Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
File:                     LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft (raw, json)
Hash identifier:          4s+Su4orjGGELod0c0X+R4ulDNwE+oJkgxT/K63q7Bo=
Subject key identifier:   01:BE:CA:CB:ED:32:86:BC:46:8A:F4:D5:4C:2E:43:A2:90:95:78:A3
Authority key identifier: 2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA
Certificate issuer:       /CN=F3675C2BAF/serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
Certificate serial:       03EB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
Manifest number:          03E8
Signing time:             Mon 20 Oct 2025 03:22:17 +0000
Manifest this update:     Mon 20 Oct 2025 03:22:17 +0000
Manifest next update:     Wed 22 Oct 2025 03:22:17 +0000
Files and hashes:         1: LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl (hash: IK49MANtNIySiXHfsBfhNfS/hBGZmWJEr9lDUhzxcCI=)
                          2: 31E6ED6E5E4A11F0B9EEF8F1DAE4EC9C.roa (hash: wY2O3owjl7AYpJtBNGgcE5jUl65qutwOOti84IXPCgg=)
                          3: 1DE97BC05EEE11F091903BA7DAE4EC9C.roa (hash: jkztufab7AFgPTPNzKYL389qVdTa1kB8Ivx4uvpPTk8=)
                          4: 9AA2C8F4A72111EFAFB5507D762E951A.roa (hash: BkVr0GywD5ne77AbuN3SlJGoFofC7j3OIJUx5FhoLhs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1003 (0x3eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3675C2BAF, serialNumber=2D91C9F255C0983474A4D4C60E8FE0EC31EEB7EA
        Validity
            Not Before: Oct 20 03:22:17 2025 GMT
            Not After : Oct 22 03:22:17 2025 GMT
        Subject: CN=68f5aae9-14fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7a:65:4b:0a:36:d4:30:b1:2b:2a:4e:35:86:
                    ce:fe:f9:ce:d7:e1:f2:ea:2a:5b:b0:df:1f:6e:23:
                    7d:84:6c:0f:81:1f:ac:d8:b6:f8:e2:88:60:30:bb:
                    2c:25:00:2a:ae:1a:d4:ae:11:7d:50:fd:bd:0b:35:
                    a3:dc:76:21:76:19:f0:73:f5:97:38:87:7d:86:16:
                    e4:f0:b4:37:81:d9:03:74:24:88:a9:1b:4c:de:e9:
                    47:fc:03:47:81:c3:48:71:d0:14:68:42:7f:03:05:
                    6f:8d:9a:46:0a:f6:9e:a3:3d:53:84:f1:7f:64:ab:
                    cc:ec:1b:d5:22:33:be:02:81:bd:48:f4:05:4b:c5:
                    1f:3e:60:d7:e0:2d:62:76:b6:06:25:1d:6d:cf:1c:
                    b6:5b:2e:a2:3c:d5:be:8e:df:f4:b2:86:42:8d:67:
                    f5:75:f1:f6:66:61:dc:e9:0a:32:36:47:4a:b7:ae:
                    ae:f6:bf:43:f8:ab:2c:cd:76:55:90:e7:3c:82:ef:
                    d1:6a:64:94:1a:be:2b:3d:bd:8a:1c:e6:e4:4e:89:
                    06:f5:54:28:78:41:df:d1:2a:dd:50:aa:0f:35:fa:
                    0f:e3:59:4d:68:5a:34:ac:ff:79:04:e1:cd:56:b1:
                    2f:e6:8e:ef:78:aa:8a:fb:b1:82:b9:16:25:e1:e5:
                    8a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BE:CA:CB:ED:32:86:BC:46:8A:F4:D5:4C:2E:43:A2:90:95:78:A3
            X509v3 Authority Key Identifier:
