Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
File:                     1b-H2jRmyC2MbY40473YW8050us.mft (raw, json)
Hash identifier:          sYiFb9lBE83lntl497HdaWF4/L5zHtA7lRiFkSckbfs=
Subject key identifier:   CA:21:B6:3E:12:75:D1:F5:7F:80:F1:52:FA:6D:55:21:4A:EC:C0:09
Authority key identifier: D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Certificate issuer:       /CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
Certificate serial:       107D
Authority info access:    rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Subject info access:      rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
Manifest number:          1074
Signing time:             Wed 23 Sep 2026 00:35:13 +0000
Manifest this update:     Wed 23 Sep 2026 00:35:11 +0000
Manifest next update:     Fri 25 Sep 2026 00:35:11 +0000
Files and hashes:         1: 1b-H2jRmyC2MbY40473YW8050us.crl (hash: RuTbGhPNYX98I7ut/zYymamBHwlw0+fhI4MUcrq5zS0=)
                          2: QDrQFAXpeziMuD5pbQudgLuguLg.cer (hash: ASXr/z3/TFAjN9mGCUeoTFZ5kUKM8GgENaBe5GUyQ0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 00:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4221 (0x107d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=LACNICTOAFRINIC, serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Validity
            Not Before: Sep 23 00:35:11 2026 GMT
            Not After : Sep 25 00:35:11 2026 GMT
        Subject: CN=6ab31ebf-4d58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:94:f7:16:71:7a:eb:5c:e7:8c:20:8e:fd:7a:
                    3a:e1:87:31:e4:3c:f3:0b:e0:aa:0f:b5:b2:3f:2b:
                    38:bd:5d:03:ae:1f:d0:37:69:82:21:d6:71:71:ac:
                    0f:69:af:90:8b:4d:a5:a7:43:da:40:08:1d:46:6e:
                    5c:3c:d7:f5:b6:8d:de:ee:db:2d:ed:af:69:58:8f:
                    81:3f:ca:26:dc:e3:87:c7:cf:c7:98:cc:44:86:50:
                    1b:51:18:8a:eb:3b:aa:b2:0f:00:14:e3:12:dc:ef:
                    e4:5f:95:dc:78:2b:3d:77:c7:45:e0:1f:4d:56:86:
                    f4:78:1f:38:03:fe:46:90:82:f2:1e:2a:27:78:93:
                    a9:2d:95:f4:da:a1:5e:27:69:fa:b3:5d:03:fb:c3:
                    61:24:11:83:5c:8b:57:e1:e1:9b:bc:23:4d:27:19:
                    82:90:b5:44:0c:94:df:36:2d:f3:f9:c8:b8:6c:50:
                    c3:36:4a:5e:30:da:18:f0:a8:72:ed:b5:f4:1d:50:
                    11:70:d7:58:c4:69:66:93:25:98:68:c0:5e:80:a8:
                    e0:c5:36:bc:5a:4a:0c:37:96:ac:d5:1c:fc:3b:48:
                    3c:34:eb:1d:e7:9f:c1:06:71:70:52:f6:fe:51:b0:
                    ee:a6:65:c9:18:61:60:b3:ff:32:6c:79:98:a3:ef:
                    f6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:21:B6:3E:12:75:D1:F5:7F:80:F1:52:FA:6D:55:21:4A:EC:C0:09
            X509v3 Authority Key Identifier:
