Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
File:                     l9Y19-2_mFQOYSLJxsIL43gotSY.mft (raw, json)
Hash identifier:          rZ1VHLqZPHY368u/KNit6cQuTNlHyNS3uOcpDfpEqTY=
Subject key identifier:   02:30:E5:AF:23:83:11:C9:78:B5:70:37:46:53:4B:EE:FD:98:70:2B
Authority key identifier: 97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26
Certificate issuer:       /CN=F3624E32AF/serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
Certificate serial:       0378
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
Manifest number:          0377
Signing time:             Wed 17 Sep 2025 03:28:07 +0000
Manifest this update:     Wed 17 Sep 2025 03:28:07 +0000
Manifest next update:     Fri 19 Sep 2025 03:28:07 +0000
Files and hashes:         1: l9Y19-2_mFQOYSLJxsIL43gotSY.crl (hash: wCJXST8gh2aIaSvP8gS1bDB2DtPc+LBkjnA+MSOHPpI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 03:28:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 888 (0x378)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AF, serialNumber=97D635F7EDBF98540E6122C9C6C20BE37828B526
        Validity
            Not Before: Sep 17 03:28:07 2025 GMT
            Not After : Sep 19 03:28:07 2025 GMT
        Subject: CN=68ca2ac7-129f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b4:8a:2c:61:39:ef:4d:a8:79:6c:9c:3a:dd:
                    70:13:27:c9:27:2f:1f:6e:a5:f0:02:6d:2d:0b:d0:
                    a7:81:6d:fa:83:c7:fa:66:e3:07:43:47:02:44:b8:
                    5d:1b:5d:cf:3e:76:fa:5d:c2:0b:46:77:60:48:06:
                    32:9d:1a:0e:98:e6:28:8d:61:41:b3:d1:54:33:a7:
                    9f:37:89:30:72:45:42:38:42:7f:87:1b:8f:3c:c8:
                    59:64:42:c9:2a:08:8f:34:e7:ad:29:c8:1c:d2:3c:
                    87:99:f2:08:18:a3:a6:af:9f:1b:f8:db:31:68:f1:
                    08:32:57:87:3c:6b:93:ec:00:77:13:71:4f:f7:4f:
                    1b:78:5a:67:5f:26:a8:ae:c4:d8:42:ca:d1:c8:db:
                    33:6c:53:62:6f:f2:6a:e3:8d:76:49:1a:8f:43:b3:
                    42:ef:5c:4b:96:c6:ce:ac:ad:4f:39:87:ca:7f:f7:
                    6d:53:f4:48:ef:fa:b8:d1:51:9c:0b:fd:6e:8b:93:
                    1e:59:92:f9:86:dc:8c:45:30:de:c2:de:56:44:4e:
                    d6:98:9d:40:d4:20:bd:95:74:de:70:d1:4e:32:7e:
                    63:32:0a:76:c1:57:39:53:c7:8f:58:0d:6c:79:7a:
                    81:92:ef:a6:fa:3a:a5:b2:b3:d0:58:1b:9f:52:44:
                    00:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:30:E5:AF:23:83:11:C9:78:B5:70:37:46:53:4B:EE:FD:98:70:2B
            X509v3 Authority Key Identifier:
