Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
File:                     LjUlNVWULww8pjeATUbZWgKk-ek.mft (raw, json)
Hash identifier:          wppiNqliR4kiGJ8IkA3Ccjggiz28utz1m5iaxUSXGMg=
Subject key identifier:   F8:98:F2:21:9B:5F:5B:48:46:8F:12:D8:41:31:AE:D0:0E:2C:82:60
Authority key identifier: 2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
Certificate issuer:       /CN=F3627BD6AR/serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
Certificate serial:       0D81
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
Manifest number:          0D7D
Signing time:             Sat 23 Aug 2025 01:03:23 +0000
Manifest this update:     Sat 23 Aug 2025 01:03:22 +0000
Manifest next update:     Mon 25 Aug 2025 01:03:22 +0000
Files and hashes:         1: LjUlNVWULww8pjeATUbZWgKk-ek.crl (hash: EuwHxUXzSfwv0oa6LTkYl+EfcB0AotLjyravutJ/9mg=)
                          2: 6FAF8B00619B11EDB6AEE1D6F1222468.roa (hash: /1/Pa04qpcI/k7X0iybt5AEzlNkplFgiGrqG6zpxJw0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                          rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3457 (0xd81)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627BD6AR, serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
        Validity
            Not Before: Aug 23 01:03:22 2025 GMT
            Not After : Aug 25 01:03:22 2025 GMT
        Subject: CN=68a9135a-7d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e5:a6:c5:5f:78:6c:46:18:4c:c4:c1:df:58:
                    71:25:19:ff:fd:43:cf:0c:09:3a:7e:74:bb:22:59:
                    69:dd:cb:4c:1c:13:5a:6c:cc:72:3b:e9:ee:b0:d5:
                    a8:6c:03:f9:7a:ef:39:49:dc:72:ec:c8:7b:62:b4:
                    92:42:d0:41:fd:e4:45:b8:72:ee:cc:a7:b1:73:c8:
                    fe:67:15:9f:76:40:cf:72:c6:d0:6a:aa:9c:12:3b:
                    a1:2c:64:fc:09:78:45:a7:45:a5:d8:93:a2:65:c2:
                    23:b3:2a:83:5a:a1:8e:36:34:71:8a:6a:fd:ce:24:
                    6b:49:83:cd:ae:40:c3:34:0f:db:0c:d7:e6:00:16:
                    3a:b1:cf:f8:1b:b4:7d:58:ba:a8:84:34:38:f1:31:
                    23:2a:16:d5:60:84:61:d4:94:b4:b6:05:22:f7:94:
                    73:87:46:5a:f1:a4:37:78:19:d4:67:4c:99:bd:02:
                    f5:c6:a6:53:11:29:72:56:a1:d4:f3:97:74:cd:51:
                    22:7a:3d:4c:45:c8:be:7c:2f:e1:47:ce:d5:46:25:
                    20:e6:4d:2d:a2:17:26:cd:ff:e7:49:9a:b0:e0:ac:
                    20:22:0f:88:76:bf:67:2e:28:34:5a:79:f3:8d:ac:
                    4e:1e:eb:3f:51:c2:c8:1f:f6:46:a4:29:a6:a5:58:
                    7a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:98:F2:21:9B:5F:5B:48:46:8F:12:D8:41:31:AE:D0:0E:2C:82:60
            X509v3 Authority Key Identifier:
                keyid:2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:01:0c:e4:29:70:01:50:81:f7:40:f4:81:65:0a:32:f1:c2:
         f1:c4:41:4a:e2:f4:d8:5b:49:97:96:62:37:27:75:e2:b0:41:
         19:01:51:49:73:d8:f9:6a:0b:29:a2:09:ad:06:4b:87:5c:d3:
         43:ce:0c:ad:de:47:b1:1a:2c:93:a9:3b:63:2d:ec:5a:63:31:
         be:09:7c:5f:12:a8:c2:cb:1c:3c:2d:33:d5:45:e3:26:0b:01:
         a1:dc:90:d4:e1:7c:69:4e:d2:17:df:bc:3b:c4:1e:60:b8:3f:
         11:ff:8b:7e:f6:b2:73:c9:aa:04:d8:ac:d0:0c:47:97:8e:3d:
         e4:af:c7:6d:16:d4:f4:27:83:6e:73:a8:f7:3e:1e:a9:61:0b:
         44:54:0e:f5:f4:65:dc:79:d6:68:2a:08:f2:29:8e:fc:f5:9b:
         9f:cf:75:54:2b:da:5e:63:ec:92:b6:86:75:94:b8:52:2f:00:
         3a:34:c5:fc:2a:f7:41:e5:5f:7a:1b:8d:d3:b9:cc:66:f6:17:
         f9:be:8f:bc:54:4f:96:a2:ea:c1:1c:f7:68:dd:39:48:9d:1a:
         17:cf:46:5d:3a:56:49:76:03:18:52:1a:c1:e9:ea:3f:21:47:
         1c:6f:01:86:89:7d:27:49:4f:bf:23:42:9a:be:df:21:12:d7:
         29:81:eb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:31:24 2025 by rpki-client