Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
File:                     0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft (raw, json)
Hash identifier:          7uyCi9GUsGi0Q5yR9WRvew0p5IXCwMsxVjSV0bnY8C8=
Subject key identifier:   F8:7A:34:05:BA:54:67:CE:B1:99:95:2C:31:79:7C:57:46:08:E7:A5
Authority key identifier: D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14
Certificate issuer:       /CN=F369DB5EAF/serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
Certificate serial:       0390
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
Manifest number:          035D
Signing time:             Mon 28 Apr 2025 03:38:24 +0000
Manifest this update:     Mon 28 Apr 2025 03:38:23 +0000
Manifest next update:     Wed 30 Apr 2025 03:38:23 +0000
Files and hashes:         1: 0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl (hash: jrgkFI0PFTbDZpZl11J89tt//wK9v7IHglCZYGGezSc=)
                          2: 39FFC9BE03B811EF983A1B33017001B1.roa (hash: tS+wVtHhPrpxDmWcesUHT7utAdSi06FtleX+U4Lw7TI=)
                          3: FAEBDC4803B411EFB029601B017001B1.roa (hash: xzzx0ugjkRS9PYdo0KLQ7+H2uxfJ0K+cSqgvb2XnuPk=)
                          4: C38CBD7203B811EF86521F38017001B1.roa (hash: 2WcQX+9AjIfrNmsdsiKQyVMoPWChqItR+h5OqUTMfRk=)
                          5: BDBE112003B311EF8DDE9910017001B1.roa (hash: 82bRJv+5HJA4Fi6+OCSpOjCyBZW+S6V58aFWPp7a3SM=)
                          6: B44578A803B411EF95522E17017001B1.roa (hash: 936Q411o1qc4pT0Zx9jhIXN0Wgiyr6no0KJUyaCEE/c=)
                          7: 980A722003B311EF86B63910017001B1.roa (hash: wKMuoXYYXIiS/ZLS7PWLzLXdIFcknzJKp/rpFSrvhH8=)
                          8: E432C49203B611EFBEEC1128017001B1.roa (hash: eCtOJ1D+HQduSTMxCfcTJUfC/lccpBhF5JE1AQ+kubk=)
                          9: CF23848E03B511EF80994521017001B1.roa (hash: aMLwz+ZKh6Oz4CoRMY0xHb1x7qr39vpl6gfnLqRS/qQ=)
                          10: F8A856B603B211EFB3ADE30A017001B1.roa (hash: uJrPT/XteQRfZvDwpMyFdVnvV7NPg5BDECy1d8844bY=)
                          11: 519B660C03B611EF98D15426017001B1.roa (hash: av0draMIOKhBEZ3kOVBkA1YKrpj/hJoac9vz6NKCER0=)
                          12: 056431F403B811EFA4BA5832017001B1.roa (hash: ApGOgDLRrAt7wLYHdFuvRo2DntM8bf1Tz78NFhtcxL8=)
                          13: 7EB3E7FA03BA11EF9888BB48017001B1.roa (hash: 8kFtpikZunY+lfUkg34+p4H/6y7KoFeGsFbV13OrRZM=)
                          14: 48D1B612F7D011EEB7ACF12A017001B1.roa (hash: MO6EQKtkkq85RZaTVkomcZUCuBadwthtdCSH79/DaIw=)
                          15: 7FF87C5A03B711EF917C5C2D017001B1.roa (hash: a35pKcfaaHwWPzygov5Kk7IYMKCrlD7MHrGfGQq3aco=)
                          16: DF255D0003B311EF81582C11017001B1.roa (hash: 2gbspSAn1FaleBtgeLKwF76oQxo4DIcvXlm/ZaZeaDw=)
