Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
File:                     QDrQFAXpeziMuD5pbQudgLuguLg.mft (raw, json)
Hash identifier:          ql8ODW/CCs1/adF8/9Y16c+2SKt1m0gtAWOglcif5lc=
Subject key identifier:   BC:D1:61:3D:3E:3D:11:6D:EF:44:F6:40:12:5A:F0:92:A8:92:1C:A5
Authority key identifier: 40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Certificate issuer:       /CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Certificate serial:       0690
Authority info access:    rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
Manifest number:          068F
Signing time:             Wed 18 Jun 2025 02:56:44 +0000
Manifest this update:     Wed 18 Jun 2025 02:56:43 +0000
Manifest next update:     Fri 20 Jun 2025 02:56:43 +0000
Files and hashes:         1: QDrQFAXpeziMuD5pbQudgLuguLg.crl (hash: don7gLV8qPFme29YLMAtvHd3/4XtWYbFprmpJHExTfU=)
                          2: 2295CF68523711EEB515D05D4AD9E6FC.roa (hash: KlQWt1tn1KH/CPgIYBRda65+Ao1w8Du+dkLesEZUQIQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                          rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 20 Jun 2025 00:36:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1680 (0x690)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216LA, serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
        Validity
            Not Before: Jun 18 02:56:43 2025 GMT
            Not After : Jun 20 02:56:43 2025 GMT
        Subject: CN=68522aec-8d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:51:19:2e:db:96:cf:f0:0f:7c:12:5a:6e:c1:
                    a8:43:a8:ef:a2:23:d9:bb:7b:6d:aa:92:14:6d:c1:
                    17:b7:65:c7:cc:65:88:cc:50:8d:5d:33:52:d2:8b:
                    6e:6a:89:f4:0e:d3:4f:2b:17:51:ca:20:a7:17:60:
                    7d:8d:b3:8e:3c:a3:72:1b:25:f5:e4:78:cf:58:e0:
                    8a:60:60:e9:1d:16:89:ee:81:33:07:f8:44:0f:a5:
                    cf:da:25:e4:c5:30:45:f7:3f:5d:96:92:2c:28:80:
                    1f:c6:a7:a5:13:7b:32:17:47:4b:76:c8:db:50:cf:
                    e4:6e:b8:dc:cd:76:62:96:05:17:9e:56:03:06:6f:
                    a7:1a:09:95:23:94:84:f1:dc:e0:02:f8:37:11:e6:
                    59:3d:51:24:a3:63:15:2b:b9:32:d0:d7:4c:2c:0a:
                    e3:2a:8d:b7:7c:43:13:e4:39:b7:69:d4:a6:34:7e:
                    82:ed:3c:80:66:0f:ce:67:b7:35:f6:f5:19:24:1e:
                    c0:2a:36:42:d8:bf:87:69:b2:77:9e:7a:8b:c6:38:
                    b8:b9:d4:03:23:1f:77:ec:f3:31:7a:ca:f4:03:a5:
                    f6:aa:f8:53:03:98:cb:5f:2b:9a:71:33:1d:22:ec:
                    71:c8:65:67:56:dd:40:d0:6d:25:e8:99:23:fa:ff:
                    88:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D1:61:3D:3E:3D:11:6D:EF:44:F6:40:12:5A:F0:92:A8:92:1C:A5
