Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.mft
File:                     LnpJoweDL2MmAr_nqk5ICHRVH80.mft (raw, json)
Hash identifier:          TIcKcozsN8hWvz7NINSAmYIdS/FrFPIbW8Ccd0blypI=
Subject key identifier:   84:B5:AA:BC:CB:3B:7D:E1:69:9E:DF:60:16:AF:B4:93:93:8F:FE:B0
Authority key identifier: 2E:7A:49:A3:07:83:2F:63:26:02:BF:E7:AA:4E:48:08:74:55:1F:CD
Certificate issuer:       /CN=F36F5B9DAF/serialNumber=2E7A49A307832F632602BFE7AA4E480874551FCD
Certificate serial:       2C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LnpJoweDL2MmAr_nqk5ICHRVH80.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.mft
Manifest number:          2B
Signing time:             Thu 26 Mar 2026 06:35:21 +0000
Manifest this update:     Thu 26 Mar 2026 06:35:20 +0000
Manifest next update:     Sat 28 Mar 2026 06:35:20 +0000
Files and hashes:         1: LnpJoweDL2MmAr_nqk5ICHRVH80.crl (hash: nMAYD7w0ONIaMfTYeV/yxBpZDDr90CGbrYAte9IfC+8=)
                          2: 6B0279CA09C511F1BE9C3097DAE4EC9C.roa (hash: xaw/xaDZuxbiw9x4K+rCVDkYhuPeyhAyCp53eGqU7Fo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LnpJoweDL2MmAr_nqk5ICHRVH80.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F5B9DAF, serialNumber=2E7A49A307832F632602BFE7AA4E480874551FCD
        Validity
            Not Before: Mar 26 06:35:20 2026 GMT
            Not After : Mar 28 06:35:20 2026 GMT
        Subject: CN=69c4d3a9-674e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4d:d5:f1:b4:fe:31:49:bf:12:da:a2:87:39:
                    23:b7:42:96:d5:2d:cd:0c:fb:d2:41:2a:2c:a9:f1:
                    8d:f2:f9:65:3e:d6:aa:39:cb:62:75:6a:9c:39:fe:
                    48:30:eb:d8:85:52:1e:d2:f9:89:10:b0:97:8a:d3:
                    8f:74:f9:d0:33:8c:b9:c6:24:fb:7a:75:f5:ec:29:
                    41:c2:df:8b:d4:9e:c3:00:29:4e:a0:ea:48:2e:88:
                    3b:00:e4:d9:ea:fd:8e:e1:da:6e:ca:47:97:9b:83:
                    c1:82:d9:13:93:85:4a:67:53:97:c1:51:12:dc:7c:
                    6a:98:db:ff:7a:39:14:2d:6c:cb:37:ba:97:61:b2:
                    a1:7c:15:b4:7b:81:4b:84:6b:75:d6:a8:25:c2:49:
                    47:cf:55:46:a8:a8:b1:8d:d5:55:e3:88:9d:f3:3e:
                    63:6e:70:d1:83:b1:5e:88:fb:c6:77:a6:e4:1c:b5:
                    61:60:db:aa:da:1d:25:af:9f:be:b6:34:c1:86:4c:
                    01:7b:1c:a5:e1:8a:98:c5:21:53:22:f4:4e:96:5f:
                    51:7e:7a:ce:61:22:5d:cd:93:b3:6c:ee:64:b2:53:
                    ff:dd:6c:90:63:f1:83:f8:cd:07:d2:5b:09:8a:55:
                    f7:b7:64:b2:b1:37:a6:60:5f:c9:f4:aa:6f:cc:07:
                    55:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B5:AA:BC:CB:3B:7D:E1:69:9E:DF:60:16:AF:B4:93:93:8F:FE:B0
            X509v3 Authority Key Identifier:
                keyid:2E:7A:49:A3:07:83:2F:63:26:02:BF:E7:AA:4E:48:08:74:55:1F:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LnpJoweDL2MmAr_nqk5ICHRVH80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F5B9D/0F06651609C311F19D99A488DAE4EC9C/LnpJoweDL2MmAr_nqk5ICHRVH80.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:ae:af:07:a4:75:dd:a5:2c:df:8d:db:09:13:65:4e:47:07:
         a5:8d:81:b0:de:d5:23:c8:67:97:bc:ef:0b:42:0b:81:57:78:
         31:77:57:77:23:dd:c9:49:4f:97:29:8d:57:14:4a:26:0e:90:
         ed:98:d9:75:66:09:d8:bb:99:ed:74:d4:5f:11:98:e9:d5:2b:
         64:18:0b:98:59:f3:f3:2d:00:94:b0:9f:d4:b4:e2:1f:3b:8b:
         5a:77:fd:21:6f:fa:00:1d:21:f2:90:95:a0:de:12:02:bd:43:
         59:0c:26:df:94:8a:06:9e:d8:f9:9c:7f:b4:f2:53:f0:3b:ef:
         fa:8f:84:7d:05:98:b9:de:92:26:59:c0:5e:6b:d1:b6:d0:3f:
         7e:bb:86:0f:3b:de:32:25:0a:8e:ae:9c:37:6d:dc:d0:cc:e3:
         f4:5b:27:a5:49:3d:8c:c2:2f:a0:90:e0:8e:11:76:52:88:d8:
         6d:6c:6e:b2:97:35:00:48:01:1c:f1:7f:a8:e6:77:ca:c7:59:
         16:6f:0d:e9:5b:92:9e:9a:ae:0b:dd:62:c5:34:87:c1:54:69:
         2e:ab:3b:ee:f3:fd:6b:bd:62:ca:af:e7:04:ed:8b:f6:6e:3f:
         4f:8e:f1:d0:9e:11:8b:42:6f:59:d3:52:37:64:99:2e:97:6a:
         86:67:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:13:21 2026 by rpki-client