                          17: 8D45EA1C03B911EF8ECB013E017001B1.roa (hash: QPpku5aqb911f/bHCQAb3elnYINcM+RRUsK7N2sabe8=)
                          18: 32837C9003B711EF967A4F2C017001B1.roa (hash: +5CLxbGwXT60ubQqq8bM1C2hWckotvUlGwQf+a7WrQo=)
                          19: 58F9B92203B511EFB9AAA61C017001B1.roa (hash: wfruQ932JSdbaIg9RVb9zVvENhjkQ6ADpWh/ZpApbXY=)
                          20: 06ED290003B711EFA808E12B017001B1.roa (hash: 3nwhGhuRYVpIImiqWFP3vuMZlijuvEzm21qn4zV6clc=)
                          21: A28BE3EE03B511EFB056D120017001B1.roa (hash: R+mCP7u5rWLhn9EEMSGJ2CTodRAWWEkqlzeIGmxGVo0=)
                          22: 59084A3803B411EF9CC30616017001B1.roa (hash: VQ0RSSTYVjk7yqISbUry20G3lzAncR47Ax8IgCDJ6FM=)
                          23: D95C7F0803B711EFA940CD31017001B1.roa (hash: YRvxTaW01N4ChieFj2ifQBeOMmeruhjQJDufE0+oCvU=)
                          24: 1AE3C7AA03B911EF86A98F3C017001B1.roa (hash: gyS/aMybFEma33PxUMgpBfLTjikHDhVK6duizXP6PRI=)
                          25: 6AE7FF2E03B311EF903F510C017001B1.roa (hash: 3kqijSi8P/0vf9KQNjB81BG7B4/nyk3Ow12xYdd94Dg=)
                          26: E8FB648603B911EF99896D42017001B1.roa (hash: 0LRPsqp/eBeRYaF8dUu/T+Twx9GeRodgR1TnQOXBJH0=)
                          27: 34279B9203B411EF914AA515017001B1.roa (hash: KyyGeSy1rjryhQ/mTFRctgw4FH6eqpgccoKh2XdbOnE=)
                          28: 7C1F7EE603B511EFB4C5FB1C017001B1.roa (hash: Lo3e7+E8r/NSCO53r7b8CA67fySg+7NtHZB+aX3Qbtg=)
                          29: B1B059DE03B711EF90376831017001B1.roa (hash: WeVV5gDtF6GpuPWvFOh56HIeyAo/+6h+QFCO/xL7k9Y=)
                          30: BF97846C03B911EFB079EA41017001B1.roa (hash: wNII1uoSvScpdOlwHz4BDM1DBqJs/03DHX7oHGkZtJk=)
                          31: 67ECDE3803B911EFA186603D017001B1.roa (hash: DI5kIwElQ8R+Lw20LT5yGvsY0m7hji0peiEWAehYwT8=)
                          32: B159B4A6F7CF11EEB1F39025017001B1.roa (hash: 740iX4/YNKSrtY9V4n9PWMrAZ0OIIcK6uTWL5Tg39nE=)
                          33: B295FE0A03BA11EFA4CD3749017001B1.roa (hash: 0ThrAr6vm0bBEIQGeFKPBtwPlSPx+ZpJ9O+oSkRp4ng=)
                          34: DAF813C003B411EF9A180C1B017001B1.roa (hash: rxENEqWWigTNJviQ+rAe/KPkUQD8qHgTCh4hs/xATo8=)
                          35: 8A36DFD403B411EFBCF69916017001B1.roa (hash: xKMBf2rSSOixjAS2vNdhJv84bn3oPMKHm8mgP2NWS3A=)
                          36: 0471BC4803B411EF8330A611017001B1.roa (hash: 3INpP9HwU5rpsLwrARqpf7p6nExwTzjKuLs7Tp6YsOI=)
                          37: 9058590C03B811EFB2BC6037017001B1.roa (hash: KbTrV9/1QdeVyGjJXMf67sHpdC5TxLAEU7d3+fl+nbE=)
                          38: BF6DDF5603B211EFA0BA490A017001B1.roa (hash: 8/0GoFuHQN9he6IYSmKw6dZ6XCPb7gOtdsq14wm2Isc=)
