Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          0VXgDDkjQ3wtXDhorDVJFL6rXC8Nor+leB8RFeNm6cc=
Subject key identifier:   90:F6:E8:50:57:94:D2:96:E4:04:A8:F0:CE:E9:D6:F3:4B:63:31:27
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       021E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          021D
Signing time:             Sat 23 Aug 2025 04:23:45 +0000
Manifest this update:     Sat 23 Aug 2025 04:23:44 +0000
Manifest next update:     Mon 25 Aug 2025 04:23:44 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: WmDHHotWmP8qgA4u9gRVI1X5UBnKM268JbibWjGOM/k=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 542 (0x21e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF, serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: Aug 23 04:23:44 2025 GMT
            Not After : Aug 25 04:23:44 2025 GMT
        Subject: CN=68a94251-8e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:fc:ab:71:fd:3e:63:60:3a:33:51:80:e0:bb:
                    83:9b:fe:62:83:c9:5e:d7:dc:cb:e8:66:73:d8:f5:
                    48:56:e5:63:27:08:00:fd:4b:98:4d:47:68:0f:ba:
                    02:be:32:40:74:9d:2b:c5:2b:7c:73:b3:fb:a5:4b:
                    d3:e3:ed:37:34:2e:92:6c:f4:f7:09:4b:10:59:2d:
                    0c:6f:b3:de:61:0d:5e:11:7b:d3:32:e7:b9:89:55:
                    5a:25:4d:65:20:f7:70:54:68:f8:db:f7:3e:e9:e9:
                    ff:e4:c9:c2:00:62:be:b5:45:71:79:3d:40:ca:38:
                    3c:9c:91:52:27:12:ac:f2:33:32:34:8f:f6:cc:00:
                    59:95:2e:43:ab:a7:77:7e:57:29:27:25:04:b2:f5:
                    4d:42:de:cb:ec:37:fa:77:80:3e:c2:3d:45:06:cb:
                    92:4f:5a:be:6f:f9:ee:d0:29:d7:35:d7:3a:17:72:
                    78:4e:c7:49:78:ef:a4:8c:a9:65:e9:58:38:e7:5b:
                    f8:ac:d7:53:c8:13:98:df:1b:68:a2:d8:3f:85:7a:
                    33:bc:a9:f8:11:59:9a:09:a5:b4:1a:0a:e7:9b:23:
                    8e:32:89:c4:d6:13:95:e1:8f:53:f7:07:2b:12:2f:
                    8d:ba:3a:b8:b2:9d:6e:90:7f:b9:d8:6e:a4:49:10:
                    33:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F6:E8:50:57:94:D2:96:E4:04:A8:F0:CE:E9:D6:F3:4B:63:31:27
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:36:90:47:c5:3c:ba:18:bf:d8:4b:65:9e:07:a0:d8:1a:bd:
         d4:e7:42:23:ad:25:86:4b:c4:d0:d3:87:d5:7d:c4:9a:5e:78:
         a1:26:a9:7d:53:54:82:5f:69:1f:59:9a:b7:c5:c0:3a:f4:7c:
         7a:8b:2c:1f:83:e9:c7:2d:65:59:3a:68:c0:be:64:0e:cf:1f:
         cd:2e:45:d3:6c:5b:c2:41:52:97:a0:cc:42:4d:59:a3:e9:95:
         9c:49:8b:8c:dc:9d:6b:a4:8c:74:e7:1a:ff:88:4c:6e:9a:cb:
         5f:95:b9:d9:4f:58:84:76:0b:7d:ad:b3:e4:b4:3e:2a:05:df:
         4b:9a:90:ae:21:9a:59:1c:29:bf:8d:89:82:a2:9d:a9:fc:f1:
         93:44:8a:e2:0b:92:5e:c3:4b:f9:67:7d:80:fb:2b:6c:77:5f:
         3a:18:78:a4:48:09:29:03:2a:6c:47:b3:f3:ac:3f:1c:a7:bf:
         5a:80:20:49:fc:d7:bd:7e:d4:a3:a5:20:17:28:39:47:21:b3:
         ba:53:d9:bf:9e:01:53:af:b7:18:6d:82:27:8f:e3:38:60:19:
         fb:00:40:2f:56:93:07:ef:4d:5d:9a:d2:ea:8c:87:e1:d7:9e:
         da:27:9c:25:4b:6e:a9:39:93:b2:45:de:1e:bd:36:8a:56:1d:
         5a:e9:1f:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:48 2025 by rpki-client