Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          dzjIfV0q7wUuatbNcQK5AScqErueAhEsn33R8eb/MEY=
Subject key identifier:   2D:08:AC:40:3B:FC:3F:88:6B:77:A8:D3:25:CD:2D:04:9F:60:F7:2F
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       0257
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          0256
Signing time:             Sun 19 Oct 2025 04:10:18 +0000
Manifest this update:     Sun 19 Oct 2025 04:10:17 +0000
Manifest next update:     Tue 21 Oct 2025 04:10:17 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: WiCVjYagsIdPptY0A/I7OCyAnrPq/G/H39SPsCyrjgk=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 04:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 599 (0x257)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF, serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: Oct 19 04:10:17 2025 GMT
            Not After : Oct 21 04:10:17 2025 GMT
        Subject: CN=68f464a9-0333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:86:42:a8:48:7c:15:22:d9:50:1c:2e:da:20:
                    0c:11:c6:e9:aa:11:b2:21:7e:78:86:3e:f8:6c:bf:
                    05:29:5e:4e:4e:ca:e0:3a:0a:a7:ca:a0:03:7b:a7:
                    c5:56:51:74:e5:db:14:a9:3c:1f:64:b8:c7:3f:79:
                    93:03:13:47:21:55:96:86:96:81:96:d2:98:f1:74:
                    ea:03:fe:65:36:ba:f8:b9:36:3c:a8:5e:c5:a5:91:
                    4a:63:45:49:52:51:d9:c3:03:ac:13:75:2b:89:72:
                    c7:85:76:33:20:54:eb:41:d2:d1:9d:d9:41:ef:df:
                    35:6c:e9:6f:fe:c8:62:1f:c9:34:9a:0c:e8:89:08:
                    fc:88:57:f5:fd:c1:cb:0c:df:29:29:f7:32:50:5c:
                    59:0f:3f:e2:1f:e5:ad:29:d0:96:79:3e:f2:3e:56:
                    d4:85:0a:f3:99:4c:1e:78:67:d2:ec:17:9f:5e:70:
                    b5:01:88:20:b8:bf:a8:44:94:11:a5:ed:a6:6b:df:
                    80:93:f2:b8:24:d9:3c:a5:f8:57:60:83:90:68:34:
                    f6:45:6d:a2:dd:4c:c7:e0:89:76:30:81:f6:7c:19:
                    13:9b:a8:68:a4:45:ab:2b:9d:82:8d:fb:b1:64:27:
                    6f:41:1d:d3:a4:49:77:f9:a1:a8:a9:24:8b:a9:5a:
                    52:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:08:AC:40:3B:FC:3F:88:6B:77:A8:D3:25:CD:2D:04:9F:60:F7:2F
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:14:72:25:7f:28:c9:3d:8d:b9:4e:74:54:d9:18:2f:53:d2:
         97:fb:a2:64:64:ff:b6:16:d3:da:51:a6:d4:1b:67:d0:63:c1:
         8f:49:19:94:83:73:5c:92:10:61:5a:96:fc:be:e7:51:87:55:
         79:c7:d2:76:e2:27:13:9d:cc:21:94:3a:9c:1a:52:d8:ad:d3:
         f6:ea:08:e9:1f:89:8f:a6:99:6c:5f:16:fa:fb:3e:22:7f:ec:
         17:b8:50:c9:46:1c:ea:9d:37:72:22:1a:10:e9:f7:05:81:ff:
         74:aa:03:b6:0a:0a:58:97:1a:3d:65:dd:9c:d8:f1:54:89:77:
         cb:11:59:00:f8:05:cf:7a:09:8e:70:b5:24:9f:b0:f5:0f:a7:
         aa:93:4d:c1:be:e5:65:f2:ed:4e:d7:4a:4c:bb:3f:4b:a0:58:
         10:0f:e5:64:7f:0e:6a:30:3a:8e:6a:7c:f5:83:28:20:1e:d0:
         40:90:f1:1e:85:93:b3:c0:6c:23:12:66:95:a5:f3:33:0b:2f:
         58:18:b0:06:b2:bf:85:c9:c9:21:04:04:62:3d:72:2d:e6:44:
         a3:59:2c:5f:ec:cb:a1:a8:23:90:fa:4f:cc:61:9d:d0:ca:d3:
         0c:5a:fa:c2:e2:d1:82:d0:ce:ba:cc:73:f6:f9:4f:f3:8a:44:
         38:76:ae:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:46:36 2025 by rpki-client