Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
File:                     LmD5YTFKp9b93e6durMSN0cF5ss.mft (raw, json)
Hash identifier:          Vz0sMxpCN2TRs0mCL28ipR3OWjBaPEIM4BpT09CHHB4=
Subject key identifier:   38:52:D6:59:02:FD:51:4F:9E:6D:BF:6D:61:AF:86:A7:7C:C6:64:01
Authority key identifier: 2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB
Certificate issuer:       /CN=F36FC8A0AF/serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
Certificate serial:       02D7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
Manifest number:          02D6
Signing time:             Sat 23 Aug 2025 04:00:10 +0000
Manifest this update:     Sat 23 Aug 2025 04:00:09 +0000
Manifest next update:     Mon 25 Aug 2025 04:00:09 +0000
Files and hashes:         1: LmD5YTFKp9b93e6durMSN0cF5ss.crl (hash: CSGfUykbNrMsz0p2nMKwA9vhui8SAwXp1Zp9wKhLJsA=)
                          2: 333100CC56E711EEB82D22544AD9E6FC.roa (hash: iWB0O9f+LLwbK/f70tuWF05AYGrsYH+zV7rCgvpguSc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 727 (0x2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC8A0AF, serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
        Validity
            Not Before: Aug 23 04:00:09 2025 GMT
            Not After : Aug 25 04:00:09 2025 GMT
        Subject: CN=68a93cca-540f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:f7:f1:04:9a:f5:1f:5a:ed:82:43:f4:03:
                    a4:79:5c:f9:46:2e:d1:7e:7b:f8:59:41:ac:5e:ab:
                    80:81:7c:1e:4d:7e:65:ad:71:57:6c:c4:de:03:54:
                    b7:34:72:da:2a:2d:08:8d:86:7c:c3:0e:fb:6d:6b:
                    1d:a1:10:b6:32:82:b3:1d:0b:76:e2:31:d3:5f:67:
                    ec:58:f3:58:40:46:64:bd:87:49:32:3a:d9:e8:39:
                    a4:cb:7e:cc:4a:06:dd:30:f2:06:15:a1:63:69:d2:
                    26:3d:16:f5:5b:6c:25:46:70:59:1d:5b:96:98:b3:
                    64:98:09:20:d4:c2:3b:cc:db:cf:28:81:af:91:71:
                    9b:9d:09:22:3b:70:65:42:af:4f:a5:2e:6a:1c:21:
                    4f:d3:14:b2:d9:3c:ec:c6:fa:b0:86:99:b9:fe:aa:
                    73:5b:aa:10:7b:53:da:17:9d:eb:4e:1e:c7:e0:80:
                    b7:9c:e6:95:45:c0:28:74:80:cc:7e:f2:f7:dc:64:
                    6a:3f:f5:2c:18:28:56:54:67:53:97:57:a6:0f:c1:
                    8b:7e:0e:d1:4d:fa:71:da:a8:92:03:b9:88:63:47:
                    54:51:52:c3:64:b0:b8:1b:2f:3f:2c:25:1b:db:8d:
                    b7:e1:a9:e3:15:1a:a9:12:f5:2c:b3:e9:e9:fc:95:
                    a3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:52:D6:59:02:FD:51:4F:9E:6D:BF:6D:61:AF:86:A7:7C:C6:64:01
            X509v3 Authority Key Identifier:
                keyid:2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:b8:7f:29:0c:a6:af:a5:2a:5e:c4:2a:bd:5c:ab:1e:86:ad:
         0e:7c:21:c4:48:23:13:21:4e:56:60:c0:8a:97:a5:b4:bc:18:
         17:69:f4:fa:eb:e9:98:f1:8b:8a:fb:ad:de:9c:6b:97:37:ba:
         f7:f2:23:1e:fb:83:f1:db:8d:1f:41:40:ac:b1:5d:3d:9b:e3:
         8b:4f:2a:5c:81:f0:15:49:c8:a2:f6:23:1d:61:43:c6:02:8b:
         e3:ab:ff:f5:ee:b2:53:d9:c1:a7:51:a4:a6:f9:fd:8f:36:e3:
         d5:f7:c5:b1:6c:6f:8c:7a:fc:dd:9b:e8:19:d1:63:0a:0f:47:
         2b:20:63:de:60:ed:05:77:dd:cf:9e:0b:71:89:cc:b9:d7:f9:
         47:28:1e:61:2b:39:9a:6e:11:d4:bd:79:3e:18:c7:9b:9f:77:
         06:62:5c:68:61:6e:2b:01:77:b8:ba:3f:af:4f:fd:c7:28:a1:
         88:74:43:14:7a:79:f9:e8:d6:c5:10:60:03:ea:89:ca:6c:fb:
         43:12:d5:9f:07:42:d1:8c:fe:0e:51:dd:10:00:b7:50:25:42:
         b8:a8:bd:6b:c2:3f:45:cc:68:29:e5:58:37:5b:c6:16:79:cf:
         d0:26:80:f9:25:bb:43:99:b6:d8:1e:df:63:c2:9a:48:32:20:
         38:e6:c9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:03 2025 by rpki-client