Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
File:                     LQAVTmAKZArDKjKF2c6fxQqUGrM.mft (raw, json)
Hash identifier:          HePZplhp0RFWgc5SqhQlYne2Hbwwxw56fIqy5tSxQxI=
Subject key identifier:   FE:6E:21:3E:E3:7A:27:F9:83:0B:A2:BF:B2:21:1B:A9:3D:BB:FD:26
Authority key identifier: 2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3
Certificate issuer:       /CN=F365BC44AF/serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
Certificate serial:       0654
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
Manifest number:          0648
Signing time:             Thu 24 Sep 2026 02:49:48 +0000
Manifest this update:     Thu 24 Sep 2026 02:49:47 +0000
Manifest next update:     Sat 26 Sep 2026 02:49:47 +0000
Files and hashes:         1: LQAVTmAKZArDKjKF2c6fxQqUGrM.crl (hash: TRLD+aDUYF838S+E5I1XlUcGKXG1Yo9p7RejxJUmBQg=)
                          2: EE9A15528A8211F1A37EA512CF1D38B0.roa (hash: AzLnBRzQnactp0cMa5zQwNt+VVg/VEWOqjXlWWNiXNg=)
                          3: 2B5FFC7E8A8111F181915D05CF1D38B0.roa (hash: 3X5q3nZcQZSHPjyCY6TkppWSebt/r5l7c9ae4Wi3LQQ=)
                          4: 128AAC508A8411F195DD3F18CF1D38B0.roa (hash: I5ngoMtUqqiA/2cRiHgoX7EXQ1nDwLrxP5YhvCneuj4=)
                          5: DC444B408A8011F19C054705CF1D38B0.roa (hash: k4FYTjH5NXMnSmrVz2ArtKhEE11Kq9H0SJzWwEr/K0c=)
                          6: 612001188A8311F1BFD89114CF1D38B0.roa (hash: y9qGRkRTdcSHb8nsU7Rvu5HPtGH7ET36tjw+cdG84s8=)
                          7: C59E93D48A8311F18832D816CF1D38B0.roa (hash: s26EymhvYdDZcz1MZYx8BW0dIXLK2t/H1SxA774dVNo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 02:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1620 (0x654)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365BC44AF, serialNumber=2D00154E600A640AC32A3285D9CE9FC50A941AB3
        Validity
            Not Before: Sep 24 02:49:47 2026 GMT
            Not After : Sep 26 02:49:47 2026 GMT
        Subject: CN=6ab48fcc-91b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:fd:84:60:75:ea:98:70:3d:60:6d:f3:5a:07:
                    39:66:96:72:e6:cb:ff:8b:72:ce:7f:43:c8:01:01:
                    53:b9:1a:e9:c2:c5:6f:00:71:6e:6c:ae:f9:4c:be:
                    fa:5a:5c:7b:c2:eb:16:27:71:f9:1c:ff:49:07:eb:
                    8b:a9:66:76:cd:e0:85:65:ed:1b:f1:63:64:28:45:
                    fe:fa:a7:c3:cf:a4:ec:da:4f:86:a0:e1:1d:79:82:
                    04:36:bc:3a:c9:bb:6d:7b:d4:73:19:9b:eb:c0:00:
                    a5:c8:84:18:55:30:f7:5a:12:b1:dd:ff:2d:2f:02:
                    08:3d:a9:61:d6:92:b8:15:c8:8a:75:03:93:fd:f9:
                    c0:5c:8d:2d:ed:45:69:6d:ad:cf:af:52:2b:7a:aa:
                    f3:24:38:e8:79:44:95:94:94:73:6e:eb:9a:4d:8a:
                    5f:15:d8:bc:4b:5d:d1:d7:34:52:f9:b0:c2:cd:c3:
                    79:b2:d0:a4:b2:3d:f5:11:9c:87:92:a0:bf:69:df:
                    83:a6:98:90:1b:8d:0d:a2:55:40:42:5d:f3:30:7c:
                    20:3a:6e:01:5b:a1:bd:0e:62:6c:2f:6f:e0:09:df:
                    0b:1f:42:2a:9c:9f:6f:86:0c:b4:ac:32:e9:45:a6:
                    e6:3b:f4:16:fd:f9:27:30:f8:88:76:44:eb:fd:69:
                    8a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6E:21:3E:E3:7A:27:F9:83:0B:A2:BF:B2:21:1B:A9:3D:BB:FD:26
            X509v3 Authority Key Identifier:
                keyid:2D:00:15:4E:60:0A:64:0A:C3:2A:32:85:D9:CE:9F:C5:0A:94:1A:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LQAVTmAKZArDKjKF2c6fxQqUGrM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365BC44/892D49C6F61811ECBE1B38AFF1222468/LQAVTmAKZArDKjKF2c6fxQqUGrM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:de:f5:4b:57:90:33:63:c3:49:ad:12:06:ca:ef:f3:be:a4:
         70:d9:f7:39:29:4b:df:27:a7:a4:2f:7d:1f:cd:98:07:71:15:
         3d:c4:f1:b3:20:d8:b9:e7:3e:0d:37:46:27:85:b0:a9:f7:5f:
         8e:b9:8f:7d:d7:d3:fa:0b:4a:f0:7f:d5:eb:ab:bf:68:5f:76:
         12:64:93:a9:6b:15:70:01:56:2e:84:fd:4b:38:ee:fb:22:73:
         b0:fa:63:eb:ca:05:c1:d0:30:c9:0d:0e:b6:67:70:30:74:3c:
         b4:9a:9b:4a:2a:9b:19:41:98:83:2d:75:61:8b:4a:30:1e:99:
         6b:aa:99:19:cb:72:b8:34:68:b6:c8:0c:36:72:34:47:29:b6:
         bf:e5:04:fd:97:42:d4:63:d3:e8:2c:d8:3b:48:87:be:a4:02:
         b6:51:35:23:ef:2b:1f:3e:52:28:1c:fb:67:19:82:89:ed:f8:
         9e:a9:19:4e:57:54:04:54:bd:09:89:3a:78:a8:d5:89:f6:f7:
         3d:df:0a:2b:15:1d:fa:16:87:f4:2e:bc:85:6b:e5:b5:09:2a:
         bd:91:f9:8c:a6:dc:82:19:04:05:27:e1:24:1f:e0:ae:ac:95:
         12:f4:ff:88:b9:93:8f:73:96:52:5c:9b:92:4f:bc:bf:18:85:
         c6:8c:08:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----