                keyid:2D:91:C9:F2:55:C0:98:34:74:A4:D4:C6:0E:8F:E0:EC:31:EE:B7:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LZHJ8lXAmDR0pNTGDo_g7DHut-o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3675C2B/C61954AAB83811EDB1717BB1F1222468/LZHJ8lXAmDR0pNTGDo_g7DHut-o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:ba:20:63:85:f5:23:19:c1:27:f9:5b:80:bf:ff:fd:f1:4b:
         81:4d:85:24:1d:25:ec:c1:b0:8b:d7:17:93:7b:b3:b3:d3:f4:
         30:ab:a3:ce:7d:d0:dd:c0:77:50:f4:80:27:c1:50:fc:f3:a8:
         ee:88:51:94:26:fa:99:bc:c8:70:97:80:ff:cf:6c:63:d8:75:
         e4:b8:4d:55:b2:09:28:a9:79:86:83:04:65:c0:aa:25:b2:4c:
         50:10:80:ad:3c:6a:76:c8:22:c7:42:f8:ab:a2:51:f6:e9:b5:
         ae:2a:90:c6:e8:a6:73:d5:7d:d6:2f:0a:6d:34:9c:bd:8f:01:
         ee:04:0c:01:4d:ed:e0:c7:eb:8a:ea:0f:21:13:e9:b7:38:da:
         82:77:16:a8:e1:26:97:0c:b1:2e:7b:55:42:b2:75:53:da:8e:
         40:70:01:f8:bd:d7:18:d2:d0:43:b4:dc:a0:66:6f:29:28:4a:
         e4:09:71:a5:8a:32:52:80:33:bf:4b:49:a8:52:ba:42:7a:c8:
         c7:bd:7e:94:a3:53:84:37:fd:13:ab:c1:3a:b9:1e:cb:8f:7e:
         ed:08:6e:00:ff:a5:42:58:48:23:a0:fc:fc:56:39:1c:76:d8:
         56:9c:b6:52:2a:4e:b3:cd:b5:16:39:ef:50:5d:d8:ac:c2:f1:
         54:8c:a6:cb
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA+swDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NzVDMkJBRjExMC8GA1UEBRMoMkQ5MUM5RjI1NUMwOTgzNDc0QTRENEM2MEU4RkUw
RUMzMUVFQjdFQTAeFw0yNTEwMjAwMzIyMTdaFw0yNTEwMjIwMzIyMTdaMBgxFjAU
BgNVBAMTDTY4ZjVhYWU5LTE0ZmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC+emVLCjbUMLErKk41hs7++c7X4fLqKluw3x9uI32EbA+BH6zYtvjiiGAw
uywlACquGtSuEX1Q/b0LNaPcdiF2GfBz9Zc4h32GFuTwtDeB2QN0JIipG0ze6Uf8
A0eBw0hx0BRoQn8DBW+NmkYK9p6jPVOE8X9kq8zsG9UiM74Cgb1I9AVLxR8+YNfg
LWJ2tgYlHW3PHLZbLqI81b6O3/SyhkKNZ/V18fZmYdzpCjI2R0q3rq72v0P4qyzN
dlWQ5zyC79FqZJQavis9vYoc5uROiQb1VCh4Qd/RKt1Qqg81+g/jWU1oWjSs/3kE
4c1WsS/mju94qor7sYK5FiXh5YrxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAb7K
y+0yhrxGivTVTC5DopCVeKMwHwYDVR0jBBgwFoAULZHJ8lXAmDR0pNTGDo/g7DHu
t+owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc1QzJCL0M2MTk1NEFBQjgzODExRURCMTcxN0JCMUYxMjIyNDY4L0xaSEo4
bFhBbURSMHBOVEdEb19nN0RIdXQtby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xaSEo4bFhBbURSMHBOVEdEb19nN0RIdXQtby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2NzVDMkIvQzYxOTU0QUFCODM4MTFFREIxNzE3QkIxRjEy
MjI0NjgvTFpISjhsWEFtRFIwcE5UR0RvX2c3REh1dC1vLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCSuiBjhfUjGcEn+VuAv//98UuBTYUk
HSXswbCL1xeTe7Oz0/Qwq6POfdDdwHdQ9IAnwVD886juiFGUJvqZvMhwl4D/z2xj
2HXkuE1VsgkoqXmGgwRlwKolskxQEICtPGp2yCLHQvirolH26bWuKpDG6KZz1X3W
LwptNJy9jwHuBAwBTe3gx+uK6g8hE+m3ONqCdxao4SaXDLEue1VCsnVT2o5AcAH4
vdcY0tBDtNygZm8pKErkCXGlijJSgDO/S0moUrpCesjHvX6Uo1OEN/0Tq8E6uR7L
j37tCG4A/6VCWEgjoPz8VjkcdthWnLZSKk6zzbUWOe9QXdiswvFUjKbL
-----END CERTIFICATE-----
Generated at Tue Oct 21 00:58:31 2025 by rpki-client