Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
File:                     LjUlNVWULww8pjeATUbZWgKk-ek.mft (raw, json)
Hash identifier:          uJTU/fogvbGqMCSl7WUGhMyo7HYwcERKaj+jV2Sy4CQ=
Subject key identifier:   9E:85:C7:D9:1E:C8:2F:CC:58:DE:9E:85:42:0E:69:6F:15:7E:FE:F1
Authority key identifier: 2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9
Certificate issuer:       /CN=F3627BD6AR/serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
Certificate serial:       0D99
Authority info access:    rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
Manifest number:          0D95
Signing time:             Tue 16 Sep 2025 01:02:28 +0000
Manifest this update:     Tue 16 Sep 2025 01:02:27 +0000
Manifest next update:     Thu 18 Sep 2025 01:02:27 +0000
Files and hashes:         1: LjUlNVWULww8pjeATUbZWgKk-ek.crl (hash: /mG70I0gmAUTrArA97uvrobOcwBqIp2koATv78iL6fQ=)
                          2: 6FAF8B00619B11EDB6AEE1D6F1222468.roa (hash: /1/Pa04qpcI/k7X0iybt5AEzlNkplFgiGrqG6zpxJw0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                          rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3481 (0xd99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3627BD6AR, serialNumber=2E35253555942F0C3CA637804D46D95A02A4F9E9
        Validity
            Not Before: Sep 16 01:02:27 2025 GMT
            Not After : Sep 18 01:02:27 2025 GMT
        Subject: CN=68c8b724-aded
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:cb:8f:31:f9:3f:cc:a9:ca:ef:22:24:8f:
                    57:88:24:93:83:80:21:d7:df:2a:31:9c:4d:56:0d:
                    12:e4:bd:0a:c4:60:bd:fa:51:f9:49:b6:fa:9f:f7:
                    cd:5a:0f:ac:e3:a1:25:d7:e9:a7:05:e1:2e:26:fa:
                    0d:0a:e8:86:32:02:d7:9d:ff:b6:8d:b1:69:e6:bb:
                    9e:48:f3:7d:82:0e:15:8a:20:2a:01:6c:92:a8:27:
                    7b:85:70:81:6f:65:5b:de:59:5c:d5:ae:5d:5a:08:
                    a4:1f:66:25:d2:46:76:8c:94:2b:60:0f:18:e6:94:
                    0b:a1:57:c6:5d:ea:8d:8d:18:c7:17:8b:fd:cf:36:
                    24:ae:99:9f:f8:fe:60:7d:33:20:f8:bc:32:bb:45:
                    4c:62:86:88:3d:68:54:f2:6d:dc:28:18:55:bd:04:
                    a0:13:61:aa:58:bc:34:fa:1a:75:40:b0:ff:96:69:
                    dd:68:bc:bc:a6:c5:aa:75:e2:41:64:a9:fd:98:7c:
                    11:ab:c9:15:3b:22:de:8a:d9:ad:c8:4e:b7:e1:e7:
                    a7:d0:64:c4:9d:17:02:ff:2b:70:92:38:f0:f0:87:
                    56:20:37:b3:3f:d2:30:97:18:1b:94:4d:a4:00:fe:
                    1f:53:98:c9:30:10:fb:90:54:77:52:9a:37:fb:b8:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:85:C7:D9:1E:C8:2F:CC:58:DE:9E:85:42:0E:69:6F:15:7E:FE:F1
            X509v3 Authority Key Identifier:
