Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
File:                     lUq4iuSUipt1F33uZX-rTm4MV4o.mft (raw, json)
Hash identifier:          ddZJ5EZq7tKe31uFrY4ahL0Wrp+blnGiyAoYLe20hCI=
Subject key identifier:   66:A1:47:98:93:AB:31:AD:24:CB:D5:AB:71:C9:AE:CF:88:63:D0:81
Authority key identifier: 95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A
Certificate issuer:       /CN=F36795C4AF/serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
Certificate serial:       092C
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
Manifest number:          0928
Signing time:             Tue 16 Sep 2025 01:30:16 +0000
Manifest this update:     Tue 16 Sep 2025 01:30:15 +0000
Manifest next update:     Thu 18 Sep 2025 01:30:15 +0000
Files and hashes:         1: lUq4iuSUipt1F33uZX-rTm4MV4o.crl (hash: stKzwYbUQlC7PeFDfHJhOzY5oGCMiu2h+uK1xl+cDtI=)
                          2: F9B4B74223E211EBB3370E5EF8AEA228.roa (hash: iAjclVjr18rb8UzFlzEG7HCKjOKSh2vSHYxUqjnpsFA=)
                          3: BABCAEFE91EF11E9B165E57EF8AEA228.roa (hash: hVKNt8SGYWt1U+/taZzhJep5equgMI82UyG7GvrNAnA=)
                          4: 9D413B06934311E9A21F097CF8AEA228.roa (hash: 6TisgPXDxDhUciEz6ugq9eMaF0xfY5KK7JgLSnZtkTk=)
                          5: 3A036A0023E311EBA7E4515EF8AEA228.roa (hash: 8IUYdHouL/KgAyYJ5ZHIEJY8Ka7R1x0U8rxHyMR+85A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 01:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348 (0x92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36795C4AF, serialNumber=954AB88AE4948A9B75177DEE657FAB4E6E0C578A
        Validity
            Not Before: Sep 16 01:30:15 2025 GMT
            Not After : Sep 18 01:30:15 2025 GMT
        Subject: CN=68c8bda8-fdaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5c:fe:b7:cc:ec:59:cf:10:eb:36:46:26:0c:
                    48:25:37:8a:58:1e:e6:e2:8b:ca:c0:24:4b:81:81:
                    4b:ff:c8:9b:78:24:23:0d:55:18:92:a5:e2:aa:68:
                    57:ed:bc:f1:de:a1:50:e6:56:4d:9b:05:35:4f:43:
                    36:ad:be:5d:24:79:e9:66:3c:2e:7c:7c:8e:90:f2:
                    06:6e:51:b3:b9:10:10:a1:e0:f8:40:e3:a0:9a:3d:
                    e1:07:a3:9e:56:17:7b:7b:31:cd:c6:eb:39:71:de:
                    f4:ff:ba:c2:7f:75:f3:d7:18:32:72:af:9c:58:6b:
                    5f:ba:5d:c0:35:42:05:17:1d:39:10:79:d6:0b:00:
                    3c:8a:99:ad:49:2c:ad:b0:3c:fd:90:c6:27:a2:1a:
                    3f:61:8d:0d:74:ca:ee:cc:78:3b:ec:d3:98:28:66:
                    da:cf:ea:fd:27:99:0a:50:cc:be:f0:6a:e0:bc:4b:
                    df:1e:5b:4b:2f:82:30:da:99:19:84:34:c0:cf:54:
                    9c:ec:68:ff:e7:4c:23:88:5d:43:02:e7:68:8e:09:
                    9e:b0:ae:e6:a1:34:88:5a:18:6b:9c:10:44:fe:15:
                    22:6d:e8:24:de:31:1c:e1:b3:47:e2:95:b5:80:38:
                    65:c6:53:d6:7d:80:6f:93:9e:ee:34:70:ab:34:59:
                    e6:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A1:47:98:93:AB:31:AD:24:CB:D5:AB:71:C9:AE:CF:88:63:D0:81
