Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
File:                     LQAVTmAKZArDKjKF2c6fxQqUGrM.mft (raw, json)
Hash identifier:          wsWeBgjNs4lsHwztBCsGEiAU1oVz7mjQQkOZZAmbKAM=
Subject key identifier:   E9:21:39:7B:5B:C9:90:BE:A3:00:3F:78:5F:C9:12:26:E9:A3:8B:70
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Certificate issuer:       /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial:       0655
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
Manifest number:          0649
Signing time:             Fri 25 Sep 2026 02:49:28 +0000
Manifest this update:     Fri 25 Sep 2026 02:49:27 +0000
Manifest next update:     Sun 27 Sep 2026 02:49:27 +0000
Files and hashes:         1: LQAVTmAKZArDKjKF2c6fxQqUGrM.crl (hash: xwTmuIW1sR9fJZV/No0puDWkYJ6ngdVJQLzHZCqRqZY=)
                          2: EE9A15528A8211F1A37EA512CF1D38B0.roa (hash: AzLnBRzQnactp0cMa5zQwNt+VVg/VEWOqjXlWWNiXNg=)
                          3: 2B5FFC7E8A8111F181915D05CF1D38B0.roa (hash: 3X5q3nZcQZSHPjyCY6TkppWSebt/r5l7c9ae4Wi3LQQ=)
                          4: 128AAC508A8411F195DD3F18CF1D38B0.roa (hash: I5ngoMtUqqiA/2cRiHgoX7EXQ1nDwLrxP5YhvCneuj4=)
                          5: DC444B408A8011F19C054705CF1D38B0.roa (hash: k4FYTjH5NXMnSmrVz2ArtKhEE11Kq9H0SJzWwEr/K0c=)
                          6: 612001188A8311F1BFD89114CF1D38B0.roa (hash: y9qGRkRTdcSHb8nsU7Rvu5HPtGH7ET36tjw+cdG84s8=)
                          7: C59E93D48A8311F18832D816CF1D38B0.roa (hash: s26EymhvYdDZcz1MZYx8BW0dIXLK2t/H1SxA774dVNo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 27 Sep 2026 02:49:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1621 (0x655)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BC44AF, serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Validity
            Not Before: Sep 25 02:49:27 2026 GMT
            Not After : Sep 27 02:49:27 2026 GMT
        Subject: CN=6ab5e138-13f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:58:5f:7a:5c:c4:51:70:cd:32:d9:0e:07:35:
                    d9:58:95:4f:f8:84:86:0e:8b:7a:9d:9f:39:2d:c9:
                    44:71:23:c3:e3:f1:54:0c:ec:2c:3c:e5:ae:ae:75:
                    e2:63:f8:29:ab:66:42:4b:da:e5:c5:2e:85:d2:f2:
                    c2:40:0f:3a:7b:d5:19:38:19:c7:3a:6a:7a:d7:25:
                    fd:b3:d0:31:e0:49:5a:d5:5c:33:58:7e:0e:36:8a:
                    d9:e7:ca:d1:ac:c4:aa:90:bc:94:0c:ed:1b:21:0f:
                    43:0d:1d:df:ec:71:70:23:b7:49:4f:18:49:06:05:
                    88:a5:d9:00:34:16:b6:b6:e5:8d:c2:06:dd:66:08:
                    c5:13:64:fe:aa:6b:04:e0:74:a7:e3:50:fc:6a:a7:
                    08:5d:b6:d1:18:15:a5:19:52:3a:2c:4b:8a:b5:fb:
                    68:15:28:27:8f:11:9c:c5:7e:b3:c4:70:09:3d:15:
                    43:15:94:ee:50:88:2a:15:b8:72:8b:4d:1e:91:b7:
                    44:7c:3f:11:ed:ad:c7:8c:86:2f:30:5f:9e:c2:f2:
                    26:f9:cc:d9:db:0a:85:5d:c8:53:25:d4:ad:9a:cf:
                    ea:c6:63:1e:fc:25:cb:81:e5:91:5b:21:54:04:09:
                    34:5d:14:bf:ef:93:2f:57:16:c5:fc:24:b8:bc:56:
                    69:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:21:39:7B:5B:C9:90:BE:A3:00:3F:78:5F:C9:12:26:E9:A3:8B:70
            X509v3 Authority Key Identifier:
                keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:16:1f:ff:3d:be:4f:27:7b:7b:9e:a8:dc:4c:0f:93:d9:06:
         39:c7:31:a1:6e:af:b4:3a:59:f7:43:c8:cf:ad:86:c5:85:ad:
         e0:48:27:dd:b3:85:37:df:fb:fb:0b:ef:23:17:5f:3b:68:8f:
         12:55:3e:95:80:88:d6:31:5e:55:45:69:85:0b:43:6a:09:72:
         0c:13:53:17:d3:80:3b:d3:8b:68:44:29:ec:5d:39:50:c6:46:
         02:91:3f:7d:16:e6:f6:52:d6:df:a5:0e:9d:6c:b4:ec:ca:c6:
         1d:63:42:69:85:bb:39:1b:91:2b:01:4e:ac:a3:2d:94:0e:f8:
         27:30:5f:2e:df:8a:e9:66:d5:dc:50:0e:3f:2d:9a:e0:ae:27:
         87:68:a0:52:28:17:f8:4c:87:50:3f:8f:5a:03:ba:d8:f8:bc:
         6e:1b:98:f6:f9:89:47:0c:90:e5:9b:6b:1e:49:3f:39:fa:b5:
         f3:66:d5:22:19:67:39:c1:27:51:1d:36:a4:9e:55:41:92:aa:
         a1:0f:3d:ac:06:8e:4b:f9:ae:95:d7:dc:b6:5f:32:bd:d3:91:
         2a:e1:86:d3:84:0e:06:2d:8b:65:b5:49:18:af:df:60:d6:64:
         34:37:f6:45:17:5d:e5:ae:92:ba:6a:d3:0f:bb:37:aa:9e:0d:
         93:a2:11:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----