Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
File:                     LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft (raw, json)
Hash identifier:          aeEWJ1ylyUuqGDzYnqQnt/eMLO2cDc1VeBejoED3bq0=
Subject key identifier:   EE:46:0F:4B:05:59:C2:89:20:05:D0:A5:31:38:0F:48:0A:BA:5F:64
Authority key identifier: 2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
Certificate issuer:       /CN=F3675C2BAF/serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
Certificate serial:       0544
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
Manifest number:          0541
Signing time:             Sat 26 Sep 2026 03:16:40 +0000
Manifest this update:     Sat 26 Sep 2026 03:16:40 +0000
Manifest next update:     Mon 28 Sep 2026 03:16:40 +0000
Files and hashes:         1: LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl (hash: 8WPxpof3ufiN/babxdjT3QRh+y0DnXsEKvPaiKKOAUI=)
                          2: 31E6ED6E5E4A11F0B9EEF8F1DAE4EC9C.roa (hash: wY2O3owjl7AYpJtBNGgcE5jUl65qutwOOti84IXPCgg=)
                          3: 1DE97BC05EEE11F091903BA7DAE4EC9C.roa (hash: jkztufab7AFgPTPNzKYL389qVdTa1kB8Ivx4uvpPTk8=)
                          4: 9AA2C8F4A72111EFAFB5507D762E951A.roa (hash: BkVr0GywD5ne77AbuN3SlJGoFofC7j3OIJUx5FhoLhs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 28 Sep 2026 00:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348 (0x544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675C2BAF, serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
        Validity
            Not Before: Sep 26 03:16:40 2026 GMT
            Not After : Sep 28 03:16:40 2026 GMT
        Subject: CN=6ab73918-f6a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:46:77:bd:66:d5:4f:5e:6f:f5:66:6f:07:6a:
                    04:59:2e:a2:a2:06:8a:86:2b:7e:e9:fd:44:e7:ed:
                    23:46:a7:bb:32:22:bc:88:18:d5:80:5e:fb:b6:bb:
                    90:cd:3b:e0:b9:d4:ae:48:26:11:3b:44:dd:45:0e:
                    71:86:0f:3a:f5:27:9f:2e:04:49:ea:1c:23:27:c6:
                    80:a4:6e:91:c2:34:7f:20:c7:b4:10:1e:36:3f:71:
                    1b:2a:8e:88:5b:18:60:45:ad:f2:f0:24:f2:e5:35:
                    9b:6e:87:56:25:b2:b7:03:ce:e2:4f:2c:8f:19:3d:
                    b2:1c:15:97:68:22:47:3e:6d:8e:d6:ab:60:1b:49:
                    4d:3f:08:59:1f:95:3d:11:ef:ef:5d:ed:3b:6f:82:
                    03:f3:e6:75:f4:bc:b5:1b:20:10:14:bc:e5:6f:42:
                    fb:4d:59:d9:bd:73:26:24:5a:3e:08:0e:9f:a1:3e:
                    bd:45:56:17:55:d6:ba:cb:bb:a1:2a:c8:68:bf:2d:
                    a6:66:a8:e7:b3:d7:d5:f9:57:8f:c3:0c:d3:d5:38:
                    77:b1:4d:8b:e6:1e:86:33:9d:15:fe:13:c7:96:78:
                    21:f5:7e:67:c1:ea:cb:00:42:91:b7:fb:53:6c:fd:
                    b9:1f:c7:eb:ff:4a:47:b3:30:51:ae:7d:1c:da:c5:
