Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
File:                     QDrQFAXpeziMuD5pbQudgLuguLg.mft (raw, json)
Hash identifier:          ksVo1lP+FWIaKaRMayucCFaHU5+hUxUt+epzGGWKkxI=
Subject key identifier:   64:76:46:AA:05:F1:3A:A6:65:C1:CE:DF:34:EA:6D:79:0B:89:BB:D9
Authority key identifier: 40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8
Certificate issuer:       /CN=F367B216LA/serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
Certificate serial:       068C
Authority info access:    rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
Manifest number:          068B
Signing time:             Sat 14 Jun 2025 02:11:55 +0000
Manifest this update:     Sat 14 Jun 2025 02:11:54 +0000
Manifest next update:     Mon 16 Jun 2025 02:11:54 +0000
Files and hashes:         1: QDrQFAXpeziMuD5pbQudgLuguLg.crl (hash: j0UgeIXVJD8dnyNLia43eCTZUsR/tfB9equhvcQSCS0=)
                          2: 2295CF68523711EEB515D05D4AD9E6FC.roa (hash: KlQWt1tn1KH/CPgIYBRda65+Ao1w8Du+dkLesEZUQIQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                          rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.crl
                          rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Jun 2025 00:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B216LA, serialNumber=403AD01405E97B388CB83E696D0B9D80BBA0B8B8
        Validity
            Not Before: Jun 14 02:11:54 2025 GMT
            Not After : Jun 16 02:11:54 2025 GMT
        Subject: CN=684cda6a-88ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d4:82:68:01:1b:a2:79:f3:72:6b:3c:9a:2c:
                    2e:17:63:40:0d:2c:12:95:1c:44:15:22:dc:34:4a:
                    40:fa:a7:2d:44:b3:0b:99:7c:cd:d3:e3:8d:f6:c0:
                    88:7b:ef:c0:d1:b9:30:02:d8:36:e5:cc:e2:e4:01:
                    95:bf:fc:4e:59:75:f9:44:45:05:69:4f:7c:62:6b:
                    c6:f2:41:29:a4:3b:7a:e0:16:9f:8c:93:c9:c1:c9:
                    b0:fe:69:fb:21:09:02:dd:03:b0:c1:06:e9:96:32:
                    79:28:ad:70:46:4f:30:b8:d6:7e:24:ac:39:b1:68:
                    aa:ab:d7:46:e8:f3:00:b3:a2:e5:94:e0:ca:20:a8:
                    8b:26:53:5a:a9:ae:f3:cd:f7:54:c9:98:86:8a:12:
                    99:0d:43:f6:64:b2:56:c7:3f:2e:2c:bb:4f:3e:3c:
                    9f:9a:ef:69:5d:8e:cf:33:0c:53:2b:aa:b9:d2:aa:
                    b8:c9:68:04:00:6c:8f:25:06:1b:f2:de:45:f7:20:
                    8d:a9:7d:ae:7c:95:35:5e:54:4e:29:c9:17:ee:68:
                    37:c8:be:6a:23:c9:17:0d:31:3c:90:6b:c5:7e:e5:
                    fc:51:a0:4b:28:fe:eb:91:7a:5c:75:66:fc:ba:42:
                    25:b7:32:2c:40:43:d2:ca:ca:ed:23:f0:93:1e:20:
                    5e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:76:46:AA:05:F1:3A:A6:65:C1:CE:DF:34:EA:6D:79:0B:89:BB:D9
            X509v3 Authority Key Identifier:
                keyid:40:3A:D0:14:05:E9:7B:38:8C:B8:3E:69:6D:0B:9D:80:BB:A0:B8:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/lacnic/QDrQFAXpeziMuD5pbQudgLuguLg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B216/465E48BE87D511EB95554247F8AEA228/QDrQFAXpeziMuD5pbQudgLuguLg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:f8:08:c4:65:ca:99:8b:db:d1:77:f4:56:f0:8e:43:97:b1:
         65:61:b7:17:d5:1c:30:3a:ef:ce:c5:04:bf:f1:47:7e:f0:3e:
         90:9d:dc:15:ee:b5:91:07:23:4c:3a:15:d9:97:1b:57:eb:9d:
         32:69:61:70:79:8e:47:8b:a9:33:da:32:fa:df:3c:91:83:c0:
         33:fc:10:8d:ec:33:30:5e:dc:0c:e9:67:f2:b6:16:40:08:c7:
         00:38:ae:8a:25:05:3c:f0:b9:d8:c1:69:e3:93:b9:cb:2c:af:
         89:26:41:bb:65:4b:14:fa:13:75:77:74:95:80:af:a3:6e:e5:
         2d:58:43:92:74:04:1c:6b:ab:51:33:d8:3c:0c:2a:47:61:d4:
         74:38:91:4b:d1:70:82:78:c9:8d:c7:6a:00:54:ef:04:1a:32:
         2e:74:64:10:88:ca:5a:ac:1c:97:85:b1:08:26:d9:85:54:4b:
         79:f6:1f:2f:bf:18:23:08:4b:e3:80:27:1c:63:1e:01:4e:9c:
         ba:d6:2c:c1:ba:8c:ff:9c:7d:3b:89:ff:a1:9a:4f:65:c4:4a:
         d6:4a:1c:4f:d3:ba:1c:74:4d:6f:7e:e2:8e:89:0f:b7:b7:63:
         b7:09:59:36:c9:61:98:3a:c8:52:e8:49:ac:6d:b2:fd:15:87:
         ef:46:c3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:17:18 2025 by rpki-client