Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
File:                     QDrQFAXpeziMuD5pbQudgLuguLg.mft (raw, json)
Hash identifier:          NqV1ISTVndAq6ilFd+NW0UrvMnel9F/CBe4oFjALFjc=
Subject key identifier:   79:A3:99:38:FF:B1:85:06:7A:FB:58:A7:06:8E:00:5A:27:42:34:34
Authority key identifier: 40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Certificate issuer:       /CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Certificate serial:       07AE
Authority info access:    rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
Manifest number:          07AD
Signing time:             Thu 26 Mar 2026 02:19:42 +0000
Manifest this update:     Thu 26 Mar 2026 02:19:41 +0000
Manifest next update:     Sat 28 Mar 2026 02:19:41 +0000
Files and hashes:         1: QDrQFAXpeziMuD5pbQudgLuguLg.crl (hash: D5KFKm43sJID5IOhWusSuXPRzA41hZCLoc+0XMzZcZ0=)
                          2: 2295CF68523711EEB515D05D4AD9E6FC.roa (hash: KlQWt1tn1KH/CPgIYBRda65+Ao1w8Du+dkLesEZUQIQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                          rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:35:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1966 (0x7ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216LA, serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
        Validity
            Not Before: Mar 26 02:19:41 2026 GMT
            Not After : Mar 28 02:19:41 2026 GMT
        Subject: CN=69c497be-3aca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:79:fb:98:28:3a:bb:8b:13:9d:cc:5a:2c:
                    9f:cc:d6:a1:c8:53:13:b6:e4:3c:6e:10:b6:e5:4a:
                    14:a9:d0:63:84:5b:10:26:73:64:24:9a:90:5b:05:
                    48:01:f8:1f:32:12:69:23:a3:e7:ff:26:1c:50:95:
                    d4:ce:b4:72:51:d4:72:d0:13:e4:7a:f1:a0:a9:ac:
                    6d:74:71:30:80:d8:4b:76:64:dc:c0:20:1d:88:a6:
                    e1:88:6a:ae:10:18:42:be:9a:d9:2e:35:c4:fe:2a:
                    6a:7e:d6:0a:a5:78:9f:a6:48:0b:ea:3f:57:c2:e1:
                    ba:74:1e:10:33:75:f0:a3:a1:07:77:2c:34:8a:1f:
                    e6:c6:a8:e3:fa:f4:06:61:26:dc:13:b5:ec:3c:ad:
                    01:e2:2a:4e:00:0f:c4:6a:f9:10:b7:8d:71:e6:d7:
                    dc:68:7e:63:50:45:9f:30:d9:c1:88:49:54:93:68:
                    89:63:c9:0f:cd:40:45:9e:d1:86:54:0f:3e:36:30:
                    ec:3f:7c:49:8b:92:fb:f1:6b:48:f1:46:fb:aa:1e:
                    5d:48:35:33:00:92:79:99:f1:31:56:09:b2:33:23:
                    cc:f4:73:fb:62:66:9e:72:b7:37:19:e7:47:db:58:
                    5d:1c:c0:d2:f6:9c:ec:4b:58:48:d5:72:d9:e0:16:
                    95:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:A3:99:38:FF:B1:85:06:7A:FB:58:A7:06:8E:00:5A:27:42:34:34
            X509v3 Authority Key Identifier:
                keyid:40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:04:ce:d5:f8:fb:36:e6:c2:2a:fb:b3:a6:9d:61:70:e0:58:
         7d:a1:78:11:3f:e7:f5:97:79:3d:7a:36:ee:ea:8d:1a:38:5d:
         cf:f1:bc:69:c4:61:de:e8:86:3d:cb:75:2f:87:29:b4:cb:76:
         3d:37:a5:f8:83:b3:04:84:cb:d0:8a:7b:a5:1f:c6:21:8f:0c:
         65:c0:6c:4f:bd:d9:7d:da:e8:f2:81:7c:6d:21:5e:20:0e:96:
         6d:c1:2f:fe:81:bd:5f:98:f5:99:17:a7:89:b6:71:83:4a:54:
         74:06:71:8f:c7:70:98:20:b3:44:e3:00:f6:9b:5f:3d:9e:83:
         de:12:9d:13:16:a9:0e:54:23:07:72:6d:2a:08:f2:5f:eb:f3:
         ba:5c:9e:3c:a2:7e:c2:c6:99:a1:09:04:2b:63:16:ca:11:aa:
         3b:26:f8:06:ee:95:14:b8:5d:ae:f5:22:90:b7:e6:5d:0d:41:
         15:7d:f5:ed:af:21:3e:93:99:ab:3b:29:55:11:f6:ff:09:76:
         c5:0b:9b:63:61:af:db:8e:06:f6:48:a9:f0:68:f8:3f:24:7d:
         89:10:12:d4:63:35:6e:57:d3:98:64:18:fc:27:90:e2:7a:33:
         a8:3f:3c:5f:d9:17:59:1b:84:3a:0c:ef:62:6c:91:be:cd:3d:
         7c:1e:11:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:11:55 2026 by rpki-client