Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
File:                     LmD5YTFKp9b93e6durMSN0cF5ss.mft (raw, json)
Hash identifier:          dWiBxRIo8yRGNKfVuGhcSYKm44hvG2BvuK9/Y0bB7Lc=
Subject key identifier:   AA:F3:95:CF:E6:76:82:3C:EF:EB:C8:9A:D6:38:3A:D6:96:DF:79:3A
Authority key identifier: 2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB
Certificate issuer:       /CN=F36FC8A0AF/serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
Certificate serial:       0409
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
Manifest number:          0408
Signing time:             Sun 21 Jun 2026 03:43:40 +0000
Manifest this update:     Sun 21 Jun 2026 03:43:39 +0000
Manifest next update:     Tue 23 Jun 2026 03:43:39 +0000
Files and hashes:         1: LmD5YTFKp9b93e6durMSN0cF5ss.crl (hash: LjKAjrt78IZiq1U6TmnJ3sHEFEOTx6EZ/8jj8Fynqk0=)
                          2: 333100CC56E711EEB82D22544AD9E6FC.roa (hash: iWB0O9f+LLwbK/f70tuWF05AYGrsYH+zV7rCgvpguSc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 23 Jun 2026 00:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1033 (0x409)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FC8A0AF, serialNumber=2E60F961314AA7D6FDDDEE9DBAB312374705E6CB
        Validity
            Not Before: Jun 21 03:43:39 2026 GMT
            Not After : Jun 23 03:43:39 2026 GMT
        Subject: CN=6a375dec-6264
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2c:75:db:00:92:c8:32:9a:b4:7a:84:68:52:
                    a0:47:05:97:79:b6:e4:bf:cc:0f:5c:5f:63:88:02:
                    17:c5:98:c2:25:d9:02:22:9f:d2:f4:5d:3c:94:fa:
                    f0:04:c1:2a:97:6c:38:c5:ac:89:ca:10:83:9f:b8:
                    4c:d6:14:a5:45:ee:32:2f:5a:78:e0:96:0b:87:33:
                    be:08:0f:01:92:cb:05:a2:43:af:d0:86:54:af:5c:
                    7b:da:51:30:41:c8:f7:ef:d7:8c:88:0c:5d:95:06:
                    87:6b:33:f4:51:21:5f:46:b3:63:61:b4:fe:53:7d:
                    40:e3:25:bc:ea:04:03:d8:e7:49:a1:e5:3e:59:b3:
                    57:20:1f:bf:0c:37:82:eb:aa:70:c7:bd:86:a4:3a:
                    68:cc:ac:fd:f2:5e:ea:f8:fd:ad:ba:93:79:9e:d6:
                    07:a4:a5:58:c4:7a:0a:00:69:9e:91:ac:b2:70:81:
                    27:45:bc:92:15:d4:36:10:f9:7e:92:6d:b8:85:1f:
                    78:92:62:4b:66:5e:e3:03:e2:00:0b:9a:a0:87:2e:
                    fb:26:a5:63:8d:f9:3f:e1:01:80:1f:5d:8a:73:d2:
                    8b:0e:23:27:5f:5c:c3:cf:92:41:7d:44:a2:75:89:
                    7e:67:88:31:59:1d:85:51:e6:b9:13:80:28:5c:35:
                    1d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F3:95:CF:E6:76:82:3C:EF:EB:C8:9A:D6:38:3A:D6:96:DF:79:3A
            X509v3 Authority Key Identifier:
                keyid:2E:60:F9:61:31:4A:A7:D6:FD:DD:EE:9D:BA:B3:12:37:47:05:E6:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/LmD5YTFKp9b93e6durMSN0cF5ss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FC8A0/F10926A256E611EEA95B26534AD9E6FC/LmD5YTFKp9b93e6durMSN0cF5ss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:54:b3:74:88:14:fe:86:a2:b5:9d:cc:f6:24:53:06:62:0c:
         5f:76:5b:c1:49:cc:08:9e:9e:70:0c:e7:35:33:99:f9:e6:75:
         e1:e1:1a:bf:34:6d:6a:98:15:5a:9c:61:27:6e:ef:a8:ba:2a:
         fe:61:6d:fd:68:f9:21:3d:ec:eb:f6:12:2b:7d:21:4e:0f:6b:
         a3:d3:51:3c:68:0c:dc:02:a0:d7:be:b6:e0:67:c1:90:ed:e8:
         28:6a:27:48:c3:9e:73:a6:ca:de:0f:53:4f:b9:d0:11:48:84:
         71:a0:14:c1:b8:bb:a6:ed:c4:ff:02:72:00:f8:4b:93:89:9e:
         70:cf:24:cb:0c:5e:bf:37:a0:b8:c6:3c:50:6f:2c:84:7a:e9:
         00:ef:12:0e:9d:d6:f3:f7:a5:da:ab:45:bf:6e:09:95:6b:79:
         57:9b:46:da:0e:7c:c8:03:73:49:22:e5:a8:51:43:e6:fb:07:
         fb:f3:fc:81:71:f4:1f:83:7b:3b:70:54:84:b0:fe:ac:5d:95:
         5f:53:0b:b5:16:06:61:f1:85:8a:c9:ba:1f:b5:ed:f6:50:f2:
         77:36:b5:39:e9:4a:e4:4f:0c:72:2e:95:31:ae:d8:c9:03:6c:
         4a:e6:77:f2:58:b0:bc:4f:d2:3f:b2:74:d4:d6:12:78:0d:93:
         b9:11:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 23:37:04 2026 by rpki-client