Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
File:                     _lkJnrBGBmU3CfmlmpxGdQcb7L0.mft (raw, json)
Hash identifier:          +pZJi5U6elIFpK8ee1jLngwM98X6RmiAamq5IhRPXfI=
Subject key identifier:   6E:B2:8C:A3:A9:4A:B1:EA:8D:B4:6F:C5:E1:B0:AC:48:73:35:AC:D7
Authority key identifier: FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD
Certificate issuer:       /CN=F36A141DAF/serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
Certificate serial:       02AE
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
Manifest number:          02AD
Signing time:             Sun 15 Jun 2025 04:00:38 +0000
Manifest this update:     Sun 15 Jun 2025 04:00:38 +0000
Manifest next update:     Tue 17 Jun 2025 04:00:38 +0000
Files and hashes:         1: _lkJnrBGBmU3CfmlmpxGdQcb7L0.crl (hash: Z9HtZkiMRndgi4EvIksBIMhDuJFyX9Qw2gr+Z+1oxUw=)
                          2: A6CB045440CD11EEA84BD2644AD9E6FC.roa (hash: k2NQBaUwb1pqhxKitutyFUj84i7cH4npO1gBOUjSKLM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 04:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 686 (0x2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A141DAF, serialNumber=FE59099EB04606653709F9A59A9C4675071BECBD
        Validity
            Not Before: Jun 15 04:00:38 2025 GMT
            Not After : Jun 17 04:00:38 2025 GMT
        Subject: CN=684e4566-b65d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8f:ab:1b:a7:91:fe:82:57:57:56:53:a4:e0:
                    16:eb:5a:b8:ee:c5:8b:ea:b9:57:e3:b5:a7:43:e5:
                    03:23:d5:91:2d:44:2d:c3:9b:43:5e:b7:67:2f:06:
                    e3:22:ce:2f:90:f2:8b:d5:e9:e6:99:70:b7:09:b8:
                    0e:e5:70:16:a1:29:b5:2e:3d:81:45:1b:e8:79:cd:
                    b9:fb:2d:00:18:80:16:19:5e:64:87:39:09:18:2a:
                    e1:80:55:80:93:1d:d5:b8:86:8b:f9:8f:98:e1:56:
                    8c:91:d0:06:34:05:49:95:00:a0:77:65:85:23:9f:
                    b6:ce:41:92:72:61:68:50:15:7a:e0:e1:bf:7b:20:
                    94:43:65:c3:25:7d:99:99:56:df:08:8d:4e:eb:34:
                    8f:03:89:90:c0:fd:29:7f:31:73:49:72:b9:4e:ec:
                    23:97:09:14:65:88:5f:5d:f0:26:ab:66:a6:9a:80:
                    f4:e9:ca:69:d0:5b:8e:00:e5:25:9b:45:01:81:c7:
                    4c:ef:8a:91:40:58:d5:2e:6d:e7:b1:33:8b:75:37:
                    0d:fd:a3:e7:b0:e3:1e:1e:9c:f0:e4:b4:96:9a:25:
                    7b:98:2a:6b:2e:52:9e:13:98:57:99:67:38:ce:a1:
                    ab:d7:13:fc:fa:bf:c2:65:4b:7b:a9:ed:59:cf:b9:
                    d9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B2:8C:A3:A9:4A:B1:EA:8D:B4:6F:C5:E1:B0:AC:48:73:35:AC:D7
            X509v3 Authority Key Identifier:
                keyid:FE:59:09:9E:B0:46:06:65:37:09:F9:A5:9A:9C:46:75:07:1B:EC:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/_lkJnrBGBmU3CfmlmpxGdQcb7L0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A141D/F5488EF440C711EEB59A4D534AD9E6FC/_lkJnrBGBmU3CfmlmpxGdQcb7L0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:7f:bc:8b:5d:5f:98:0c:54:71:32:5a:d0:7b:f5:cc:29:83:
         08:bc:79:b8:8c:6e:a6:bf:9d:23:59:89:89:8e:27:1c:d5:d2:
         6d:46:2a:03:c1:df:c1:9c:20:c5:75:0f:0a:5b:db:c9:61:1d:
         b9:15:a5:d3:53:fe:c2:08:d8:71:08:95:eb:45:a8:fd:9b:24:
         f3:e5:71:b5:9b:36:12:8e:95:b8:b0:57:a0:a3:b9:48:c1:95:
         11:19:8c:29:fe:b5:f0:25:38:71:fb:57:86:dc:ee:7f:f8:7c:
         f0:89:f3:e1:ac:51:6c:dd:f0:e1:39:99:1f:fd:6b:44:d6:7c:
         cf:90:ef:21:75:1f:0c:bf:01:5e:6f:e7:e4:77:49:28:0c:88:
         92:d1:63:e4:09:d5:52:8a:4d:3c:1e:06:d6:ca:ab:2a:77:05:
         9e:ca:7d:d2:f3:44:0a:42:97:e4:35:29:7d:a1:17:2f:26:01:
         f4:59:af:01:4e:01:e3:21:8e:1e:3c:a1:8a:26:67:42:6c:f2:
         8e:07:7b:51:ea:b2:dd:dd:d2:c9:0c:8a:2a:2d:c0:9d:e0:dc:
         9f:b8:52:ff:65:45:a7:49:8d:c4:51:a2:fe:58:58:11:3e:ed:
         c1:7e:54:f5:09:9d:f6:7d:5f:6c:00:d2:9d:8e:97:00:1e:04:
         73:14:7a:7d
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAq4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QTE0MURBRjExMC8GA1UEBRMoRkU1OTA5OUVCMDQ2MDY2NTM3MDlGOUE1OUE5QzQ2
NzUwNzFCRUNCRDAeFw0yNTA2MTUwNDAwMzhaFw0yNTA2MTcwNDAwMzhaMBgxFjAU
BgNVBAMTDTY4NGU0NTY2LWI2NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQD4j6sbp5H+gldXVlOk4BbrWrjuxYvquVfjtadD5QMj1ZEtRC3Dm0Net2cv
BuMizi+Q8ovV6eaZcLcJuA7lcBahKbUuPYFFG+h5zbn7LQAYgBYZXmSHOQkYKuGA
VYCTHdW4hov5j5jhVoyR0AY0BUmVAKB3ZYUjn7bOQZJyYWhQFXrg4b97IJRDZcMl
fZmZVt8IjU7rNI8DiZDA/Sl/MXNJcrlO7COXCRRliF9d8CarZqaagPTpymnQW44A
5SWbRQGBx0zvipFAWNUubeexM4t1Nw39o+ew4x4enPDktJaaJXuYKmsuUp4TmFeZ
ZzjOoavXE/z6v8JlS3up7VnPudlBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUbrKM
o6lKseqNtG/F4bCsSHM1rNcwHwYDVR0jBBgwFoAU/lkJnrBGBmU3CfmlmpxGdQcb
7L0wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkExNDFEL0Y1NDg4RUY0NDBDNzExRUVCNTlBNEQ1MzRBRDlFNkZDL19sa0pu
ckJHQm1VM0NmbWxtcHhHZFFjYjdMMC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL19sa0puckJHQm1VM0NmbWxtcHhHZFFjYjdMMC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QTE0MUQvRjU0ODhFRjQ0MEM3MTFFRUI1OUE0RDUzNEFE
OUU2RkMvX2xrSm5yQkdCbVUzQ2ZtbG1weEdkUWNiN0wwLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA6f7yLXV+YDFRxMlrQe/XMKYMIvHm4
jG6mv50jWYmJjicc1dJtRioDwd/BnCDFdQ8KW9vJYR25FaXTU/7CCNhxCJXrRaj9
myTz5XG1mzYSjpW4sFego7lIwZURGYwp/rXwJThx+1eG3O5/+HzwifPhrFFs3fDh
OZkf/WtE1nzPkO8hdR8MvwFeb+fkd0koDIiS0WPkCdVSik08HgbWyqsqdwWeyn3S
80QKQpfkNSl9oRcvJgH0Wa8BTgHjIY4ePKGKJmdCbPKOB3tR6rLd3dLJDIoqLcCd
4NyfuFL/ZUWnSY3EUaL+WFgRPu3BflT1CZ32fV9sANKdjpcAHgRzFHp9
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:17:18 2025 by rpki-client