                keyid:97:D6:35:F7:ED:BF:98:54:0E:61:22:C9:C6:C2:0B:E3:78:28:B5:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/l9Y19-2_mFQOYSLJxsIL43gotSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/08D6A70AEE7311ED942F54164AD9E6FC/l9Y19-2_mFQOYSLJxsIL43gotSY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:9d:c7:7f:15:11:64:7f:ab:91:a3:eb:fe:b2:61:83:7c:a6:
         78:c0:c5:25:5d:e1:07:fe:4c:69:29:4b:51:0d:93:53:bb:04:
         90:ed:c7:a0:ed:aa:05:3e:ea:3b:2f:d6:e5:a2:34:a9:07:87:
         9f:39:da:79:f2:3c:f6:54:f8:ce:cd:c6:af:3c:74:b6:68:76:
         d9:f0:e5:a4:14:8d:0e:c8:b0:f8:ef:11:7a:c3:22:e5:05:cd:
         72:d4:d1:66:cd:ae:6e:ef:74:9d:3d:aa:99:ec:15:04:0a:48:
         a1:86:7f:1b:35:6c:1f:fa:d5:3c:17:34:c9:5b:99:e2:f7:f0:
         be:12:26:47:84:60:34:5a:8e:eb:ac:82:0e:ae:7f:dc:8e:0f:
         66:e4:4f:93:cb:74:3a:5e:cf:4e:35:db:11:ff:a4:3b:7c:40:
         19:43:7d:eb:93:1e:65:04:1c:55:74:fa:1e:9c:1d:64:ca:f8:
         3b:72:5c:81:a7:5e:bb:7d:a1:c4:ab:18:af:32:9e:23:56:bd:
         68:93:97:ec:48:98:f3:6b:69:9d:56:96:e4:e1:b6:3a:a9:cc:
         c1:45:a9:44:f0:2a:1e:bd:22:bb:d3:05:19:50:53:8e:06:87:
         12:a1:3e:ec:4e:ea:38:d8:ff:2c:d2:99:8b:25:64:14:3b:e9:
         08:b7:c9:fd
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjRFMzJBRjExMC8GA1UEBRMoOTdENjM1RjdFREJGOTg1NDBFNjEyMkM5QzZDMjBC
RTM3ODI4QjUyNjAeFw0yNTA5MTcwMzI4MDdaFw0yNTA5MTkwMzI4MDdaMBgxFjAU
BgNVBAMTDTY4Y2EyYWM3LTEyOWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCytIosYTnvTah5bJw63XATJ8knLx9upfACbS0L0KeBbfqDx/pm4wdDRwJE
uF0bXc8+dvpdwgtGd2BIBjKdGg6Y5iiNYUGz0VQzp583iTByRUI4Qn+HG488yFlk
QskqCI80560pyBzSPIeZ8ggYo6avnxv42zFo8QgyV4c8a5PsAHcTcU/3Txt4Wmdf
JqiuxNhCytHI2zNsU2Jv8mrjjXZJGo9Ds0LvXEuWxs6srU85h8p/921T9Ejv+rjR
UZwL/W6Lkx5ZkvmG3IxFMN7C3lZETtaYnUDUIL2VdN5w0U4yfmMyCnbBVzlTx49Y
DWx5eoGS76b6OqWys9BYG59SRADXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUAjDl
ryODEcl4tXA3RlNL7v2YcCswHwYDVR0jBBgwFoAUl9Y19+2/mFQOYSLJxsIL43go
tSYwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0RTMyLzA4RDZBNzBBRUU3MzExRUQ5NDJGNTQxNjRBRDlFNkZDL2w5WTE5
LTJfbUZRT1lTTEp4c0lMNDNnb3RTWS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2w5WTE5LTJfbUZRT1lTTEp4c0lMNDNnb3RTWS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MjRFMzIvMDhENkE3MEFFRTczMTFFRDk0MkY1NDE2NEFE
OUU2RkMvbDlZMTktMl9tRlFPWVNMSnhzSUw0M2dvdFNZLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBRncd/FRFkf6uRo+v+smGDfKZ4wMUl
XeEH/kxpKUtRDZNTuwSQ7ceg7aoFPuo7L9blojSpB4efOdp58jz2VPjOzcavPHS2
aHbZ8OWkFI0OyLD47xF6wyLlBc1y1NFmza5u73SdPaqZ7BUECkihhn8bNWwf+tU8
FzTJW5ni9/C+EiZHhGA0Wo7rrIIOrn/cjg9m5E+Ty3Q6Xs9ONdsR/6Q7fEAZQ33r
kx5lBBxVdPoenB1kyvg7clyBp167faHEqxivMp4jVr1ok5fsSJjza2mdVpbk4bY6
qczBRalE8CoevSK70wUZUFOOBocSoT7sTuo42P8s0pmLJWQUO+kIt8n9
-----END CERTIFICATE-----
Generated at Thu Sep 18 03:55:25 2025 by rpki-client