                keyid:2E:35:25:35:55:94:2F:0C:3C:A6:37:80:4D:46:D9:5A:02:A4:F9:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/LjUlNVWULww8pjeATUbZWgKk-ek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3627BD6/4790CFC823F211E680CAE823F8AEA228/LjUlNVWULww8pjeATUbZWgKk-ek.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:a1:20:ac:eb:d4:78:b1:d0:db:23:3a:cc:3f:27:b2:81:fb:
         e5:6b:65:76:fd:04:20:14:07:9a:9c:aa:59:a6:a3:01:02:93:
         5a:b2:39:4b:ee:7d:d6:b3:6d:9f:33:43:de:4c:a7:7d:0d:23:
         60:21:6b:51:30:84:00:8f:4d:9a:89:97:a4:c4:4a:60:e4:2b:
         8e:56:7e:a9:64:72:f2:4b:cf:98:84:dc:80:ec:08:80:14:e9:
         fd:bc:c3:89:c9:32:7d:46:3d:be:05:96:bd:2d:5f:85:4b:02:
         90:80:f8:8c:e7:bf:42:45:31:ae:0c:b3:16:d5:33:76:38:ea:
         a5:99:4c:3d:30:18:f8:e0:1f:7e:bf:3f:7c:00:bc:fc:9a:d5:
         4f:e2:29:a0:6f:e5:31:88:0d:e8:fa:c0:3a:e7:61:20:89:e1:
         f4:fc:72:e7:50:25:67:5e:91:1d:40:da:93:f3:90:7d:03:52:
         1b:eb:66:44:53:83:af:13:5a:c6:b8:22:99:bd:ca:4a:47:4f:
         a5:c7:7b:da:4a:0c:f1:54:f4:11:7d:44:d8:b0:fa:01:10:ad:
         a8:4a:20:3d:9a:fb:e3:7c:c5:a6:fe:a7:88:20:a8:d5:4f:f2:
         2e:cf:83:53:19:ec:e4:5b:ed:71:76:69:5b:cb:9c:c9:1d:d9:
         90:84:2e:69
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICDZkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjdCRDZBUjExMC8GA1UEBRMoMkUzNTI1MzU1NTk0MkYwQzNDQTYzNzgwNEQ0NkQ5
NUEwMkE0RjlFOTAeFw0yNTA5MTYwMTAyMjdaFw0yNTA5MTgwMTAyMjdaMBgxFjAU
BgNVBAMTDTY4YzhiNzI0LWFkZWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCibMuPMfk/zKnK7yIkj1eIJJODgCHX3yoxnE1WDRLkvQrEYL36UflJtvqf
981aD6zjoSXX6acF4S4m+g0K6IYyAted/7aNsWnmu55I832CDhWKICoBbJKoJ3uF
cIFvZVveWVzVrl1aCKQfZiXSRnaMlCtgDxjmlAuhV8Zd6o2NGMcXi/3PNiSumZ/4
/mB9MyD4vDK7RUxihog9aFTybdwoGFW9BKATYapYvDT6GnVAsP+Wad1ovLymxap1
4kFkqf2YfBGryRU7It6K2a3ITrfh56fQZMSdFwL/K3CSOPDwh1YgN7M/0jCXGBuU
TaQA/h9TmMkwEPuQVHdSmjf7uCHZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUnoXH
2R7IL8xY3p6FQg5pbxV+/vEwHwYDVR0jBBgwFoAULjUlNVWULww8pjeATUbZWgKk
+ekwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI3QkQ2LzQ3OTBDRkM4MjNGMjExRTY4MENBRTgyM0Y4QUVBMjI4L0xqVWxO
VldVTHd3OHBqZUFUVWJaV2dLay1lay5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L0xqVWxOVldVTHd3OHBqZUFUVWJaV2dLay1lay5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjdCRDYvNDc5MENGQzgyM0YyMTFFNjgwQ0FFODIzRjhBRUEy
MjgvTGpVbE5WV1VMd3c4cGplQVRVYlpXZ0trLWVrLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBioSCs69R4sdDbIzrMPyeygfvla2V2/QQg
FAeanKpZpqMBApNasjlL7n3Ws22fM0PeTKd9DSNgIWtRMIQAj02aiZekxEpg5CuO
Vn6pZHLyS8+YhNyA7AiAFOn9vMOJyTJ9Rj2+BZa9LV+FSwKQgPiM579CRTGuDLMW
1TN2OOqlmUw9MBj44B9+vz98ALz8mtVP4imgb+UxiA3o+sA652EgieH0/HLnUCVn
XpEdQNqT85B9A1Ib62ZEU4OvE1rGuCKZvcpKR0+lx3vaSgzxVPQRfUTYsPoBEK2o
SiA9mvvjfMWm/qeIIKjVT/Iuz4NTGezkW+1xdmlby5zJHdmQhC5p
-----END CERTIFICATE-----
Generated at Tue Sep 16 17:51:18 2025 by rpki-client