Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
File:                     lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft (raw, json)
Hash identifier:          5G31CYScPG42XiJfKqhNmuSDiS8Y24nNsCAdG6iAGvM=
Subject key identifier:   2D:8F:00:47:E6:C7:C4:E7:6F:B8:61:2C:3B:29:C5:A1:9D:DF:F3:42
Authority key identifier: 94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34
Certificate issuer:       /CN=F3628288AF/serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
Certificate serial:       0230
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
Manifest number:          022F
Signing time:             Sun 21 Jun 2026 04:42:34 +0000
Manifest this update:     Sun 21 Jun 2026 04:42:33 +0000
Manifest next update:     Tue 23 Jun 2026 04:42:33 +0000
Files and hashes:         1: lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl (hash: eGoA/dqQKuiCu7x7KH4IAJZZ1xrJY/3G5CqOmHTjy68=)
                          2: 5607C3B0BEE211EFA4CEA589762E951A.roa (hash: OpcRwl+jfvnh8TAOsFlPTty/eZv7mZcg2dDEa8udpEA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 560 (0x230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3628288AF, serialNumber=94967127FF64EC7C72A3ABEA16CE69AEDA7F6834
        Validity
            Not Before: Jun 21 04:42:33 2026 GMT
            Not After : Jun 23 04:42:33 2026 GMT
        Subject: CN=6a376bba-433e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e9:46:6e:ec:b2:e7:ac:e2:c4:10:3d:2b:af:
                    f6:f8:42:3f:2a:e8:6a:53:02:01:20:9c:c0:ca:f1:
                    86:f7:ca:f9:30:87:b1:e1:82:02:4a:46:3f:c2:75:
                    a5:94:36:43:00:84:8f:74:52:e8:da:fa:5c:e8:1b:
                    06:d9:77:32:77:79:dc:ce:dc:17:72:e4:1a:04:41:
                    73:84:27:16:cb:74:22:25:b5:f9:22:40:ce:56:39:
                    7e:90:3a:43:23:8d:9f:80:96:00:74:ea:1b:ab:a8:
                    fb:29:0a:d8:fc:79:2c:9f:91:8a:93:d0:ec:63:5b:
                    fd:ab:dd:e4:99:b6:a0:9e:7a:4b:db:03:a3:ae:49:
                    c9:3d:bf:f3:a1:8c:f6:ec:05:35:9d:e2:9a:f6:df:
                    3f:b2:17:15:89:43:cb:d0:40:0e:0d:4b:1e:f3:79:
                    ff:9c:d1:1e:1d:fe:68:c6:d7:81:cd:d4:72:2f:51:
                    26:7e:e2:44:8c:15:0c:e0:5f:3e:f2:b2:b9:87:f3:
                    e3:96:c5:a5:82:f0:5f:c4:34:c1:de:d1:7e:eb:7f:
                    1f:fb:b7:5c:b3:00:7c:74:08:9a:b1:48:b8:91:88:
                    64:0f:70:b5:a2:47:74:9d:bc:ed:22:75:89:78:e0:
                    f7:60:7a:fd:1f:3c:b6:77:f5:f3:3d:b5:b4:8b:f2:
                    80:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8F:00:47:E6:C7:C4:E7:6F:B8:61:2C:3B:29:C5:A1:9D:DF:F3:42
            X509v3 Authority Key Identifier:
                keyid:94:96:71:27:FF:64:EC:7C:72:A3:AB:EA:16:CE:69:AE:DA:7F:68:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3628288/4693761EBED711EF82A7A345762E951A/lJZxJ_9k7Hxyo6vqFs5prtp_aDQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:b1:2c:4a:1e:b5:bf:aa:96:b9:5b:14:67:57:87:ba:00:5d:
         b2:35:9e:cc:81:30:f2:51:5e:27:9e:03:21:5d:cc:d4:47:ad:
         b0:59:24:15:8b:20:dd:34:df:15:b1:18:71:57:68:09:f5:c7:
         ce:f3:01:59:ee:b2:42:42:a8:dc:c5:08:43:c4:86:db:fb:64:
         5b:73:c3:31:5d:4b:d8:bf:35:f8:60:ea:ac:e3:b8:6d:6b:e2:
         9a:c7:5f:31:a7:e1:da:84:90:73:80:b8:c2:05:41:77:56:41:
         1b:2c:69:be:4a:3c:62:79:d0:da:f6:d6:03:b3:d5:a4:38:b9:
         c5:1d:c4:1a:c5:2f:25:09:16:33:88:26:94:65:6d:67:ad:d5:
         c7:be:55:96:3f:95:45:7c:20:ca:7f:5e:1c:86:67:ae:20:5d:
         de:96:00:fb:91:5f:ea:85:a5:13:d8:31:0a:de:f2:ca:ee:3f:
         ec:a4:28:8f:b9:5e:52:f5:5b:d6:a2:79:a7:c3:30:e7:90:cf:
         51:58:c4:11:13:67:f6:ba:24:5d:0c:bb:68:0f:3d:c6:71:3a:
         66:86:65:44:37:99:08:2e:29:7d:bd:c0:f0:8e:93:14:2d:f3:
         91:16:12:d6:16:92:dd:5b:fd:3a:25:be:8f:df:a3:7f:c9:4c:
         f2:f0:cd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:45:17 2026 by rpki-client