Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
File:                     lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft (raw, json)
Hash identifier:          xyML31vLApHmARDsWUU1f2k34q+76+UGeWCwbBiQ0GY=
Subject key identifier:   BC:14:95:54:59:D1:1E:39:42:87:09:BD:9B:BE:B4:20:88:41:25:B4
Authority key identifier: 94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F
Certificate issuer:       /CN=F3678120AF/serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
Certificate serial:       18
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
Manifest number:          14
Signing time:             Wed 23 Sep 2026 05:54:06 +0000
Manifest this update:     Wed 23 Sep 2026 05:54:05 +0000
Manifest next update:     Fri 25 Sep 2026 05:54:05 +0000
Files and hashes:         1: lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl (hash: daGtWaWm/Srg+Ss6i9IRQ9vK/WMtDTRJexX36YL9sTM=)
                          2: 283FBF48ABE711F19A2237C3CE1D38B0.roa (hash: qlXe9ToMMBUPUD4aHrT0VkPmkGJ+IKxVVrZ+TC2S6oE=)
                          3: B150BA40ABE611F1A282F4C0CE1D38B0.roa (hash: N+dAXbLJBG8rn1KXTP6prlFDogrJTuX/AgdM1sWu2Xs=)
                          4: 5E55C7C6ABE711F1AC4C05C5CE1D38B0.roa (hash: M8OhoCRyxezZkdhtLD8T2oEZ3sfrS8/jU8st2mVSqts=)
                          5: F2AD0818ABE611F191B005C1CE1D38B0.roa (hash: 8dZYLt8eP39M8BLG9aZ5YDmDaOwnDTF/lzL80thb30g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 25 Sep 2026 05:54:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3678120AF, serialNumber=9433F1D5AFF2A4A3A484039CB04312FA4622D09F
        Validity
            Not Before: Sep 23 05:54:05 2026 GMT
            Not After : Sep 25 05:54:05 2026 GMT
        Subject: CN=6ab3697e-bd86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:92:ed:e1:b0:35:7a:85:3a:c9:17:d6:8f:b1:
                    36:49:ef:cb:84:9f:a5:7c:60:22:25:87:29:c3:61:
                    9c:04:7e:48:72:a8:90:85:d1:e0:81:7a:71:67:25:
                    9b:d5:41:a4:cc:ea:48:ed:04:5c:22:f9:45:da:00:
                    91:26:53:42:11:f8:38:8c:e9:a8:f6:d4:a2:47:ec:
                    f2:41:b0:92:a8:54:d9:1c:78:54:9a:1f:8a:f4:b0:
                    3d:ad:da:9a:29:16:b8:e1:b7:e6:79:ae:16:c8:bc:
                    81:10:cf:71:e7:21:80:7c:a8:ac:63:96:f8:a6:34:
                    4e:4f:b1:cb:9c:23:94:5d:4c:ec:cf:bc:d9:54:69:
                    ac:c1:63:30:95:2a:0e:09:15:9f:66:99:f1:0a:9e:
                    23:c9:92:16:b1:40:95:72:47:30:1e:da:f5:18:c0:
                    43:89:22:88:e2:18:b6:c6:0d:05:b7:e6:ae:b5:10:
                    f9:30:bf:9d:85:6c:21:c5:97:f4:b1:63:39:3f:74:
                    01:4d:7e:61:ab:09:b6:e8:e4:0e:21:4f:36:a9:76:
                    7c:ca:88:64:62:03:ac:32:30:59:33:5d:fb:15:a4:
                    d4:ef:22:c1:be:f0:a0:26:c8:89:d5:19:d4:74:40:
                    f3:8b:2c:f4:1a:59:8c:61:0e:21:3b:93:44:7d:b4:
                    da:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:14:95:54:59:D1:1E:39:42:87:09:BD:9B:BE:B4:20:88:41:25:B4
