Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
File:                     lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft (raw, json)
Hash identifier:          kC0JIrQy7GVckDMJnW6orpYRDHkPN3HylWa59ENyEnA=
Subject key identifier:   E0:32:18:30:A5:86:98:23:0B:43:A3:A8:57:39:3D:B1:6D:18:7E:48
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Certificate issuer:       /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial:       0255
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
Manifest number:          0254
Signing time:             Tue 28 Jul 2026 04:42:55 +0000
Manifest this update:     Tue 28 Jul 2026 04:42:54 +0000
Manifest next update:     Thu 30 Jul 2026 04:42:54 +0000
Files and hashes:         1: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl (hash: 7j2SSCSxBZTLCqQiYcAA2xgskgvFPLGH4VZZT2wJfLI=)
                          2: 5607C3B0BEE211EFA4CEA589762E951A.roa (hash: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 04:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628288AF, serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
        Validity
            Not Before: Jul 28 04:42:54 2026 GMT
            Not After : Jul 30 04:42:54 2026 GMT
        Subject: CN=6a68334f-b141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f8:db:dd:49:59:30:c4:96:f1:4d:0b:5a:1d:
                    17:2d:69:fc:6b:1a:d2:ce:ed:b4:79:45:28:b4:19:
                    9e:b9:2d:81:12:cb:88:95:74:6b:bf:b4:a1:a4:51:
                    bb:cd:e6:10:43:f7:0d:2f:98:89:f5:db:73:75:81:
                    0f:5c:af:cc:4b:fd:47:d6:dc:e4:9c:b0:54:5b:f2:
                    f8:1a:12:04:a5:6d:13:1d:14:94:99:c0:da:6b:98:
                    43:ba:79:3f:b4:a2:36:52:8c:da:d6:6a:4d:95:2f:
                    d9:d2:51:15:48:f3:25:2c:64:2f:66:26:3f:58:a7:
                    47:60:49:19:b6:20:d6:4d:d4:89:17:64:38:63:8a:
                    74:70:2a:02:b2:bb:d6:ee:cb:52:3d:2e:15:bb:d4:
                    c8:95:bf:53:a8:77:43:05:d5:39:ad:90:aa:67:53:
                    4d:16:a7:cd:66:b1:86:f7:f1:cb:8a:c4:3f:ef:c9:
                    c8:de:a4:f8:f3:13:f1:24:f1:46:39:45:31:e9:2a:
                    cf:ac:87:ea:3a:ed:69:b7:1b:b9:9d:b1:45:eb:54:
                    aa:d1:ae:7c:6f:8a:3f:c2:f4:c5:52:c8:f3:a8:83:
                    4f:4d:e9:9f:60:2c:44:93:68:41:a2:95:bd:1e:da:
                    f3:6b:7e:4c:7b:b7:b0:b6:97:91:14:f6:eb:9d:07:
                    67:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:32:18:30:A5:86:98:23:0B:43:A3:A8:57:39:3D:B1:6D:18:7E:48
            X509v3 Authority Key Identifier:
                keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b0:f0:af:2c:61:ee:27:75:a8:f0:05:0d:c9:96:90:dd:74:
         b6:6f:b6:fa:01:09:52:aa:bc:ee:68:d0:c4:87:b8:11:8b:76:
         cc:05:8c:3c:a4:11:11:62:3a:f0:2f:5f:26:19:13:35:c0:2b:
         56:c8:46:d8:54:05:c0:25:7b:65:84:27:4c:d1:77:dc:34:c1:
         72:a9:40:4c:f5:bc:38:23:3d:25:b8:f2:a0:1b:04:a1:34:05:
         52:3d:b8:e7:e5:d9:4d:bc:aa:b8:b9:35:75:4e:98:d4:3f:f3:
         43:6e:bf:91:81:61:00:5d:a0:a0:e7:0a:f5:00:3c:0d:f4:cf:
         45:d5:04:90:29:ef:2f:43:7e:cc:b9:24:be:4e:b1:78:b1:92:
         7a:71:f0:60:98:ea:d0:ce:c3:0e:29:30:b9:6e:de:0c:99:30:
         79:c9:33:78:c9:3e:11:02:08:5f:0c:0c:79:36:72:71:de:69:
         95:c7:d2:08:2f:ab:be:19:2a:16:5a:43:98:44:c7:c7:f7:40:
         e8:1b:b0:0f:5d:22:3d:a1:25:97:0e:0c:80:b7:be:a3:93:5d:
         8f:be:85:13:e3:2d:0e:85:33:8b:8e:3a:37:a3:31:6e:88:a1:
         bc:a0:38:f6:40:06:d1:f4:52:80:05:9e:4d:ef:86:39:f9:59:
         af:09:a6:5f
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAlUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjgyODhBRjExMC8GA1UEBRMoOTQ5NjcxMjdGRjY0RUM3QzcyQTNBQkVBMTZDRTY5
QUVEQTdGNjgzNDAeFw0yNjA3MjgwNDQyNTRaFw0yNjA3MzAwNDQyNTRaMBgxFjAU
BgNVBAMTDTZhNjgzMzRmLWIxNDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDp+NvdSVkwxJbxTQtaHRctafxrGtLO7bR5RSi0GZ65LYESy4iVdGu/tKGk
UbvN5hBD9w0vmIn123N1gQ9cr8xL/UfW3OScsFRb8vgaEgSlbRMdFJSZwNprmEO6
eT+0ojZSjNrWak2VL9nSURVI8yUsZC9mJj9Yp0dgSRm2INZN1IkXZDhjinRwKgKy
u9buy1I9LhW71MiVv1Ood0MF1TmtkKpnU00Wp81msYb38cuKxD/vycjepPjzE/Ek
8UY5RTHpKs+sh+o67Wm3G7mdsUXrVKrRrnxvij/C9MVSyPOog09N6Z9gLESTaEGi
lb0e2vNrfkx7t7C2l5EU9uudB2fdAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU4DIY
MKWGmCMLQ6OoVzk9sW0YfkgwHwYDVR0jBBgwFoAUlJZxJ/9k7Hxyo6vqFs5prtp/
aDQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI4Mjg4LzQ2OTM3NjFFQkVENzExRUY4MkE3QTM0NTc2MkU5NTFBL2xKWnhK
XzlrN0h4eW82dnFGczVwcnRwX2FEUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xKWnhKXzlrN0h4eW82dnFGczVwcnRwX2FEUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjgyODgvNDY5Mzc2MUVCRUQ3MTFFRjgyQTdBMzQ1NzYy
RTk1MUEvbEpaeEpfOWs3SHh5bzZ2cUZzNXBydHBfYURRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhsPCvLGHuJ3Wo8AUNyZaQ3XS2b7b6
AQlSqrzuaNDEh7gRi3bMBYw8pBERYjrwL18mGRM1wCtWyEbYVAXAJXtlhCdM0Xfc
NMFyqUBM9bw4Iz0luPKgGwShNAVSPbjn5dlNvKq4uTV1TpjUP/NDbr+RgWEAXaCg
5wr1ADwN9M9F1QSQKe8vQ37MuSS+TrF4sZJ6cfBgmOrQzsMOKTC5bt4MmTB5yTN4
yT4RAghfDAx5NnJx3mmVx9IIL6u+GSoWWkOYRMfH90DoG7APXSI9oSWXDgyAt76j
k12PvoUT4y0OhTOLjjo3ozFuiKG8oDj2QAbR9FKABZ5N74Y5+VmvCaZf
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:32:25 2026 by rpki-client