Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
File:                     QDrQFAXpeziMuD5pbQudgLuguLg.mft (raw, json)
Hash identifier:          xHdwlNHylrBVIgh9dDjs/kjBq3OlFo5yhFJY0xaocCA=
Subject key identifier:   78:87:B9:90:B1:DF:A2:C0:5A:95:07:95:E5:FF:B2:0D:4F:DD:27:45
Authority key identifier: 40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Certificate issuer:       /CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Certificate serial:       071E
Authority info access:    rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
Manifest number:          071D
Signing time:             Wed 05 Nov 2025 02:10:09 +0000
Manifest this update:     Wed 05 Nov 2025 02:10:08 +0000
Manifest next update:     Fri 07 Nov 2025 02:10:08 +0000
Files and hashes:         1: QDrQFAXpeziMuD5pbQudgLuguLg.crl (hash: VLaC5QyoVUpJbE9+O7NmAVB3JSQ9pfAtbA29ZfUqbmw=)
                          2: 2295CF68523711EEB515D05D4AD9E6FC.roa (hash: KlQWt1tn1KH/CPgIYBRda65+Ao1w8Du+dkLesEZUQIQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                          rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:35:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822 (0x71e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216LA, serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
        Validity
            Not Before: Nov  5 02:10:08 2025 GMT
            Not After : Nov  7 02:10:08 2025 GMT
        Subject: CN=690ab201-7ffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:1c:5c:6f:7b:4f:b3:04:4d:a1:e9:e1:67:b1:
                    9c:8d:b2:7e:bc:11:9c:e5:39:53:0f:e6:0a:e7:c5:
                    4e:59:8a:5d:34:c4:fa:98:d0:d8:fb:c2:f0:7b:cd:
                    29:6a:a4:89:2d:51:75:d0:23:96:ab:e6:69:b9:31:
                    5f:cc:38:de:6d:61:76:f0:41:c3:a1:52:5e:a9:4c:
                    2f:e1:ec:e0:82:d8:45:bc:c6:57:d4:f8:56:a8:a7:
                    4e:22:17:fc:af:70:7d:16:5d:2e:03:24:a0:a6:3d:
                    3a:d3:a0:96:d9:8d:5c:45:1c:56:fe:e7:ac:fc:91:
                    1e:28:9d:d8:cd:c7:0c:53:2c:fb:56:66:ae:9a:46:
                    18:64:77:d7:d4:31:22:ef:66:19:52:35:c0:c9:87:
                    51:de:81:92:71:a9:60:9e:7e:ad:af:77:97:f5:38:
                    a2:47:04:96:a3:81:e7:23:47:8e:75:bb:df:cb:e1:
                    f8:ae:f2:1e:f5:5f:e8:df:de:9d:98:6d:a4:7a:8a:
                    ae:5f:cf:31:f0:fb:a1:51:5a:fe:03:0d:25:da:0a:
                    60:37:48:16:5c:db:5f:0e:5e:a6:f8:5b:67:92:fa:
                    94:f2:92:48:28:16:6d:21:87:7c:08:85:f9:e8:54:
                    47:57:43:ce:4e:ed:26:0c:41:c1:a8:bb:7b:5e:9e:
                    60:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:87:B9:90:B1:DF:A2:C0:5A:95:07:95:E5:FF:B2:0D:4F:DD:27:45
            X509v3 Authority Key Identifier:
                keyid:40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:7e:41:8a:2e:24:25:e3:5e:fd:91:8d:5f:3f:e9:88:26:b4:
         e8:ad:9f:b2:5b:2f:f7:74:3c:0e:c6:e0:bb:b5:b7:d0:a8:d9:
         33:79:0d:bf:06:f1:f7:d8:f1:cc:84:09:3d:7c:8f:2e:2c:dd:
         4a:69:8e:02:51:be:d9:af:61:ee:de:d6:0f:d2:32:06:d8:7c:
         26:86:a1:c8:87:84:77:e1:49:8d:fc:37:3f:74:c5:36:75:aa:
         26:30:06:2f:6e:8b:33:9b:05:2d:46:2a:22:d1:b8:2f:0a:30:
         b2:0f:36:6c:ff:bf:aa:fb:eb:80:ef:5d:b8:1e:71:75:20:02:
         31:2e:74:77:ae:5f:98:1a:05:ab:ce:77:3d:5a:1c:e2:a0:70:
         35:bc:49:2c:88:eb:43:97:ce:6f:1b:fa:66:59:85:63:2b:86:
         4f:9f:d3:6f:e2:63:3a:71:22:38:92:fe:97:39:17:f6:ae:53:
         b3:d4:83:31:92:17:b2:77:6c:e8:c4:17:9f:87:50:03:82:9d:
         e4:3e:de:bf:11:30:d4:9c:80:47:a8:6a:12:ec:b4:10:76:0e:
         1e:97:46:d6:7f:26:f7:e0:c3:fa:82:94:d1:e8:d2:90:8d:f3:
         b0:67:ef:f0:d5:38:ae:1d:e0:4c:97:2e:e1:f8:87:8a:c4:91:
         88:ee:6a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:46:49 2025 by rpki-client