Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
File:                     LO0lCJLZepCqEzI6yk5F0lF2klg.mft (raw, json)
Hash identifier:          l5eKAmWNLtowiU7guxsAtttwFHYOyQ656j3lAgWaiFU=
Subject key identifier:   3F:16:C6:B6:74:37:17:49:34:46:03:D3:5C:35:30:FA:F4:2F:C7:B1
Authority key identifier: 2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58
Certificate issuer:       /CN=F36B4580AF/serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
Certificate serial:       0237
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
Manifest number:          0236
Signing time:             Wed 17 Sep 2025 04:08:42 +0000
Manifest this update:     Wed 17 Sep 2025 04:08:41 +0000
Manifest next update:     Fri 19 Sep 2025 04:08:41 +0000
Files and hashes:         1: LO0lCJLZepCqEzI6yk5F0lF2klg.crl (hash: JEBr3KWkKuLbZBaS9yiU5WkHdk45musNp7yhTC/qUOI=)
                          2: 33CDD534E21811EEADAEADC1775412E6.roa (hash: zBCcaHSSJiFVaqIDbPbS61APz7NmOnVb/26SMlWLcvQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:08:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 567 (0x237)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B4580AF, serialNumber=2CED250892D97A90AA13323ACA4E45D251769258
        Validity
            Not Before: Sep 17 04:08:41 2025 GMT
            Not After : Sep 19 04:08:41 2025 GMT
        Subject: CN=68ca344a-bdb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:66:20:46:77:7c:de:9f:80:19:6a:14:8b:36:
                    ae:19:f2:42:6d:d9:75:50:2f:c9:a6:22:b4:c2:a7:
                    1a:83:ce:b5:c5:99:05:fb:aa:20:26:c0:6b:08:7e:
                    81:fe:ce:d5:58:66:a2:43:a0:13:58:b5:89:69:c8:
                    00:f4:50:8a:a6:11:a0:97:e4:5e:ab:53:83:84:71:
                    65:ce:73:ca:60:76:07:9d:af:74:bf:16:d9:9d:58:
                    8b:c6:a2:95:1b:7b:fa:59:e0:51:4e:51:e9:fe:76:
                    52:28:15:6c:98:7e:3b:bd:49:71:00:9d:4f:a6:75:
                    c4:a4:b9:cb:0b:af:d3:cd:70:ca:32:7f:4f:0d:6f:
                    02:4f:6e:c5:7d:10:2b:74:ed:fb:a3:58:37:39:c6:
                    c9:e2:55:a9:18:48:7d:9b:a4:a0:c2:3b:9d:8f:4c:
                    be:8b:c4:17:54:ed:eb:4f:77:24:44:b9:cb:6f:ae:
                    79:17:98:74:c0:61:8f:8a:9b:90:70:5c:c6:a1:66:
                    12:5f:25:32:3d:6d:77:9b:c8:3f:d7:58:b0:58:7b:
                    74:5c:c5:27:e8:04:32:a5:bb:ab:09:bb:a0:5a:c5:
                    71:63:51:60:d8:59:a5:b0:d4:46:a3:fe:a1:cc:65:
                    85:8a:d3:79:2a:6c:6c:f5:b1:12:0f:d0:98:88:81:
                    dc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:16:C6:B6:74:37:17:49:34:46:03:D3:5C:35:30:FA:F4:2F:C7:B1
            X509v3 Authority Key Identifier:
                keyid:2C:ED:25:08:92:D9:7A:90:AA:13:32:3A:CA:4E:45:D2:51:76:92:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LO0lCJLZepCqEzI6yk5F0lF2klg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B4580/E19B7B22E21711EEA18E8ABF775412E6/LO0lCJLZepCqEzI6yk5F0lF2klg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:17:b4:b8:d9:8d:9c:44:eb:1f:67:63:63:ae:69:44:13:e5:
         da:5d:cd:13:ba:a9:b2:92:cc:51:2d:5f:2a:40:88:01:80:29:
         15:78:7f:a5:1d:c5:5b:5b:23:91:4e:cf:94:35:ce:c2:b0:b0:
         23:44:e8:bc:97:b8:48:19:cf:2b:46:76:75:7a:b5:18:4c:43:
         14:fc:97:5d:56:95:90:60:ac:57:fe:84:4a:c5:83:cc:05:59:
         33:81:83:9f:22:d2:f5:ed:61:08:99:2d:8f:a8:35:36:94:ce:
         a6:29:d4:eb:81:0c:40:10:b5:3d:4c:a8:5f:f5:71:3b:13:ac:
         98:4c:b4:f4:57:ad:d6:96:49:d5:2d:a3:20:87:13:26:c9:39:
         b5:25:58:09:5c:c4:62:af:b4:40:9b:51:23:ad:0a:9b:59:05:
         07:23:3c:1a:dd:b2:cc:f9:da:3f:63:4c:1d:42:7a:f5:83:72:
         e4:a4:5c:94:1c:83:b6:ba:40:5e:aa:d6:58:6d:a0:47:d2:b9:
         6a:e7:ba:65:67:07:02:84:a8:12:21:a6:70:4c:d5:30:e4:98:
         22:7a:a0:a2:1a:89:fb:f3:8a:37:6d:a6:ed:3f:63:ad:fe:21:
         14:e4:a7:df:c2:ab:1c:ad:65:6a:17:be:00:0d:e7:9b:18:8e:
         2d:83:2b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:26:42 2025 by rpki-client