Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
File:                     QDrQFAXpeziMuD5pbQudgLuguLg.mft (raw, json)
Hash identifier:          WJFXJ2khSVneMP+sH8/F8dazPqMdI4TZCIus24cWsQs=
Subject key identifier:   D3:C0:01:51:7F:D5:57:1D:95:1A:12:78:E9:83:74:D7:CC:73:C3:E2
Authority key identifier: 40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Certificate issuer:       /CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Certificate serial:       070D
Authority info access:    rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
Manifest number:          070C
Signing time:             Mon 20 Oct 2025 02:05:25 +0000
Manifest this update:     Mon 20 Oct 2025 02:05:24 +0000
Manifest next update:     Wed 22 Oct 2025 02:05:24 +0000
Files and hashes:         1: QDrQFAXpeziMuD5pbQudgLuguLg.crl (hash: 9LdjpDmjCdVRdmkDoD9qqhyx/j6gxSeI0GbVJvYJwWc=)
                          2: 2295CF68523711EEB515D05D4AD9E6FC.roa (hash: KlQWt1tn1KH/CPgIYBRda65+Ao1w8Du+dkLesEZUQIQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                          rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:35:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1805 (0x70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216LA, serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
        Validity
            Not Before: Oct 20 02:05:24 2025 GMT
            Not After : Oct 22 02:05:24 2025 GMT
        Subject: CN=68f598e5-e6f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:15:f3:73:d1:da:f2:b2:27:48:2c:5c:be:
                    af:d9:0f:99:c5:cd:05:8e:29:37:9c:d0:30:09:10:
                    e8:ca:fb:ac:6c:86:cf:f4:87:3f:e4:14:1a:d9:3a:
                    24:33:fd:ee:81:00:1a:54:e8:72:c8:2a:b7:11:fe:
                    bf:ed:66:e9:fe:0b:3d:a2:99:0b:aa:09:a3:42:af:
                    db:88:aa:68:92:43:71:1b:fc:5c:2a:f0:8e:94:08:
                    7d:b5:44:0b:40:cd:59:6e:42:67:3f:50:ac:e1:05:
                    08:36:7c:77:df:03:54:cc:30:98:f5:21:9a:e6:e8:
                    83:4d:82:9c:11:77:aa:25:f0:0b:b0:cb:88:fc:65:
                    56:eb:c3:57:d9:f0:b3:5a:e8:c5:26:2b:67:2d:65:
                    9d:a8:50:f3:41:06:0a:62:e6:49:e6:da:f0:06:83:
                    45:48:41:ce:0b:72:71:87:bc:f3:19:7d:47:2f:03:
                    98:60:2f:7b:8d:a4:d0:87:be:03:58:12:47:1b:7b:
                    a0:0a:fb:84:11:8e:42:48:66:5a:6c:1c:16:ca:58:
                    d7:07:7b:26:26:36:67:f1:bb:83:b0:39:34:b4:85:
                    d9:b4:04:f7:a0:52:56:74:c6:27:56:94:c7:b8:6d:
                    05:54:3d:b8:28:35:d8:83:3b:4d:20:99:67:b2:76:
                    35:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C0:01:51:7F:D5:57:1D:95:1A:12:78:E9:83:74:D7:CC:73:C3:E2
            X509v3 Authority Key Identifier:
                keyid:40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:18:57:1f:99:8e:45:24:ee:10:27:b6:42:d9:02:7c:29:77:
         f5:8d:7b:ca:a0:b2:f3:04:6e:1e:c8:b3:97:bc:c1:b1:71:f8:
         0f:95:b8:2f:0d:e7:bc:0e:98:21:bc:4e:ad:40:79:d9:17:2d:
         2c:0d:a4:21:a7:c1:16:89:43:db:d5:09:4d:65:0f:2f:11:c1:
         c6:1d:e0:87:0f:ec:d5:78:44:18:48:39:1e:06:d8:8a:b9:e6:
         4c:07:ae:55:5e:23:68:c6:20:9e:21:3d:03:fb:f4:9d:12:c5:
         a3:e8:70:1d:b6:6f:74:ae:1d:5b:30:c3:54:b7:96:95:34:12:
         c1:85:04:4a:e3:8e:e9:a5:f3:86:20:e0:a1:f6:eb:0d:83:87:
         d1:15:c6:8c:e6:de:9a:3c:f8:c4:7d:6a:b5:70:e3:91:ce:23:
         48:58:0c:9e:8e:21:e1:ce:a1:cf:04:a4:1f:d7:3f:89:38:0d:
         76:db:36:af:dc:b7:d1:7e:98:9b:9a:96:d4:2a:8d:99:8b:fc:
         94:82:30:9a:b5:48:94:bf:40:8c:c2:b2:01:d3:96:8b:34:a7:
         4b:d9:de:2f:f8:67:48:51:9b:1c:df:dc:80:b5:e5:98:d6:6d:
         9e:68:3f:d5:d8:d2:81:5b:95:8f:7e:45:46:53:eb:f4:ed:9e:
         8b:28:a3:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:54:44 2025 by rpki-client