            X509v3 Authority Key Identifier:
                keyid:94:33:F1:D5:AF:F2:A4:A3:A4:84:03:9C:B0:43:12:FA:46:22:D0:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lDPx1a_ypKOkhAOcsEMS-kYi0J8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3678120/2065EDE6ABE311F1BCFBDDACCE1D38B0/lDPx1a_ypKOkhAOcsEMS-kYi0J8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:47:0b:65:0d:67:50:ed:9b:f7:05:8e:ed:e9:34:c1:a0:f0:
         14:82:1e:cb:d0:15:74:0a:eb:85:6b:83:a3:65:a7:e3:01:80:
         ee:31:21:59:c2:8c:e3:f4:ef:1b:46:c6:4e:69:dd:c3:87:8c:
         59:61:8c:c1:b1:3d:e8:66:9b:e6:ad:a8:d3:3d:21:04:b8:49:
         a8:78:1f:1c:fc:3a:84:ca:cd:b4:cc:13:87:e5:f9:40:79:1c:
         87:d6:44:07:fd:10:49:ef:62:bc:5d:d1:cf:a6:d4:f6:1f:aa:
         40:5a:03:b8:f2:b3:d7:b6:c9:88:bf:66:3a:7b:62:27:16:95:
         a8:68:ef:60:dc:40:45:8e:79:8b:5e:1c:3d:6a:bd:10:50:2d:
         e5:52:ec:7f:60:f4:c6:90:96:ff:16:52:89:6f:39:2c:b8:25:
         05:d0:eb:5f:05:e5:55:42:ee:5a:0f:72:ea:f2:49:89:03:61:
         3f:59:65:03:a3:39:97:7b:6a:fa:6a:e6:a2:67:25:84:46:6b:
         fe:3c:d1:e2:10:df:6e:9d:ff:a7:6c:bb:d0:ed:a8:74:7f:c4:
         e4:c9:7b:76:40:03:87:64:93:34:00:37:b9:30:d2:89:80:c7:
         4d:d1:99:6c:d2:b3:1e:31:fb:4c:e7:c8:90:a8:24:23:2c:36:
         1b:8b:34:d4
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBGDANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY3
ODEyMEFGMTEwLwYDVQQFEyg5NDMzRjFENUFGRjJBNEEzQTQ4NDAzOUNCMDQzMTJG
QTQ2MjJEMDlGMB4XDTI2MDkyMzA1NTQwNVoXDTI2MDkyNTA1NTQwNVowGDEWMBQG
A1UEAxMNNmFiMzY5N2UtYmQ4NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAMyS7eGwNXqFOskX1o+xNknvy4SfpXxgIiWHKcNhnAR+SHKokIXR4IF6cWcl
m9VBpMzqSO0EXCL5RdoAkSZTQhH4OIzpqPbUokfs8kGwkqhU2Rx4VJofivSwPa3a
mikWuOG35nmuFsi8gRDPcechgHyorGOW+KY0Tk+xy5wjlF1M7M+82VRprMFjMJUq
DgkVn2aZ8QqeI8mSFrFAlXJHMB7a9RjAQ4kiiOIYtsYNBbfmrrUQ+TC/nYVsIcWX
9LFjOT90AU1+YasJtujkDiFPNql2fMqIZGIDrDIwWTNd+xWk1O8iwb7woCbIidUZ
1HRA84ss9BpZjGEOITuTRH202jkCAwEAAaOCArgwggK0MB0GA1UdDgQWBBS8FJVU
WdEeOUKHCb2bvrQgiEEltDAfBgNVHSMEGDAWgBSUM/HVr/Kko6SEA5ywQxL6RiLQ
nzAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2NzgxMjAvMjA2NUVERTZBQkUzMTFGMUJDRkJEREFDQ0UxRDM4QjAvbERQeDFh
X3lwS09raEFPY3NFTVMta1lpMEo4LmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvbERQeDFhX3lwS09raEFPY3NFTVMta1lpMEo4LmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY3ODEyMC8yMDY1RURFNkFCRTMxMUYxQkNGQkREQUNDRTFE
MzhCMC9sRFB4MWFfeXBLT2toQU9jc0VNUy1rWWkwSjgubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAIVHC2UNZ1Dtm/cFju3pNMGg8BSCHsvQ
FXQK64Vrg6Nlp+MBgO4xIVnCjOP07xtGxk5p3cOHjFlhjMGxPehmm+atqNM9IQS4
Sah4Hxz8OoTKzbTME4fl+UB5HIfWRAf9EEnvYrxd0c+m1PYfqkBaA7jys9e2yYi/
Zjp7YicWlaho72DcQEWOeYteHD1qvRBQLeVS7H9g9MaQlv8WUolvOSy4JQXQ618F
5VVC7loPcurySYkDYT9ZZQOjOZd7avpq5qJnJYRGa/480eIQ326d/6dsu9DtqHR/
xOTJe3ZAA4dkkzQAN7kw0omAx03RmWzSsx4x+0znyJCoJCMsNhuLNNQ=
-----END CERTIFICATE-----