Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
File:                     _lkJnrBGBmU3CfmlmpxGdQcb7L0.mft (raw, json)
Hash identifier:          hECWZfke0yQj9A2mujH0P0vnneit+SsWlF03t68cmNE=
Subject key identifier:   62:6B:6D:00:9A:1D:A3:75:7C:6A:E8:7F:08:6F:6A:E9:AE:19:13:57
Authority key identifier: FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD
Certificate issuer:       /CN=F36A141DAF/serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
Certificate serial:       033F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
Manifest number:          033E
Signing time:             Wed 05 Nov 2025 03:54:32 +0000
Manifest this update:     Wed 05 Nov 2025 03:54:31 +0000
Manifest next update:     Fri 07 Nov 2025 03:54:31 +0000
Files and hashes:         1: _lkJnrBGBmU3CfmlmpxGdQcb7L0.crl (hash: J9qlpYX1lkUIAY11tIgnzIG/qWRH55TR/LQP3jR90k8=)
                          2: A6CB045440CD11EEA84BD2644AD9E6FC.roa (hash: k2NQBaUwb1pqhxKitutyFUj84i7cH4npO1gBOUjSKLM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 831 (0x33f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A141DAF, serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
        Validity
            Not Before: Nov  5 03:54:31 2025 GMT
            Not After : Nov  7 03:54:31 2025 GMT
        Subject: CN=690aca78-d982
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4e:e8:51:9e:7f:ea:ef:b9:55:1f:ce:d4:80:
                    fd:52:7e:c6:5b:46:be:50:89:b1:bb:d4:21:f6:b5:
                    6b:56:49:05:4d:8d:fa:72:a5:b3:dc:de:ca:a2:5a:
                    f3:cf:8a:32:f4:68:eb:d0:a5:fb:cc:63:a7:08:78:
                    c8:a5:ff:88:d9:61:40:f0:75:33:01:d2:37:e5:9d:
                    b7:f3:56:f4:13:7e:8d:6a:91:94:c4:5e:13:79:28:
                    24:9b:ef:f9:cf:ab:8c:8a:ec:a3:af:6b:5f:18:22:
                    99:cb:d4:5d:de:99:52:3b:d9:39:56:cc:98:9d:86:
                    db:fe:3f:b5:38:09:5d:a4:ad:02:18:63:2a:d7:1c:
                    a6:a5:c8:73:36:a7:cb:37:76:94:d0:ff:58:9e:aa:
                    d3:d1:93:d5:56:21:29:6f:9d:5a:87:1a:9d:eb:9d:
                    e0:03:3b:26:60:96:94:e6:4e:6a:43:c8:62:c9:04:
                    6f:cf:2b:6b:e2:f4:54:cf:98:a9:c7:b3:ff:91:b3:
                    6e:f3:2b:4d:7e:60:56:54:f8:19:9c:17:9a:0d:5d:
                    c5:a2:11:68:d3:d9:5c:4b:b3:02:33:aa:f9:da:af:
                    7c:08:01:ef:b4:e5:5f:27:74:8d:58:ec:bf:f3:b2:
                    14:b2:0d:68:5b:1f:6f:81:12:ec:8f:14:08:af:33:
                    c7:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:6B:6D:00:9A:1D:A3:75:7C:6A:E8:7F:08:6F:6A:E9:AE:19:13:57
            X509v3 Authority Key Identifier:
                keyid:FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:0c:8b:9a:2e:a3:e2:17:13:bd:4c:97:f0:94:7f:54:34:2e:
         bf:d4:97:c9:03:2b:18:bd:67:7c:1d:56:a8:73:8e:43:89:0a:
         81:51:68:70:fe:04:1d:84:37:99:c4:b2:ce:d2:38:83:66:77:
         e7:31:87:20:63:08:b1:c7:48:3e:ed:dd:24:59:81:d1:d7:d6:
         df:ce:9e:c9:b8:8a:ff:27:d0:0d:5e:1b:8a:a4:86:10:6f:9f:
         92:fd:be:01:42:9a:e5:56:06:76:4e:e2:af:53:2a:c7:0c:da:
         a9:fb:df:38:48:7e:ee:e7:38:4d:37:e8:f3:27:0b:07:3c:09:
         5c:51:13:db:5d:71:61:54:65:e9:82:35:e9:f3:62:b4:a2:f5:
         ed:0e:cd:43:f4:4f:a9:a6:bd:33:fc:9e:e1:d5:98:74:fa:0c:
         34:65:a6:13:2c:71:06:29:20:19:10:d2:8f:0d:58:d6:7a:79:
         d1:53:46:2a:c9:c9:5b:81:ea:ea:a2:5c:63:89:65:47:93:3d:
         48:be:2c:90:89:ed:3b:5f:02:c0:3a:88:8f:f8:1f:23:cf:14:
         ef:8d:d6:ff:55:c5:2b:60:a3:ca:1d:b5:fb:94:c1:fe:03:9d:
         0d:e0:2f:6f:c3:50:47:58:97:9f:e3:bd:09:77:cc:07:dd:d9:
         b0:d4:38:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:35:34 2025 by rpki-client