Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
File:                     LWxhNdlQPaoy1mWGoi7WGSlcar8.mft (raw, json)
Hash identifier:          4C1DJPUEy+7MRkpBo73l2F+ZAcNY/j1JrX2lhQBZw4M=
Subject key identifier:   2A:01:30:C7:FD:96:CA:39:56:9F:59:54:A5:62:55:7E:8A:40:34:F1
Authority key identifier: 2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF
Certificate issuer:       /CN=F367FE62AF/serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
Certificate serial:       0724
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
Manifest number:          0723
Signing time:             Sun 21 Jun 2026 02:19:46 +0000
Manifest this update:     Sun 21 Jun 2026 02:19:46 +0000
Manifest next update:     Tue 23 Jun 2026 02:19:46 +0000
Files and hashes:         1: LWxhNdlQPaoy1mWGoi7WGSlcar8.crl (hash: hIs5EfU+Cf7xbEAbCNsjgeMsI5LD61YyWHoelvzBims=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1828 (0x724)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367FE62AF, serialNumber=2D6C6135D9503DAA32D66586A22ED619295C6ABF
        Validity
            Not Before: Jun 21 02:19:46 2026 GMT
            Not After : Jun 23 02:19:46 2026 GMT
        Subject: CN=6a374a42-0b56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:37:2c:8b:dc:fc:28:8e:16:32:4a:c8:4c:
                    fb:18:88:2d:c9:d8:80:8e:68:c1:61:0c:c1:73:66:
                    0c:ac:7e:74:f7:cc:3a:47:cc:d3:db:18:55:81:e8:
                    58:b8:6d:7d:78:f8:38:74:00:17:3c:bc:31:ea:38:
                    de:21:de:ba:b9:8a:6e:64:d3:2f:d5:62:0f:21:54:
                    88:d1:86:68:05:b0:22:85:a2:8e:81:1e:55:56:01:
                    9f:58:ae:de:cc:08:f2:28:ab:a5:30:b1:39:b3:d4:
                    93:72:84:97:2a:83:f1:4c:01:d0:6d:32:4f:8b:be:
                    72:87:90:ae:e3:e8:ec:fd:80:10:23:1c:14:39:24:
                    e9:04:f2:be:25:2a:fc:e4:1b:99:d1:22:32:d2:2d:
                    a3:76:ae:5d:4c:c4:35:1d:ef:85:9c:3c:d5:83:ec:
                    67:35:06:ed:b5:44:51:5e:92:77:d4:c8:88:40:0f:
                    a9:31:74:19:d2:37:dc:bb:e4:83:ce:7a:93:d0:67:
                    ee:cf:54:6a:73:da:79:03:ab:73:47:df:fe:fb:64:
                    38:c8:7c:58:98:c3:dd:3d:4a:26:28:c6:3f:e0:71:
                    cc:e7:75:cc:a8:48:b1:b3:4b:0a:f1:66:c0:74:6c:
                    1d:2f:40:d4:18:dd:f9:06:68:55:3e:90:1e:d4:66:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:01:30:C7:FD:96:CA:39:56:9F:59:54:A5:62:55:7E:8A:40:34:F1
            X509v3 Authority Key Identifier:
                keyid:2D:6C:61:35:D9:50:3D:AA:32:D6:65:86:A2:2E:D6:19:29:5C:6A:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LWxhNdlQPaoy1mWGoi7WGSlcar8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367FE62/FE5A3078F48511EB920AC83DD8A014CE/LWxhNdlQPaoy1mWGoi7WGSlcar8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:4c:7b:41:e2:ab:c6:aa:19:79:36:bb:b3:c6:b4:be:26:cf:
