Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
File:                     lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft (raw, json)
Hash identifier:          v+4I6bRBnXqRhX08FGcVPBVG9MPo0oWHfax6/qtyxUw=
Subject key identifier:   8B:FE:D6:43:A6:18:E0:A5:8C:7E:3C:29:3F:E0:60:E6:01:DE:28:BA
Authority key identifier: 94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB
Certificate issuer:       /CN=F36FA5EAAR/serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
Certificate serial:       0469
Authority info access:    rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
Manifest number:          0468
Signing time:             Tue 16 Sep 2025 03:02:14 +0000
Manifest this update:     Tue 16 Sep 2025 03:02:13 +0000
Manifest next update:     Thu 18 Sep 2025 03:02:13 +0000
Files and hashes:         1: lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl (hash: yJzZ/P9npBg6AiM8TcUBON3wPP5qZRfJOoODzODdvYU=)
                          2: 8FD98C2038B311EDAAA5E7DFF1222468.roa (hash: UXAWeOCC1criU7XL7P2zWbiZAhjMbu4dS0oFzWgmmoM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                          rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1129 (0x469)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FA5EAAR, serialNumber=9477F0E475A747F96C56162167F0C16F99C483BB
        Validity
            Not Before: Sep 16 03:02:13 2025 GMT
            Not After : Sep 18 03:02:13 2025 GMT
        Subject: CN=68c8d336-e224
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ce:ae:f3:34:67:dc:61:37:cb:ca:7f:98:03:
                    d9:54:bc:e0:bd:db:40:d4:d1:87:34:fa:2d:ef:de:
                    2c:84:3d:7f:91:62:d9:10:7a:36:e7:da:66:9c:87:
                    57:f3:67:a1:fe:b3:d4:ed:9f:0c:51:7f:4c:ea:c1:
                    9b:d4:a0:53:92:07:b8:84:b6:50:b5:99:b8:73:69:
                    80:fd:31:89:78:30:a4:77:af:48:6f:1b:2a:05:11:
                    33:ce:da:f1:b2:ee:1f:57:c7:d4:09:5f:eb:d6:b5:
                    88:06:e6:45:af:57:3e:d0:fb:da:e6:78:03:99:ab:
                    88:18:97:ef:e4:83:bc:1a:dc:7e:28:64:1f:80:12:
                    24:80:28:d7:41:fb:34:f2:4a:f9:ae:56:38:eb:81:
                    4b:90:e8:d0:0b:97:e7:53:c6:72:57:cd:e0:c0:06:
                    15:48:45:a2:b0:c4:b0:1f:9f:1f:d4:66:71:25:13:
                    3b:2e:83:4b:78:ab:72:d8:b3:34:a2:2b:46:e8:1f:
                    cf:5e:9d:ac:6a:21:72:8b:be:07:55:1e:dc:92:8e:
                    9a:86:d7:4f:55:80:99:07:e3:27:b6:03:1a:cb:5b:
                    80:30:b4:b1:47:94:33:1a:f2:4a:94:7a:00:13:30:
                    d2:e5:1b:49:71:a3:c2:71:9a:b5:7b:3b:eb:cc:1f:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:FE:D6:43:A6:18:E0:A5:8C:7E:3C:29:3F:E0:60:E6:01:DE:28:BA
            X509v3 Authority Key Identifier:
                keyid:94:77:F0:E4:75:A7:47:F9:6C:56:16:21:67:F0:C1:6F:99:C4:83:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FA5EA/2098930C38B211ED90DB2EDCF1222468/lHfw5HWnR_lsVhYhZ_DBb5nEg7s.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b2:94:88:d0:c1:cd:bc:83:d4:f1:79:18:e1:22:4a:d0:dc:
         ee:d1:a6:f9:93:ca:b0:74:1a:da:bc:fe:3e:f7:cc:45:31:cc:
         5b:6e:e2:d1:0d:51:d9:04:c7:f1:e5:d7:b4:af:1a:5a:77:cc:
         a0:c9:72:ef:4b:44:2c:9f:06:36:74:7e:bd:a4:cb:9c:21:7d:
         5e:15:03:04:fe:6c:3b:4b:de:f3:58:d2:ef:6e:b7:d6:b4:67:
         03:9e:3c:90:b9:f2:4a:93:ea:18:22:1d:82:4b:6c:7e:6c:c6:
         73:23:07:60:6b:17:64:dd:c5:dc:e6:df:86:2e:58:18:c5:ab:
         71:b3:14:fb:08:17:17:04:27:a6:60:7e:05:ee:46:60:f6:e3:
         e7:e4:78:b5:32:60:a6:74:98:fe:d6:53:04:85:bf:f2:ad:6a:
         f6:0b:4b:31:b5:e9:0c:49:fd:10:a7:40:aa:78:22:eb:d0:d7:
         6f:ea:fc:7a:68:71:b8:3b:b2:82:61:96:5a:87:1c:3a:e3:f0:
         8c:d6:46:89:96:1f:08:1e:28:6e:9c:1a:cc:33:0f:b3:fd:7a:
         4e:1d:50:ea:59:d2:0a:fd:fa:53:88:c2:19:d3:37:28:7c:71:
         da:a7:26:ff:55:ab:63:2d:5b:25:dc:ed:e7:1b:68:4f:8f:f8:
         5f:27:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 19:49:39 2025 by rpki-client