            X509v3 Authority Key Identifier:
                keyid:95:4A:B8:8A:E4:94:8A:9B:75:17:7D:EE:65:7F:AB:4E:6E:0C:57:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/lUq4iuSUipt1F33uZX-rTm4MV4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36795C4/D603990491ED11E9841D5A7DF8AEA228/lUq4iuSUipt1F33uZX-rTm4MV4o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:d4:de:8d:e8:07:db:d2:e5:f2:1d:62:7d:2a:31:9e:0b:12:
         ce:69:c5:83:be:c3:db:b5:be:e6:21:ea:70:92:e5:7e:38:35:
         c1:13:c8:93:bc:6f:6c:26:e5:1f:53:08:f9:26:76:b2:15:11:
         be:d3:a9:16:c0:2e:c1:b9:52:5a:54:11:b1:fd:b4:13:0c:66:
         ae:55:ad:d1:82:35:db:4c:3f:c6:f4:38:47:37:7e:70:c4:0c:
         60:f3:57:c8:b4:e7:c7:99:3a:74:d5:22:a6:0e:0b:f6:69:96:
         25:75:86:c1:dc:d6:ba:9d:33:81:12:f2:2a:e3:b6:83:94:5b:
         c4:8e:5a:a7:b6:65:2b:bf:4c:7a:a3:b9:9c:f1:26:17:80:d6:
         7b:1a:9a:34:9e:8a:58:e5:98:86:b3:f7:48:00:78:75:27:4d:
         55:f3:24:f3:6c:41:57:ca:24:00:65:b8:55:09:87:cd:b5:65:
         97:95:32:ce:27:71:db:5c:24:d4:6e:e9:f5:3f:65:05:89:d7:
         d1:3c:cc:f0:f1:9d:a3:ff:c3:07:13:0a:17:08:b5:b2:62:2d:
         b7:c1:22:dc:8b:bc:e4:99:a3:6f:43:60:6e:43:36:3f:8f:ef:
         12:03:16:50:6d:c7:d8:8f:34:3b:70:39:b9:b2:75:11:f9:28:
         12:f5:38:58
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCSwwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
Nzk1QzRBRjExMC8GA1UEBRMoOTU0QUI4OEFFNDk0OEE5Qjc1MTc3REVFNjU3RkFC
NEU2RTBDNTc4QTAeFw0yNTA5MTYwMTMwMTVaFw0yNTA5MTgwMTMwMTVaMBgxFjAU
BgNVBAMTDTY4YzhiZGE4LWZkYWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDSXP63zOxZzxDrNkYmDEglN4pYHubii8rAJEuBgUv/yJt4JCMNVRiSpeKq
aFftvPHeoVDmVk2bBTVPQzatvl0keelmPC58fI6Q8gZuUbO5EBCh4PhA46CaPeEH
o55WF3t7Mc3G6zlx3vT/usJ/dfPXGDJyr5xYa1+6XcA1QgUXHTkQedYLADyKma1J
LK2wPP2QxieiGj9hjQ10yu7MeDvs05goZtrP6v0nmQpQzL7wauC8S98eW0svgjDa
mRmENMDPVJzsaP/nTCOIXUMC52iOCZ6wruahNIhaGGucEET+FSJt6CTeMRzhs0fi
lbWAOGXGU9Z9gG+Tnu40cKs0WeYBAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUZqFH
mJOrMa0ky9Wrccmuz4hj0IEwHwYDVR0jBBgwFoAUlUq4iuSUipt1F33uZX+rTm4M
V4owDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjc5NUM0L0Q2MDM5OTA0OTFFRDExRTk4NDFENUE3REY4QUVBMjI4L2xVcTRp
dVNVaXB0MUYzM3VaWC1yVG00TVY0by5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2xVcTRpdVNVaXB0MUYzM3VaWC1yVG00TVY0by5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2Nzk1QzQvRDYwMzk5MDQ5MUVEMTFFOTg0MUQ1QTdERjhB
RUEyMjgvbFVxNGl1U1VpcHQxRjMzdVpYLXJUbTRNVjRvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAb1N6N6Afb0uXyHWJ9KjGeCxLOacWD
vsPbtb7mIepwkuV+ODXBE8iTvG9sJuUfUwj5JnayFRG+06kWwC7BuVJaVBGx/bQT
DGauVa3RgjXbTD/G9DhHN35wxAxg81fItOfHmTp01SKmDgv2aZYldYbB3Na6nTOB
EvIq47aDlFvEjlqntmUrv0x6o7mc8SYXgNZ7Gpo0nopY5ZiGs/dIAHh1J01V8yTz
bEFXyiQAZbhVCYfNtWWXlTLOJ3HbXCTUbun1P2UFidfRPMzw8Z2j/8MHEwoXCLWy
Yi23wSLci7zkmaNvQ2BuQzY/j+8SAxZQbcfYjzQ7cDm5snUR+SgS9ThY
-----END CERTIFICATE-----
Generated at Wed Sep 17 01:29:41 2025 by rpki-client