         2d:90:f7:06:a7:c1:3d:43:17:48:a8:44:2d:a8:d0:b1:df:62:
         b6:85:78:3f:d9:67:9a:38:70:63:ef:70:47:9a:40:64:e4:9c:
         28:16:93:ea:d2:f4:67:eb:68:b4:eb:da:4f:84:62:57:bd:e8:
         ea:bc:05:30:7e:ad:a1:65:d0:62:80:44:f8:e5:b8:b6:ee:a8:
         8a:f0:0a:03:a5:eb:58:49:b3:06:a1:8f:e4:1d:a2:95:98:8e:
         84:f1:45:fd:87:8e:07:f1:79:1b:41:80:06:27:51:51:b9:70:
         e1:23:ab:df:c2:d9:47:53:7a:fc:2b:e6:7a:c6:39:dd:3f:f2:
         b3:c2:ea:3e:76:c5:bc:00:a9:51:ab:04:42:36:b1:b0:79:a3:
         7a:16:12:a8:47:bf:e2:70:49:e4:84:7d:1e:ca:93:c6:41:7f:
         a2:e7:3d:7e:8b:38:53:9b:41:a8:9e:70:6d:9b:3d:0f:31:47:
         c5:c3:8b:51:8c:c7:90:d8:ea:4b:d5:d6:42:4f:bb:16:5b:62:
         7b:49:ad:0f:0e:ec:38:f6:7d:da:fd:3a:1b:77:d0:95:26:e2:
         8d:63:ce:78:1d:75:02:57:28:70:5e:be:2a:bd:3f:ef:3e:e2:
         e4:3d:e9:4b
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICByQwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0ZFNjJBRjExMC8GA1UEBRMoMkQ2QzYxMzVEOTUwM0RBQTMyRDY2NTg2QTIyRUQ2
MTkyOTVDNkFCRjAeFw0yNjA2MjEwMjE5NDZaFw0yNjA2MjMwMjE5NDZaMBgxFjAU
BgNVBAMTDTZhMzc0YTQyLTBiNTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC7Wzcsi9z8KI4WMkrITPsYiC3J2ICOaMFhDMFzZgysfnT3zDpHzNPbGFWB
6Fi4bX14+Dh0ABc8vDHqON4h3rq5im5k0y/VYg8hVIjRhmgFsCKFoo6BHlVWAZ9Y
rt7MCPIoq6UwsTmz1JNyhJcqg/FMAdBtMk+LvnKHkK7j6Oz9gBAjHBQ5JOkE8r4l
KvzkG5nRIjLSLaN2rl1MxDUd74WcPNWD7Gc1Bu21RFFeknfUyIhAD6kxdBnSN9y7
5IPOepPQZ+7PVGpz2nkDq3NH3/77ZDjIfFiYw909SiYoxj/gcczndcyoSLGzSwrx
ZsB0bB0vQNQY3fkGaFU+kB7UZruvAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKgEw
x/2WyjlWn1lUpWJVfopANPEwHwYDVR0jBBgwFoAULWxhNdlQPaoy1mWGoi7WGSlc
ar8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdGRTYyL0ZFNUEzMDc4RjQ4NTExRUI5MjBBQzgzREQ4QTAxNENFL0xXeGhO
ZGxRUGFveTFtV0dvaTdXR1NsY2FyOC5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL0xXeGhOZGxRUGFveTFtV0dvaTdXR1NsY2FyOC5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2N0ZFNjIvRkU1QTMwNzhGNDg1MTFFQjkyMEFDODNERDhB
MDE0Q0UvTFd4aE5kbFFQYW95MW1XR29pN1dHU2xjYXI4Lm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQTHtB4qvGqhl5NruzxrS+Js8tkPcG
p8E9QxdIqEQtqNCx32K2hXg/2WeaOHBj73BHmkBk5JwoFpPq0vRn62i069pPhGJX
vejqvAUwfq2hZdBigET45bi27qiK8AoDpetYSbMGoY/kHaKVmI6E8UX9h44H8Xkb
QYAGJ1FRuXDhI6vfwtlHU3r8K+Z6xjndP/Kzwuo+dsW8AKlRqwRCNrGweaN6FhKo
R7/icEnkhH0eypPGQX+i5z1+izhTm0GonnBtmz0PMUfFw4tRjMeQ2OpL1dZCT7sW
W2J7Sa0PDuw49n3a/Tobd9CVJuKNY854HXUCVyhwXr4qvT/vPuLkPelL
-----END CERTIFICATE-----
Generated at Sun Jun 21 23:38:26 2026 by rpki-client