Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          P3plW8npPk7OwaSXsEsRXLl5czc9I2vNoAmVVAQKmFo=
Subject key identifier:   1A:55:1E:B5:AD:52:63:DB:20:4B:B4:3C:47:F8:BA:8C:72:98:C2:9C
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       0451
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          0450
Signing time:             Sat 23 Aug 2025 03:12:00 +0000
Manifest this update:     Sat 23 Aug 2025 03:11:59 +0000
Manifest next update:     Mon 25 Aug 2025 03:11:59 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: 8OzI2fFQHJRlJ8BJ49gdwJBqJVdbLjrfJBfBX0GZS5I=)
                          2: 8FD98C2038B311EDAAA5E7DFF1222468.roa (hash: UXAWeOCC1criU7XL7P2zWbiZAhjMbu4dS0oFzWgmmoM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1105 (0x451)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Aug 23 03:11:59 2025 GMT
            Not After : Aug 25 03:11:59 2025 GMT
        Subject: CN=68a93180-d17b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:ce:4f:87:b4:4b:92:86:97:f6:f4:66:0e:
                    11:08:c8:58:bc:84:db:06:4e:7c:17:b7:8b:65:b3:
                    1d:b5:1c:3e:bf:6c:c5:31:7c:69:6c:29:8f:5c:cd:
                    ca:66:e0:41:37:66:da:26:bd:19:b6:36:26:4a:fd:
                    53:06:d3:e0:32:df:b5:49:03:3b:ce:b0:b9:28:dd:
                    e8:d5:7e:12:e3:bf:8a:64:35:05:06:2f:fe:34:84:
                    01:3a:62:b3:ca:fd:57:ec:4d:fe:32:ba:4a:4b:af:
                    fd:15:68:90:95:99:27:4d:e9:7c:f1:b7:03:c1:37:
                    e2:89:b8:fa:fa:48:6e:0c:19:1c:30:64:1f:6f:9e:
                    9c:f9:52:11:89:0a:e7:21:63:20:3b:d3:c4:77:93:
                    48:a9:85:a8:c7:2b:bd:dd:5b:6a:e3:ae:3a:b1:55:
                    09:90:9b:f2:f2:ab:c3:98:13:59:60:38:00:27:dd:
                    76:1d:31:f3:ae:8f:aa:d8:9b:ec:75:6f:07:ca:30:
                    5f:af:8f:49:b6:cc:9f:a9:89:1a:98:c1:b7:28:e9:
                    c6:3b:5c:ac:6a:43:70:dd:e1:fb:06:30:3b:68:e4:
                    38:b5:ed:52:84:c0:e1:e2:be:3f:ec:19:40:5b:b0:
                    91:90:15:49:d6:d5:5c:da:49:54:7d:10:7c:b4:fa:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:55:1E:B5:AD:52:63:DB:20:4B:B4:3C:47:F8:BA:8C:72:98:C2:9C
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:9c:ac:9e:b7:6c:88:90:73:10:e4:ef:e3:31:7a:74:75:b7:
         9c:73:98:75:51:86:b2:e6:75:a2:54:7d:2c:cc:51:d3:64:d8:
         33:c4:e3:23:da:b9:da:f4:3c:11:5d:f1:f6:a6:1f:b1:5d:5a:
         22:de:05:55:3c:86:5c:0f:e3:98:f2:8d:dd:01:83:57:62:06:
         0e:d1:4d:38:be:1e:7b:c4:d9:b0:c5:58:c5:35:79:eb:e6:7f:
         db:a1:1b:4f:8d:aa:98:f9:bd:da:2f:d9:84:d8:37:0e:5f:60:
         55:ed:73:57:5e:56:51:42:f9:85:a0:48:15:c6:bf:6a:e3:ed:
         53:d8:1f:c9:c8:1a:03:e3:31:8e:a4:5a:f9:97:c1:1a:80:18:
         75:ba:44:71:41:3b:f7:06:e2:16:23:31:2d:2a:ed:97:5e:19:
         a5:02:9a:4b:5b:cc:55:74:54:35:74:4d:b6:a2:f7:35:6d:78:
         3b:fe:89:e8:a1:cb:e1:33:a8:0f:f8:d5:69:2d:95:54:d2:00:
         b5:6d:4c:2f:12:eb:42:c5:df:a7:05:33:7b:69:71:88:5d:65:
         33:b9:60:6a:6d:40:a4:4d:ce:bf:36:86:77:a0:c3:5e:27:37:
         d2:52:92:a0:5d:32:d1:d0:59:0e:bf:01:8d:68:91:de:53:a4:
         62:22:47:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:21:04 2025 by rpki-client