Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
File:                     LjUlNVWULww8pjeATUbZWgKk-ek.mft (raw, json)
Hash identifier:          43OvxMo4hRRAMOky7zx5DqZ24tKX5YsuaPm68ZZTkLw=
Subject key identifier:   0B:1B:01:95:07:B8:D0:FD:64:2D:23:03:92:C9:F0:56:0D:E9:CA:2E
Authority key identifier: 2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
Certificate issuer:       /CN=F3627BD6AR/serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
Certificate serial:       0DBB
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
Manifest number:          0DB7
Signing time:             Mon 20 Oct 2025 01:02:49 +0000
Manifest this update:     Mon 20 Oct 2025 01:02:48 +0000
Manifest next update:     Wed 22 Oct 2025 01:02:48 +0000
Files and hashes:         1: LjUlNVWULww8pjeATUbZWgKk-ek.crl (hash: cmQKAqze+4OcYnmWWDa7kIEeu1dfltUPYHZ3pBUj/+k=)
                          2: 6FAF8B00619B11EDB6AEE1D6F1222468.roa (hash: /1/Pa04qpcI/k7X0iybt5AEzlNkplFgiGrqG6zpxJw0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                          rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3515 (0xdbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627BD6AR, serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
        Validity
            Not Before: Oct 20 01:02:48 2025 GMT
            Not After : Oct 22 01:02:48 2025 GMT
        Subject: CN=68f58a38-d7e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f3:ce:55:e5:03:5e:91:6e:01:49:63:82:f6:
                    b4:95:d8:7c:e3:bb:9c:9c:85:88:aa:aa:1d:c5:bb:
                    51:f0:31:da:41:2f:24:08:49:47:4b:6a:b4:18:96:
                    8a:8e:63:65:aa:d5:b7:40:aa:7b:ae:09:bf:7f:81:
                    1e:67:92:92:fc:81:1c:e9:29:8a:eb:e7:e9:9b:40:
                    65:d6:c0:85:3d:09:e6:ba:16:63:e8:18:e6:f1:06:
                    24:25:0a:7a:20:a0:0f:ce:1f:a3:06:fd:38:09:e9:
                    52:96:83:3f:2f:d4:90:0d:8b:3c:bf:05:71:17:c1:
                    5e:c9:1b:e9:17:f2:f1:58:18:21:c4:1b:fa:d8:92:
                    ae:dc:2c:9a:fa:b6:43:d7:5d:4c:42:85:ad:67:1c:
                    0e:39:ee:93:fb:ce:78:bc:8c:51:da:c1:e8:6c:7e:
                    66:4c:50:9f:84:c5:db:0a:ca:b2:84:12:f7:f3:3d:
                    7e:77:41:e7:2a:7d:e2:79:f2:df:13:e5:0f:0d:c6:
                    13:26:a5:c1:b4:8f:2d:a5:a3:9a:a6:45:1f:df:37:
                    e0:06:0a:db:7c:8f:8a:53:4f:d6:cb:7e:81:65:8a:
                    8c:32:0f:b9:79:a0:3b:61:56:af:7c:c3:d1:8f:6f:
                    11:48:2c:6a:46:8b:ec:f6:2a:a9:de:5b:58:6c:69:
                    58:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:1B:01:95:07:B8:D0:FD:64:2D:23:03:92:C9:F0:56:0D:E9:CA:2E
            X509v3 Authority Key Identifier:
                keyid:2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:fb:88:e0:17:4f:92:84:c9:03:f6:51:0a:20:b8:67:e0:91:
         73:54:ca:0b:c9:fb:5b:f1:e6:66:2a:a2:1a:f3:db:00:e5:9f:
         5f:da:27:57:94:76:51:be:33:59:b4:26:37:02:cb:3f:ae:2f:
         bc:1c:07:82:5f:e5:08:ea:7b:e7:11:cf:aa:3c:2d:39:a8:c6:
         02:42:b6:60:a2:9f:b3:b6:3a:78:ba:6b:f4:98:04:b4:62:45:
         bf:03:a2:c8:8d:d1:de:03:72:59:99:83:cb:3b:69:40:94:38:
         b4:57:a3:f3:a2:9e:ca:4d:d4:66:92:9f:5a:e6:88:fd:44:0c:
         d1:71:46:c5:29:e6:b1:f0:2c:fc:f4:fb:ec:69:f4:0d:5a:85:
         2e:36:fe:6d:a7:43:8e:85:ee:cc:0b:0d:f2:85:08:27:a2:ce:
         58:cc:af:da:b0:9c:73:dd:30:01:26:f2:40:7d:94:b1:c5:19:
         75:62:3a:cc:84:64:21:16:b1:d4:d4:1e:8b:07:a3:46:88:ef:
         b4:a5:1a:9d:21:1a:ba:af:5a:36:16:f9:f2:c6:b3:c4:27:0a:
         c2:2a:b8:36:59:09:4f:f4:14:2c:38:f7:f7:ed:e1:d5:9f:9a:
         ec:e4:2f:a1:70:a5:13:8c:e4:8b:ec:71:af:b4:51:a6:0b:bf:
         dc:c2:b5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:01:21 2025 by rpki-client