Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File:                     lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier:          9rD2c57BcaRlQDmPrUQ+xEoUzWqTamAIJ9GeK3rXm1k=
Subject key identifier:   8A:2E:7B:04:B3:DD:F9:4D:BC:4D:20:14:E3:E7:8C:A0:F8:DB:21:4B
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer:       /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial:       094D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number:          0949
Signing time:             Sun 19 Oct 2025 01:30:52 +0000
Manifest this update:     Sun 19 Oct 2025 01:30:52 +0000
Manifest next update:     Tue 21 Oct 2025 01:30:52 +0000
Files and hashes:         1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: DtqPL+QN24uyX6yn2dzhrf1Knmpw90oeDvbvlOFWwh4=)
                          2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
                          3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
                          4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
                          5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2381 (0x94d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Validity
            Not Before: Oct 19 01:30:52 2025 GMT
            Not After : Oct 21 01:30:52 2025 GMT
        Subject: CN=68f43f4c-f1e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:f5:aa:1b:b0:7b:7f:88:ec:4d:e2:98:a7:
                    ad:dc:1a:d1:ce:45:dd:ea:4b:54:fb:c7:97:ca:17:
                    88:e8:26:28:07:5b:ae:55:c9:38:96:cf:61:f1:38:
                    ca:03:e6:d4:8a:55:99:e3:c4:f8:a4:26:b2:70:c9:
                    a5:89:7c:e0:9e:5f:9b:b5:a4:ab:29:06:80:1e:10:
                    96:1b:bf:d9:e4:64:8e:83:2c:54:1a:5e:36:24:46:
                    02:4f:d4:03:dc:7b:33:87:5d:95:76:00:b2:c0:50:
                    59:0f:de:ab:b4:54:28:56:46:a3:4e:94:ed:b9:95:
                    1f:ea:4a:4f:35:28:d4:19:26:88:24:af:19:27:b4:
                    63:f6:d2:07:10:34:27:10:24:72:86:ac:16:f3:0d:
                    3e:64:f3:62:aa:5b:e4:2a:ed:37:9d:f8:fb:29:4e:
                    e5:fa:75:ae:f2:5d:6a:f8:6e:48:41:86:c2:1e:40:
                    a1:13:d8:fd:59:a9:9f:46:8f:31:31:49:63:04:c6:
                    05:b2:eb:7d:dc:f0:cf:fa:1b:ea:2f:86:e9:a5:83:
                    fb:44:bc:01:23:dc:25:5a:29:c9:5b:21:d4:49:56:
                    ec:21:a5:56:bf:10:d1:0f:68:09:17:f9:77:1b:0c:
                    de:91:7b:44:f5:b9:2a:22:d7:f0:f1:b3:c9:49:fa:
                    6d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2E:7B:04:B3:DD:F9:4D:BC:4D:20:14:E3:E7:8C:A0:F8:DB:21:4B
            X509v3 Authority Key Identifier:
                keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:0d:1b:83:73:14:20:90:c1:37:17:7c:6b:23:56:ab:1c:fb:
         d6:bd:7e:06:9b:b9:5c:b6:c3:63:20:89:fd:3a:0f:5c:f4:db:
         1f:6c:66:7c:8f:dc:f1:a1:5f:af:23:7e:ce:0d:02:c4:dc:a7:
         af:f5:e7:c6:b0:9d:81:79:aa:c5:d6:0d:79:2f:33:f3:2d:36:
         53:a6:3d:00:bc:08:c4:1f:90:d1:e1:5d:b4:d8:2e:24:1f:65:
         6b:08:84:0f:8f:1a:19:1e:41:43:ee:6a:7c:62:8c:d0:c1:d4:
         87:b6:53:3d:99:d2:de:d1:93:5c:1b:7f:da:f5:91:dd:78:44:
         d6:e7:d9:f7:44:8c:03:7a:83:df:52:cd:10:8d:6d:b7:0d:72:
         b5:f5:36:75:7d:ed:aa:3f:37:63:e5:dd:9c:07:d9:89:33:86:
         11:b6:50:b6:da:4f:56:29:07:16:0d:01:d0:22:68:df:6e:e8:
         3e:9d:7b:a0:19:4e:49:b7:28:78:e0:b9:71:5f:1e:b6:4b:26:
         b0:b2:bd:af:9b:14:ff:79:20:e0:5f:b0:17:70:35:5e:99:87:
         72:86:fc:0f:90:a8:24:90:a2:18:18:4b:16:00:dd:8e:ce:c2:
         99:8a:9a:7c:04:03:f2:b5:5d:cf:cb:ac:8d:af:c5:77:cf:2d:
         48:3d:55:51
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCU0wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk1QzRBRjExMC8GA1UEBRMoOTU0QUI4OEFFNDk0OEE5Qjc1MTc3REVFNjU3RkFC
NEU2RTBDNTc4QTAeFw0yNTEwMTkwMTMwNTJaFw0yNTEwMjEwMTMwNTJaMBgxFjAU
BgNVBAMTDTY4ZjQzZjRjLWYxZTEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDbnvWqG7B7f4jsTeKYp63cGtHORd3qS1T7x5fKF4joJigHW65VyTiWz2Hx
OMoD5tSKVZnjxPikJrJwyaWJfOCeX5u1pKspBoAeEJYbv9nkZI6DLFQaXjYkRgJP
1APcezOHXZV2ALLAUFkP3qu0VChWRqNOlO25lR/qSk81KNQZJogkrxkntGP20gcQ
NCcQJHKGrBbzDT5k82KqW+Qq7Ted+PspTuX6da7yXWr4bkhBhsIeQKET2P1ZqZ9G
jzExSWMExgWy633c8M/6G+ovhumlg/tEvAEj3CVaKclbIdRJVuwhpVa/ENEPaAkX
+XcbDN6Re0T1uSoi1/Dxs8lJ+m3dAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUii57
BLPd+U28TSAU4+eMoPjbIUswHwYDVR0jBBgwFoAUlUq4iuSUipt1F33uZX+rTm4M
V4owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NUM0L0Q2MDM5OTA0OTFFRDExRTk4NDFENUE3REY4QUVBMjI4L2xVcTRp
dVNVaXB0MUYzM3VaWC1yVG00TVY0by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xVcTRpdVNVaXB0MUYzM3VaWC1yVG00TVY0by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Nzk1QzQvRDYwMzk5MDQ5MUVEMTFFOTg0MUQ1QTdERjhB
RUEyMjgvbFVxNGl1U1VpcHQxRjMzdVpYLXJUbTRNVjRvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRDRuDcxQgkME3F3xrI1arHPvWvX4G
m7lctsNjIIn9Og9c9NsfbGZ8j9zxoV+vI37ODQLE3Kev9efGsJ2BearF1g15LzPz
LTZTpj0AvAjEH5DR4V202C4kH2VrCIQPjxoZHkFD7mp8YozQwdSHtlM9mdLe0ZNc
G3/a9ZHdeETW59n3RIwDeoPfUs0QjW23DXK19TZ1fe2qPzdj5d2cB9mJM4YRtlC2
2k9WKQcWDQHQImjfbug+nXugGU5Jtyh44LlxXx62Syawsr2vmxT/eSDgX7AXcDVe
mYdyhvwPkKgkkKIYGEsWAN2OzsKZipp8BAPytV3Py6yNr8V3zy1IPVVR
-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:42 2025 by rpki-client