                keyid:D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:c0:20:1e:11:3c:32:c8:bc:ad:a3:cb:2b:8d:fc:bc:8a:4d:
         89:6f:fd:e1:ba:ed:b0:d8:d8:d0:22:93:e1:78:12:9d:1f:0a:
         55:02:31:ad:5c:e0:13:1f:a9:49:83:3d:9e:4e:b7:73:b1:80:
         f4:07:a5:cc:85:c2:b0:10:ea:31:21:e2:ff:5b:80:bb:3e:7b:
         c0:96:db:a0:60:6f:5f:43:29:d2:d7:8a:92:89:29:50:a4:eb:
         ba:82:c6:dd:50:5b:39:df:76:d1:92:2f:45:be:6e:49:4a:36:
         3a:76:7f:29:67:5a:e8:e3:8c:13:47:0f:c1:84:2e:f9:77:8c:
         1f:86:5c:2f:0e:9c:b1:e6:74:87:3d:b8:f5:54:86:61:4c:21:
         26:34:b7:2b:cf:68:03:40:e6:ba:2e:b7:36:bc:26:e5:d2:75:
         ab:3c:0d:df:96:2f:c2:5e:fd:01:37:7f:41:37:4e:b1:11:7a:
         f8:52:20:b7:6d:cb:0a:c2:75:9d:d1:af:a7:b8:db:fe:14:5d:
         34:ca:8a:cf:95:da:e2:91:7b:a2:be:eb:2f:c3:c6:d9:ca:8d:
         e8:5b:61:e0:ef:7b:9b:7f:98:7b:2b:ef:51:13:37:5e:6d:b8:
         3f:07:de:50:e4:45:e1:81:7c:66:f8:88:bc:ec:3e:d3:d3:c1:
         16:fc:6b:a5
-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgICEH0wDQYJKoZIhvcNAQELBQAwTTEYMBYGA1UEAxMPTEFD
TklDVE9BRlJJTklDMTEwLwYDVQQFEyhENUJGODdEQTM0NjZDODJEOEM2RDhFMzRF
M0JERDg1QkNEMzlEMkVCMB4XDTI2MDkyMzAwMzUxMVoXDTI2MDkyNTAwMzUxMVow
GDEWMBQGA1UEAxMNNmFiMzFlYmYtNGQ1ODCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBANWU9xZxeutc54wgjv16OuGHMeQ88wvgqg+1sj8rOL1dA64f0Ddp
giHWcXGsD2mvkItNpadD2kAIHUZuXDzX9baN3u7bLe2vaViPgT/KJtzjh8fPx5jM
RIZQG1EYius7qrIPABTjEtzv5F+V3HgrPXfHReAfTVaG9HgfOAP+RpCC8h4qJ3iT
qS2V9NqhXidp+rNdA/vDYSQRg1yLV+Hhm7wjTScZgpC1RAyU3zYt8/nIuGxQwzZK
XjDaGPCocu219B1QEXDXWMRpZpMlmGjAXoCo4MU2vFpKDDeWrNUc/DtIPDTrHeef
wQZxcFL2/lGw7qZlyRhhYLP/Mmx5mKPv9nsCAwEAAaOCAlYwggJSMB0GA1UdDgQW
BBTKIbY+EnXR9X+A8VL6bVUhSuzACTAfBgNVHSMEGDAWgBTVv4faNGbILYxtjjTj
vdhbzTnS6zAOBgNVHQ8BAf8EBAMCB4AwWwYDVR0fBFQwUjBQoE6gTIZKcnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbGFjbmljLzFiLUgyalJteUMy
TWJZNDA0NzNZVzgwNTB1cy5jcmwwdgYIKwYBBQUHAQEEajBoMGYGCCsGAQUFBzAC
hlpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS8wNEU4QjBEODBG
NEQxMUUwQjY1N0Q4OTMxMzY3QUU3RC9sYWNuaWMtdG8tYWZyaW5pYy5jZXIwTwYD
VR0gAQH/BEUwQzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jw
a2kuYWZyaW5pYy5uZXQvcG9saWN5L0NQUy5wZGYwgZ8GCCsGAQUFBwELBIGSMIGP
MFYGCCsGAQUFBzALhkpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9y
eS9sYWNuaWMvMWItSDJqUm15QzJNYlk0MDQ3M1lXODA1MHVzLm1mdDA1BggrBgEF
BQcwDYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWww
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEF
ADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAPwCAeETwyyLyto8srjfy8ik2J
b/3huu2w2NjQIpPheBKdHwpVAjGtXOATH6lJgz2eTrdzsYD0B6XMhcKwEOoxIeL/
W4C7PnvAltugYG9fQynS14qSiSlQpOu6gsbdUFs533bRki9Fvm5JSjY6dn8pZ1ro
44wTRw/BhC75d4wfhlwvDpyx5nSHPbj1VIZhTCEmNLcrz2gDQOa6Lrc2vCbl0nWr
PA3fli/CXv0BN39BN06xEXr4UiC3bcsKwnWd0a+nuNv+FF00yorPldrikXuivusv
w8bZyo3oW2Hg73ubf5h7K+9REzdebbg/B95Q5EXhgXxm+Ii87D7T08EW/Gul
-----END CERTIFICATE-----