Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
File:                     LjUlNVWULww8pjeATUbZWgKk-ek.mft (raw, json)
Hash identifier:          ZejVdDCpeB/mN7cvNrgb/UuC2yGm3h2eC9pZxtWmydU=
Subject key identifier:   30:CA:5B:A1:D5:98:B4:5B:74:BE:5C:93:B1:13:9B:A9:BC:D3:C0:B8
Authority key identifier: 2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
Certificate issuer:       /CN=F3627BD6AR/serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
Certificate serial:       0F3A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
Manifest number:          0F35
Signing time:             Sat 31 Oct 2026 01:02:22 +0000
Manifest this update:     Sat 31 Oct 2026 01:02:22 +0000
Manifest next update:     Mon 02 Nov 2026 01:02:22 +0000
Files and hashes:         1: LjUlNVWULww8pjeATUbZWgKk-ek.crl (hash: 6+mtAYPJZH2gfYF51IcOPe5yySXiRaZZfRcGgpQfUpQ=)
                          2: 7FAE258E8C0811F1954847E1CE1D38B0.roa (hash: gYLuwqv/Jon5ookF4+rJrsGD0ySTLCd3p+wokkaSSpA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                          rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 02 Nov 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3898 (0xf3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627BD6AR, serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
        Validity
            Not Before: Oct 31 01:02:22 2026 GMT
            Not After : Nov  2 01:02:22 2026 GMT
        Subject: CN=6ae53e1e-b73a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:59:c1:14:7d:cf:e1:e5:28:f0:d3:39:e2:23:
                    bb:eb:2b:8b:74:fe:4b:e5:18:ee:00:ac:22:fe:ba:
                    81:2f:8f:f5:06:ea:f8:cd:9f:70:df:77:e4:3a:55:
                    2f:01:a0:1c:e8:8b:e5:52:8b:77:a8:85:27:3d:bf:
                    ab:83:ac:75:db:a1:66:ac:7e:22:db:d9:a6:f1:03:
                    ae:60:7c:5f:4c:51:db:ee:26:44:e4:93:77:27:23:
                    34:c8:c4:5e:b3:0f:46:7e:9a:8a:06:55:68:13:46:
                    c6:b9:71:68:c1:40:1c:f3:9d:58:8b:c2:c2:cc:12:
                    2c:d8:00:bb:81:f2:c7:70:f3:90:9c:7c:e7:a6:a9:
                    15:a7:fc:5b:31:9e:47:d8:7f:da:3b:bd:15:a3:bd:
                    83:f7:82:b2:32:2f:8b:b2:a7:ec:3a:5d:ba:b4:45:
                    36:86:4f:5b:b5:0b:19:8b:55:a0:d6:4f:60:9d:08:
                    6f:8b:4f:18:d8:db:f5:4a:0e:de:0c:67:44:36:b8:
                    66:c9:c8:51:40:08:82:f7:f6:63:10:6e:fd:02:42:
                    a7:1d:b6:7f:79:ac:05:41:07:94:2b:68:32:17:6c:
                    7d:39:1d:92:cc:27:a6:4f:47:e9:6e:cc:a6:e6:51:
                    a9:de:a1:13:fc:12:8e:70:a7:77:fa:ea:fd:da:0a:
                    c0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CA:5B:A1:D5:98:B4:5B:74:BE:5C:93:B1:13:9B:A9:BC:D3:C0:B8
