 2026 GMT
            Not After : Aug 16 03:14:38 2026 GMT
        Subject: CN=6a7e881e-a27e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:1c:88:ac:dd:34:fe:20:78:90:79:db:36:
                    c6:39:b2:e7:e3:c9:e2:f5:bd:ee:eb:d1:d8:87:79:
                    09:0e:e4:27:5b:1f:74:10:e6:5a:11:fa:da:db:2b:
                    04:98:3c:75:e0:55:ad:ff:82:77:b1:a7:a2:16:24:
                    53:75:ad:eb:6a:4c:3c:2d:a0:f1:0b:3f:a4:6f:a3:
                    3c:ec:9f:74:6c:d3:71:e6:ea:f5:05:dd:cd:12:26:
                    18:4f:31:57:07:1e:63:3b:73:55:5c:ea:f7:1c:40:
                    01:08:4e:fd:74:80:20:bf:c6:c6:8e:5b:be:20:39:
                    79:ce:ac:c1:f0:b4:8e:70:c4:41:20:f6:45:1c:6d:
                    58:b3:ff:79:1b:df:6e:4b:e4:bb:a2:42:c9:77:e0:
                    89:48:f5:29:ba:75:55:6d:9b:2f:8d:f8:7e:ac:c4:
                    28:a3:7c:4d:b8:fc:23:5e:63:de:c2:c9:dd:3f:a9:
                    cb:18:97:6d:42:4c:b4:49:de:ee:24:ed:72:53:59:
                    44:48:64:4e:4c:0e:50:85:a8:5c:c1:86:f1:4b:9d:
                    ab:01:f7:eb:63:2c:b5:1c:2a:a6:d2:5f:14:61:e2:
                    7f:f9:4b:2e:e3:3c:35:ae:bf:c3:a3:d4:c5:5f:f6:
                    1f:6a:cf:1b:9d:dd:31:45:32:53:da:af:77:e5:2e:
                    60:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:4A:9D:1F:98:F8:08:8A:4C:08:CA:A7:C2:F1:F6:F7:5F:E5:5C:70
            X509v3 Authority Key Identifier:
                keyid:92:42:C6:09:2F:E2:23:9A:CD:30:C4:8F:35:AC:1B:C4:DD:F5:DC:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kkLGCS_iI5rNMMSPNawbxN313L4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ECAA2/3C5E0A62A60911EDA2E792B9F1222468/kkLGCS_iI5rNMMSPNawbxN313L4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:db:83:f9:fa:48:55:02:1c:c3:3a:96:e4:22:4d:88:83:45:
         78:96:e0:14:4e:d6:2d:b8:20:71:2d:5c:5b:4d:a9:f2:35:68:
         88:4f:96:46:aa:26:ce:60:8c:82:b2:e8:08:21:17:9e:6b:5a:
         ff:28:5a:d5:81:0e:16:9f:61:99:07:e4:c5:73:40:0c:15:41:
         f8:11:c3:b3:e1:d1:ce:6c:b8:12:3d:7c:52:96:87:8d:b8:84:
         42:3c:2e:6c:31:2c:6a:f9:39:cd:99:67:3e:c1:aa:90:99:5f:
         84:26:6c:87:7f:b5:5a:08:35:a3:15:90:98:01:2b:3b:08:56:
         58:98:22:7c:76:c1:b3:03:c1:a0:db:ce:80:c1:50:b5:6a:ee:
         a2:89:89:56:58:fa:7c:26:38:37:54:dc:ca:ca:1f:19:bf:bd:
         be:5c:1d:6b:6f:3c:fb:5e:96:ce:14:ff:cf:4d:1f:9f:d1:28:
         2c:2c:5f:22:d9:bd:d6:8f:75:c9:5e:25:91:47:57:2f:26:f2:
         a3:c9:c4:ce:53:4f:df:65:a9:06:7e:0d:8f:5a:ff:ab:09:c2:
         9d:26:82:b5:2f:10:17:52:65:1c:49:b9:67:cf:b4:16:03:25:
         a9:fd:8e:96:95:40:15:82:70:06:17:43:aa:c7:85:76:09:ea:
         ee:d3:ae:ea
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBS4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RUNBQTJBUjExMC8GA1UEBRMoOTI0MkM2MDkyRkUyMjM5QUNEMzBDNDhGMzVBQzFC
QzREREY1RENCRTAeFw0yNjA4MTQwMzE0MzhaFw0yNjA4MTYwMzE0MzhaMBgxFjAU
BgNVBAMTDTZhN2U4ODFlLWEyN2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDTBRyIrN00/iB4kHnbNsY5sufjyeL1ve7r0diHeQkO5CdbH3QQ5loR+trb
KwSYPHXgVa3/gnexp6IWJFN1retqTDwtoPELP6Rvozzsn3Rs03Hm6vUF3c0SJhhP
MVcHHmM7c1Vc6vccQAEITv10gCC/xsaOW74gOXnOrMHwtI5wxEEg9kUcbViz/3kb
325L5LuiQsl34IlI9Sm6dVVtmy+N+H6sxCijfE24/CNeY97Cyd0/qcsYl21CTLRJ
3u4k7XJTWURIZE5MDlCFqFzBhvFLnasB9+tjLLUcKqbSXxRh4n/5Sy7jPDWuv8Oj
1MVf9h9qzxud3TFFMlPar3flLmDbAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUoEqd
H5j4CIpMCMqnwvH291/lXHAwHwYDVR0jBBgwFoAUkkLGCS/iI5rNMMSPNawbxN31
3L4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkVDQUEyLzNDNUUwQTYyQTYwOTExRURBMkU3OTJCOUYxMjIyNDY4L2trTEdD
U19pSTVyTk1NU1BOYXdieE4zMTNMNC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2trTEdDU19pSTVyTk1NU1BOYXdieE4zMTNMNC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2RUNBQTIvM0M1RTBBNjJBNjA5MTFFREEyRTc5MkI5RjEyMjI0
Njgva2tMR0NTX2lJNXJOTU1TUE5hd2J4TjMxM0w0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf24P5+khVAhzDOpbkIk2Ig0V4luAUTtYt
uCBxLVxbTanyNWiIT5ZGqibOYIyCsugIIReea1r/KFrVgQ4Wn2GZB+TFc0AMFUH4
EcOz4dHObLgSPXxSloeNuIRCPC5sMSxq+TnNmWc+waqQmV+EJmyHf7VaCDWjFZCY
ASs7CFZYmCJ8dsGzA8Gg286AwVC1au6iiYlWWPp8Jjg3VNzKyh8Zv72+XB1rbzz7
XpbOFP/PTR+f0SgsLF8i2b3Wj3XJXiWRR1cvJvKjycTOU0/fZakGfg2PWv+rCcKd
JoK1LxAXUmUcSblnz7QWAyWp/Y6WlUAVgnAGF0Oqx4V2Ceru067q
-----END CERTIFICATE-----
Generated at Fri Aug 14 16:08:20 2026 by rpki-client