            X509v3 Authority Key Identifier:
                keyid:40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:cf:fc:1e:d0:d1:e6:96:46:77:7c:eb:2b:1d:1e:b2:ed:0b:
         a9:21:05:43:d2:07:c9:59:21:ca:16:fb:19:05:d1:5f:6f:8a:
         74:ab:10:1c:0b:5e:65:a9:da:44:f6:e9:70:30:17:90:98:4a:
         90:c5:67:8b:02:fd:96:e8:15:07:e0:b8:d3:b0:70:ae:4f:11:
         5b:44:97:b8:db:9e:a2:76:ee:32:06:36:eb:e8:be:43:1e:8c:
         85:f3:d6:4d:2a:da:29:84:14:f3:03:d3:df:c2:a0:41:e3:cc:
         1b:42:e5:b9:41:c9:8f:a5:fe:59:f3:89:ae:74:1c:47:12:37:
         8c:4b:d9:fe:92:7b:5c:e3:99:df:ac:b7:18:b8:81:be:4a:4e:
         ec:cc:a8:64:62:85:27:36:dc:f2:6f:42:25:6c:2d:34:60:41:
         89:9d:77:c7:38:ee:7c:74:9c:0e:69:98:02:2e:13:6c:04:76:
         c0:3a:93:ea:a2:ad:e2:06:9e:46:e7:ef:f9:32:86:48:e6:14:
         7a:92:0a:42:1b:52:aa:65:4f:15:a3:22:43:39:7f:3d:55:9d:
         de:0a:eb:8a:7a:b4:e3:37:c8:aa:ef:73:35:12:13:be:37:7a:
         3d:78:f5:11:a8:fb:5b:d7:92:68:82:59:71:dc:a2:31:fa:ba:
         6f:79:4b:e3
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgICBpAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0IyMTZMQTExMC8GA1UEBRMoNDAzQUQwMTQwNUU5N0IzODhDQjgzRTY5NkQwQjlE
ODBCQkEwQjhCODAeFw0yNTA2MTgwMjU2NDNaFw0yNTA2MjAwMjU2NDNaMBgxFjAU
BgNVBAMTDTY4NTIyYWVjLThkMDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCwURku25bP8A98ElpuwahDqO+iI9m7e22qkhRtwRe3ZcfMZYjMUI1dM1LS
i25qifQO008rF1HKIKcXYH2Ns448o3IbJfXkeM9Y4IpgYOkdFonugTMH+EQPpc/a
JeTFMEX3P12WkiwogB/Gp6UTezIXR0t2yNtQz+RuuNzNdmKWBReeVgMGb6caCZUj
lITx3OAC+DcR5lk9USSjYxUruTLQ10wsCuMqjbd8QxPkObdp1KY0foLtPIBmD85n
tzX29RkkHsAqNkLYv4dpsneeeovGOLi51AMjH3fs8zF6yvQDpfaq+FMDmMtfK5px
Mx0i7HHIZWdW3UDQbSXomSP6/4hLAgMBAAGjggK3MIICszAdBgNVHQ4EFgQUvNFh
PT49EW3vRPZAElrwkqiSHKUwHwYDVR0jBBgwFoAUQDrQFAXpeziMuD5pbQudgLug
uLgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCMjE2LzQ2NUU0OEJFODdENTExRUI5NTU1NDI0N0Y4QUVBMjI4L1FEclFG
QVhwZXppTXVENXBiUXVkZ0x1Z3VMZy5jcmwwZgYIKwYBBQUHAQEEWjBYMFYGCCsG
AQUFBzAChkpyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9sYWNu
aWMvUURyUUZBWHBlemlNdUQ1cGJRdWRnTHVndUxnLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY3QjIxNi80NjVFNDhCRTg3RDUxMUVCOTU1NTQyNDdGOEFF
QTIyOC9RRHJRRkFYcGV6aU11RDVwYlF1ZGdMdWd1TGcubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBAKnP/B7Q0eaWRnd86ysdHrLtC6khBUPS
B8lZIcoW+xkF0V9vinSrEBwLXmWp2kT26XAwF5CYSpDFZ4sC/ZboFQfguNOwcK5P
EVtEl7jbnqJ27jIGNuvovkMejIXz1k0q2imEFPMD09/CoEHjzBtC5blByY+l/lnz
ia50HEcSN4xL2f6Se1zjmd+stxi4gb5KTuzMqGRihSc23PJvQiVsLTRgQYmdd8c4
7nx0nA5pmAIuE2wEdsA6k+qireIGnkbn7/kyhkjmFHqSCkIbUqplTxWjIkM5fz1V
nd4K64p6tOM3yKrvczUSE743ej149RGo+1vXkmiCWXHcojH6um95S+M=
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:35:59 2025 by rpki-client