            X509v3 Authority Key Identifier:
                keyid:2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:7b:28:68:7a:3e:c9:ee:4c:0d:74:36:f2:0b:6d:7c:88:a2:
         a3:03:10:6c:3e:f3:aa:c1:b0:1e:d7:36:a0:f0:9d:79:5d:fb:
         98:45:18:45:5e:88:85:12:e5:0f:9e:3a:86:2b:88:df:94:ca:
         30:a5:08:3d:8a:d3:53:3e:a3:62:ab:a2:75:e9:5d:bf:6e:72:
         37:6b:6d:0b:02:35:fa:7d:90:b6:e3:5e:31:7e:b0:16:cc:ba:
         81:eb:3c:0b:57:b8:39:ad:5b:83:e8:ed:a2:b6:3f:be:42:6c:
         cc:02:c8:94:99:7d:1b:ce:ca:46:e3:02:24:1e:ab:20:b8:69:
         ea:34:b3:8d:71:26:da:71:7c:2d:a1:6f:f5:9d:4e:2e:b8:bb:
         27:14:ff:ed:13:0e:eb:ef:1d:9a:23:a4:a9:a7:c3:68:1e:b5:
         bb:d4:18:26:be:bd:81:80:b4:75:28:52:c2:59:00:9d:ce:1e:
         ef:3c:69:92:af:11:51:e7:ee:ca:72:55:30:57:39:68:fd:66:
         9e:7b:87:67:70:8d:ef:83:17:14:29:46:28:af:f5:e5:79:a7:
         19:58:e8:5a:65:4f:c3:0d:1f:0a:6c:e5:b0:d7:ab:68:f8:10:
         25:dd:b1:b0:78:1d:4c:e2:1b:23:4a:10:65:44:30:be:5f:81:
         9f:07:ed:f5
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDzowDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjdCRDZBUjExMC8GA1UEBRMoMkUzNTI1MzU1NTk0MkYwQzNDQTYzNzgwNEQ0NkQ5
NUEwMkE0RjlFOTAeFw0yNjEwMzEwMTAyMjJaFw0yNjExMDIwMTAyMjJaMBgxFjAU
BgNVBAMTDTZhZTUzZTFlLWI3M2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDgWcEUfc/h5Sjw0zniI7vrK4t0/kvlGO4ArCL+uoEvj/UG6vjNn3Dfd+Q6
VS8BoBzoi+VSi3eohSc9v6uDrHXboWasfiLb2abxA65gfF9MUdvuJkTkk3cnIzTI
xF6zD0Z+mooGVWgTRsa5cWjBQBzznViLwsLMEizYALuB8sdw85CcfOemqRWn/Fsx
nkfYf9o7vRWjvYP3grIyL4uyp+w6Xbq0RTaGT1u1CxmLVaDWT2CdCG+LTxjY2/VK
Dt4MZ0Q2uGbJyFFACIL39mMQbv0CQqcdtn95rAVBB5QraDIXbH05HZLMJ6ZPR+lu
zKbmUaneoRP8Eo5wp3f66v3aCsDvAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUMMpb
odWYtFt0vlyTsRObqbzTwLgwHwYDVR0jBBgwFoAULjUlNVWULww8pjeATUbZWgKk
+ekwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3QkQ2LzQ3OTBDRkM4MjNGMjExRTY4MENBRTgyM0Y4QUVBMjI4L0xqVWxO
VldVTHd3OHBqZUFUVWJaV2dLay1lay5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0xqVWxOVldVTHd3OHBqZUFUVWJaV2dLay1lay5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjdCRDYvNDc5MENGQzgyM0YyMTFFNjgwQ0FFODIzRjhBRUEy
MjgvTGpVbE5WV1VMd3c4cGplQVRVYlpXZ0trLWVrLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAeyhoej7J7kwNdDbyC218iKKjAxBsPvOq
wbAe1zag8J15XfuYRRhFXoiFEuUPnjqGK4jflMowpQg9itNTPqNiq6J16V2/bnI3
a20LAjX6fZC2414xfrAWzLqB6zwLV7g5rVuD6O2itj++QmzMAsiUmX0bzspG4wIk
HqsguGnqNLONcSbacXwtoW/1nU4uuLsnFP/tEw7r7x2aI6Spp8NoHrW71Bgmvr2B
gLR1KFLCWQCdzh7vPGmSrxFR5+7KclUwVzlo/Waee4dncI3vgxcUKUYor/XleacZ
WOhaZU/DDR8KbOWw16to+BAl3bGweB1M4hsjShBlRDC+X4GfB+31
-----END CERTIFICATE-----