Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
File:                     lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft (raw, json)
Hash identifier:          ZUvvFeawbO448JqpMa0LiRbYAiMFTn5ij0TEejGMh0Q=
Subject key identifier:   02:6B:F8:5B:F2:64:6E:A9:6A:A3:C6:73:FD:EF:2C:35:49:62:34:A7
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Certificate issuer:       /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial:       0139
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
Manifest number:          0138
Signing time:             Mon 20 Oct 2025 04:50:26 +0000
Manifest this update:     Mon 20 Oct 2025 04:50:25 +0000
Manifest next update:     Wed 22 Oct 2025 04:50:25 +0000
Files and hashes:         1: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl (hash: i3UBKx+m8V/T1I8mz4/cLnRu2iL+9xD3prvAAMCsHoU=)
                          2: 5607C3B0BEE211EFA4CEA589762E951A.roa (hash: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 04:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628288AF, serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
        Validity
            Not Before: Oct 20 04:50:25 2025 GMT
            Not After : Oct 22 04:50:25 2025 GMT
        Subject: CN=68f5bf92-7f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4d:3a:31:c1:25:96:0e:6d:ab:fd:e3:97:8a:
                    5c:aa:2a:eb:9b:be:23:cb:d3:85:ef:ca:43:94:6d:
                    4d:ef:ca:d1:f3:ba:e6:ea:90:90:6a:c5:c8:62:a3:
                    56:02:cf:bd:c0:90:84:9a:30:a5:8c:4d:35:be:24:
                    46:ef:f5:54:50:91:b6:e0:b8:c9:63:f3:b8:e9:a7:
                    99:25:e7:53:a3:c2:84:33:bc:68:d9:84:b5:db:ca:
                    bb:70:92:91:0b:1a:6a:d3:c6:d1:37:f8:a7:f8:f8:
                    13:9d:35:1d:d7:b4:c7:ac:e7:ad:28:bc:73:b3:f3:
                    e3:27:8d:4c:56:5c:4d:35:fb:cb:00:aa:e5:57:42:
                    7f:99:e6:7b:48:46:92:0d:c0:93:97:67:f5:a6:88:
                    b8:6a:0b:2e:2f:a4:eb:ad:6e:1b:ca:e3:07:08:1f:
                    8d:8a:8f:ac:17:44:79:36:7f:75:00:31:25:24:9a:
                    c5:04:21:96:80:39:73:31:ff:4b:34:6d:e2:d0:06:
                    ba:4b:cd:ac:44:d7:c4:ac:7b:17:29:e1:e6:54:f7:
                    cd:ac:d6:3e:b8:e7:b2:1e:d6:8d:2e:1e:89:b9:25:
                    33:f6:59:45:e5:4b:3f:76:4f:19:e8:dc:ec:58:0d:
                    c5:37:ec:79:3d:f7:58:32:eb:47:8a:49:87:c6:cc:
                    5f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:6B:F8:5B:F2:64:6E:A9:6A:A3:C6:73:FD:EF:2C:35:49:62:34:A7
            X509v3 Authority Key Identifier:
                keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:06:cf:4e:ef:a4:2c:89:2e:b9:dc:12:b8:bf:0c:f4:db:66:
         a4:bf:64:c1:98:76:12:28:b9:c2:b1:4e:73:37:69:f1:4b:21:
         5c:eb:ce:16:55:5e:dd:ac:2c:5f:b4:b0:69:0d:74:c1:e7:0a:
         42:1b:62:34:85:b6:94:c0:52:34:d6:f3:63:a9:24:e2:7c:5b:
         88:0a:a1:7d:b9:84:1e:d9:11:59:8a:7e:9f:7c:a4:62:e4:32:
         38:c6:f3:96:b0:0a:25:0b:99:36:d5:6e:12:80:50:2d:94:de:
         fd:52:03:b1:f5:f9:7b:c8:d1:1a:8c:bb:69:67:59:ab:86:a4:
         d6:46:5e:e4:44:f8:df:c1:0a:67:96:13:aa:12:85:dc:98:89:
         4e:85:7b:bc:0b:f2:df:e8:c1:d7:c7:e8:1a:3b:c8:71:52:50:
         bb:69:38:9d:16:6f:fa:0d:6d:47:52:14:99:0d:65:54:98:35:
         ca:50:78:c2:c6:7c:8b:b9:90:8e:23:0f:71:97:2a:f5:22:0d:
         03:9d:81:b5:60:40:0c:22:c3:aa:06:50:f6:e3:fd:8a:3c:ad:
         8f:69:d8:ff:04:23:b5:6c:0d:ea:47:b7:6b:d8:54:ce:c0:40:
         95:60:9a:2e:35:df:80:65:b7:e2:7a:16:2f:be:13:b1:73:a4:
         c1:47:10:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 05:14:38 2025 by rpki-client