                    34:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:46:0F:4B:05:59:C2:89:20:05:D0:A5:31:38:0F:48:0A:BA:5F:64
            X509v3 Authority Key Identifier:
                keyid:2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:64:ec:e7:63:f0:19:75:7f:53:8c:e2:83:2d:66:b3:93:44:
         a3:e1:89:75:3f:81:d5:3f:04:3c:ed:87:ef:a4:92:da:34:50:
         39:e2:76:9c:21:2b:e1:4d:a2:88:fb:0e:5c:28:8f:d6:26:e9:
         10:96:97:8d:9f:2e:45:da:62:91:40:38:76:7c:15:c7:14:29:
         b2:68:d2:dd:b3:64:72:e8:04:f7:64:53:69:db:eb:81:9b:ee:
         8f:c6:0f:be:e0:23:d9:58:25:ca:62:db:35:79:04:6e:23:b5:
         10:07:ca:41:58:d2:c5:f0:11:f3:1b:5e:e7:b7:11:75:6f:12:
         b7:57:7f:66:e0:7e:33:c0:72:dc:1c:ec:8a:58:7f:78:af:73:
         d1:66:45:5c:e7:83:0c:7a:f9:e6:e9:ad:68:73:11:47:3a:62:
         60:73:b6:d0:45:46:80:1c:24:7d:c4:0f:ea:e8:f6:7e:ad:00:
         55:ec:df:a4:f4:bf:57:59:2e:c8:07:08:50:1a:3b:8c:ac:3b:
         af:59:b3:31:63:59:8d:3f:d6:14:d7:ac:6a:c1:8e:69:ad:f0:
         7a:9a:b3:0b:d5:50:ce:9f:23:f6:2f:48:0f:dd:64:34:78:21:
         00:8a:2b:f7:f7:57:57:8a:ad:b9:4c:98:93:44:f5:f5:ad:df:
         37:ea:df:d4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBUQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzVDMkJBRjExMC8GA1UEBRMoMkQ5MUM5RjI1NUMwOTgzNDc0QTRENEM2MEU4RkUw
RUMzMUVFQjdFQTAeFw0yNjA5MjYwMzE2NDBaFw0yNjA5MjgwMzE2NDBaMBgxFjAU
BgNVBAMTDTZhYjczOTE4LWY2YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC6Rne9ZtVPXm/1Zm8HagRZLqKiBoqGK37p/UTn7SNGp7syIryIGNWAXvu2
u5DNO+C51K5IJhE7RN1FDnGGDzr1J58uBEnqHCMnxoCkbpHCNH8gx7QQHjY/cRsq
johbGGBFrfLwJPLlNZtuh1YlsrcDzuJPLI8ZPbIcFZdoIkc+bY7Wq2AbSU0/CFkf
lT0R7+9d7TtvggPz5nX0vLUbIBAUvOVvQvtNWdm9cyYkWj4IDp+hPr1FVhdV1rrL
u6EqyGi/LaZmqOez19X5V4/DDNPVOHexTYvmHoYznRX+E8eWeCH1fmfB6ssAQpG3
+1Ns/bkfx+v/SkezMFGufRzaxTT9AgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU7kYP
SwVZwokgBdClMTgPSAq6X2QwHwYDVR0jBBgwFoAULZHJ8lXAmDR0pNTGDo/g7DHu
t+owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc1QzJCL0M2MTk1NEFBQjgzODExRURCMTcxN0JCMUYxMjIyNDY4L0xaSEo4
bFhBbURSMHBOVEdEb19nN0RIdXQtby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xaSEo4bFhBbURSMHBOVEdEb19nN0RIdXQtby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzVDMkIvQzYxOTU0QUFCODM4MTFFREIxNzE3QkIxRjEy
MjI0NjgvTFpISjhsWEFtRFIwcE5UR0RvX2c3REh1dC1vLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCVZOznY/AZdX9TjOKDLWazk0Sj4Yl1
P4HVPwQ87YfvpJLaNFA54nacISvhTaKI+w5cKI/WJukQlpeNny5F2mKRQDh2fBXH
FCmyaNLds2Ry6AT3ZFNp2+uBm+6Pxg++4CPZWCXKYts1eQRuI7UQB8pBWNLF8BHz
G17ntxF1bxK3V39m4H4zwHLcHOyKWH94r3PRZkVc54MMevnm6a1ocxFHOmJgc7bQ
RUaAHCR9xA/q6PZ+rQBV7N+k9L9XWS7IBwhQGjuMrDuvWbMxY1mNP9YU16xqwY5p
rfB6mrML1VDOnyP2L0gP3WQ0eCEAiiv391dXiq25TJiTRPX1rd836t/U
-----END CERTIFICATE-----