Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
File:                     LmD5YTFKp9b93e6durMSN0cF5ss.mft (raw, json)
Hash identifier:          4lavEUb9odS/EP7Hs+1Sg6LVtToJjY4W4l036g7LN18=
Subject key identifier:   1F:BF:3D:40:B8:1B:69:2C:BC:B9:B0:BD:91:98:1C:32:99:BD:88:C1
Authority key identifier: 2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB
Certificate issuer:       /CN=F36FC8A0AF/serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
Certificate serial:       042E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
Manifest number:          042D
Signing time:             Tue 28 Jul 2026 03:44:34 +0000
Manifest this update:     Tue 28 Jul 2026 03:44:33 +0000
Manifest next update:     Thu 30 Jul 2026 03:44:33 +0000
Files and hashes:         1: LmD5YTFKp9b93e6durMSN0cF5ss.crl (hash: Hv9kovtBIl+OgXkmXogb852GXgk3K3pwHlriHXXOg2c=)
                          2: 333100CC56E711EEB82D22544AD9E6FC.roa (hash: iWB0O9f+LLwbK/f70tuWF05AYGrsYH+zV7rCgvpguSc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 30 Jul 2026 03:44:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1070 (0x42e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC8A0AF, serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
        Validity
            Not Before: Jul 28 03:44:33 2026 GMT
            Not After : Jul 30 03:44:33 2026 GMT
        Subject: CN=6a6825a2-afc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8b:21:b7:3b:1d:0f:59:29:5b:5b:b8:95:d4:
                    e6:41:d4:d5:25:b7:f1:1f:52:e8:41:bf:06:22:ed:
                    29:82:6a:61:46:62:21:19:ad:33:16:21:32:00:0b:
                    5f:48:6e:08:8c:73:c0:0b:90:22:af:e3:db:70:ed:
                    99:b8:0d:3e:bb:ab:b0:c4:78:a8:43:e5:9c:72:89:
                    70:f7:b7:1a:52:70:44:b1:06:f9:c6:a0:51:04:63:
                    18:11:d9:65:97:24:65:81:31:08:d3:1a:b6:de:8b:
                    66:78:da:0b:d8:f5:15:49:14:cd:5f:3b:90:23:d8:
                    95:9f:d9:e1:ea:9f:f7:c7:75:e5:69:d5:d3:5c:f9:
                    73:bc:77:08:da:ac:6c:f1:68:9f:a1:fe:ba:ff:78:
                    79:e7:04:e1:f7:09:50:bb:89:41:42:70:71:61:1f:
                    41:7f:5b:34:c6:82:13:64:80:e0:6a:22:ea:30:8a:
                    52:f6:d9:67:51:0d:87:aa:5e:65:af:72:62:f7:f4:
                    c6:90:b7:13:23:16:ad:b7:47:d5:6b:67:4c:0f:fe:
                    1b:de:b8:6f:7c:40:0c:d7:7a:eb:76:96:73:8c:e2:
                    bc:2f:75:84:fc:68:e1:f8:b8:28:c3:7f:1f:49:a2:
                    cd:3a:ac:18:fd:b0:04:37:12:87:0d:52:e9:26:68:
                    da:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BF:3D:40:B8:1B:69:2C:BC:B9:B0:BD:91:98:1C:32:99:BD:88:C1
            X509v3 Authority Key Identifier:
                keyid:2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:bc:a1:49:41:0f:f7:a1:a6:94:d9:5b:b9:ae:09:57:f3:
         d2:71:51:5c:59:de:4b:b5:17:77:be:2e:68:3b:3f:98:d6:46:
         11:bb:da:9b:73:e0:92:ec:00:bf:f4:41:e5:24:9b:73:2a:55:
         cd:9d:0a:34:e6:99:80:6c:0f:6f:78:08:1f:51:58:b8:50:f1:
         28:f6:e9:a8:ae:6d:72:e9:24:bf:3c:bc:73:22:25:93:80:a3:
         1e:75:bd:2f:b1:db:46:11:34:ce:a5:a2:94:00:27:43:44:4e:
         2a:c9:a0:d5:7f:98:fb:06:34:b3:97:c5:c1:ae:9e:16:c8:07:
         1b:90:83:ad:35:eb:fc:36:33:56:d2:f4:39:7d:ee:7d:ab:da:
         fb:6e:42:34:cf:34:5c:15:48:3d:db:81:b2:8b:67:00:b8:df:
         fc:17:9a:7a:85:f0:85:69:8e:0f:f5:a9:05:c0:46:96:c3:ff:
         c8:53:2e:0a:43:4d:11:4d:09:4f:d2:6c:db:9e:85:11:81:a8:
         22:4e:b8:05:2d:70:57:b9:fc:d7:54:de:d7:cb:46:35:a3:0f:
         fe:26:0b:13:4f:85:1e:d2:64:e3:1f:12:68:e0:db:6b:60:99:
         ab:a8:75:8c:a8:69:18:a7:c6:df:c3:94:36:cc:24:79:66:92:
         15:7d:96:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:24:29 2026 by rpki-client