                          39: 7C256E3603B611EFAF25C126017001B1.roa (hash: HvW2XolqN7iVLLfu4e4/42VqmnpjFO4MOEZUl8OZjX4=)
                          40: 5B989A2C03BA11EFAA71D543017001B1.roa (hash: KbZuJr3ip0P+gvWdRwind0bDdrmcL70WDYjmp2NTnhE=)
                          41: 4556E87403B311EF947EEE0B017001B1.roa (hash: 5he62FEDMtk8xgthwxXe7kpX5VqIynwz1zy7Z94nIm8=)
                          42: 59DC420403B711EF9611CE2C017001B1.roa (hash: EwVt1oXV0u0an9gRO+yk2dl6LPH6mygNRS8FSwAxo9Y=)
                          43: F30D683A03B811EFB841B038017001B1.roa (hash: /fG66SOeJwlKhY/vnT1XmeFZ84fISRpkxoqX3tuqW1g=)
                          44: 9C9F4FB003B611EFB8A12227017001B1.roa (hash: RVO87omLbTuzPNyt+gyuo6dbEU3UiqJ5W8lmS1Jz7c8=)
                          45: 5B91C6B803B811EFA4C9CE36017001B1.roa (hash: JcVXEBKBXCdAnpNP9gkBki5xx1uU/257cotnySg0MZA=)
                          46: 70246ED6F7CF11EEBDBEE324017001B1.roa (hash: e1vFix2SZU+voeEXeL4846G5Zk4nH6jhf40xzuuk0vk=)
                          47: 18F314CC03BA11EFA363E442017001B1.roa (hash: zpVG8PnZugODg3d53wKyidNhCpmCyN5gzsP/0/AMopc=)
                          48: 42F3617E03B911EFBF21F33C017001B1.roa (hash: rGghr4IPbYUvGjnweFdDE8GuVv5Ia4WJ4E4L8gdF8rc=)

Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 30 Apr 2025 00:06:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369DB5EAF, serialNumber=D3E2E0BCEB61FB9C4527826E610D467699D63E14
        Validity
            Not Before: Apr 28 03:38:23 2025 GMT
            Not After : Apr 30 03:38:23 2025 GMT
        Subject: CN=680ef830-7fa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:26:cc:6f:83:e7:31:d8:77:fd:a1:4b:2c:12:
                    4b:0a:e5:96:5c:61:17:26:af:a0:78:75:65:aa:1e:
                    c8:78:72:18:ab:e4:3b:49:d9:c1:70:c8:c4:59:b6:
                    92:fc:40:ba:a5:8e:6f:25:13:50:64:e8:cf:fa:c0:
                    9f:3c:db:c6:04:69:58:4e:97:ee:17:2c:68:cf:54:
                    da:d0:2a:de:2f:cd:95:77:05:ed:5a:0f:10:72:5c:
                    ec:50:55:47:64:44:d5:5d:e2:55:a5:52:93:23:d0:
                    0d:a4:03:0d:d1:19:5e:bd:00:e1:bd:aa:4c:80:55:
                    1c:60:27:96:8c:2e:7b:87:88:b0:04:70:23:80:eb:
                    76:e5:6f:fe:0d:2b:12:d5:12:4d:2e:8b:40:4a:a4:
                    e2:d0:08:ee:79:ac:62:4b:bb:c9:3b:9e:6e:79:b2:
                    45:00:94:1f:f3:eb:ba:0a:74:a0:ea:ad:fd:41:c2:
                    87:77:67:fa:ed:29:c6:b3:12:03:ed:e1:a3:50:d8:
                    12:6a:2d:bb:65:09:46:a6:d7:09:7d:43:67:91:be:
                    f1:d3:18:c8:81:a8:61:0f:73:ce:51:0f:15:0f:6a:
                    8c:61:b2:48:f9:c0:f0:43:20:a3:c2:3f:08:16:90:
                    67:b7:63:bc:b1:6c:36:43:bf:09:a7:7a:8c:fa:b2:
                    fb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:7A:34:05:BA:54:67:CE:B1:99:95:2C:31:79:7C:57:46:08:E7:A5
            X509v3 Authority Key Identifier:
                keyid:D3:E2:E0:BC:EB:61:FB:9C:45:27:82:6E:61:0D:46:76:99:D6:3E:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369DB5E/D1EA5914BF3111EDA7E717D0F1222468/0-LgvOth-5xFJ4JuYQ1GdpnWPhQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:50:d8:7c:f4:95:65:86:15:cc:ba:93:f2:0f:85:8d:06:5c:
         dd:62:8f:26:b1:49:3b:ad:33:5b:6d:4b:7e:6a:17:55:8a:4f:
         87:b2:c5:23:1c:0b:51:c7:95:fc:f4:8a:0f:b8:45:b1:46:8f:
         57:b8:df:26:bd:71:82:cb:f4:a6:06:b1:a2:cf:66:9f:49:e8:
         c9:23:23:77:06:c5:54:fa:7a:57:36:69:e5:a3:aa:aa:f5:05:
         0b:bd:63:dc:69:0f:37:23:18:af:00:cc:19:fb:fa:ef:2e:62:
         1f:07:fb:f8:47:5f:9d:04:d8:5b:1c:fd:56:d7:c7:1c:2b:61:
         65:d2:74:46:14:c4:4b:a6:8f:17:53:3e:f4:d7:6d:34:9f:a6:
         b7:32:7c:3c:82:07:24:b4:93:98:ff:45:d1:b5:8a:52:d2:a3:
         9d:ad:74:e9:8d:f9:c6:06:1f:c7:28:ac:98:07:dc:26:14:92:
         3a:e6:92:02:5b:91:98:ab:02:d0:6b:60:6b:d3:44:87:a7:31:
         bb:3d:fc:78:ad:78:fc:00:19:16:61:f4:fe:50:89:5d:41:ac:
         7e:f8:23:00:c0:9c:05:04:be:bb:45:df:43:81:9e:0c:53:bc:
         3c:dd:3a:39:b8:e0:71:80:11:3f:b2:a6:dd:90:38:8e:18:8f:
         a2:26:be:8a
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA5AwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OURCNUVBRjExMC8GA1UEBRMoRDNFMkUwQkNFQjYxRkI5QzQ1Mjc4MjZFNjEwRDQ2
NzY5OUQ2M0UxNDAeFw0yNTA0MjgwMzM4MjNaFw0yNTA0MzAwMzM4MjNaMBgxFjAU
BgNVBAMTDTY4MGVmODMwLTdmYTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDAJsxvg+cx2Hf9oUssEksK5ZZcYRcmr6B4dWWqHsh4chir5DtJ2cFwyMRZ
tpL8QLqljm8lE1Bk6M/6wJ8828YEaVhOl+4XLGjPVNrQKt4vzZV3Be1aDxByXOxQ
VUdkRNVd4lWlUpMj0A2kAw3RGV69AOG9qkyAVRxgJ5aMLnuHiLAEcCOA63blb/4N
KxLVEk0ui0BKpOLQCO55rGJLu8k7nm55skUAlB/z67oKdKDqrf1Bwod3Z/rtKcaz
EgPt4aNQ2BJqLbtlCUam1wl9Q2eRvvHTGMiBqGEPc85RDxUPaoxhskj5wPBDIKPC
PwgWkGe3Y7yxbDZDvwmneoz6svvhAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQU+Ho0
BbpUZ86xmZUsMXl8V0YI56UwHwYDVR0jBBgwFoAU0+LgvOth+5xFJ4JuYQ1GdpnW
PhQwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjlEQjVFL0QxRUE1OTE0QkYzMTExRURBN0U3MTdEMEYxMjIyNDY4LzAtTGd2
T3RoLTV4Rko0SnVZUTFHZHBuV1BoUS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzAtTGd2T3RoLTV4Rko0SnVZUTFHZHBuV1BoUS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OURCNUUvRDFFQTU5MTRCRjMxMTFFREE3RTcxN0QwRjEy
MjI0NjgvMC1MZ3ZPdGgtNXhGSjRKdVlRMUdkcG5XUGhRLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCJUNh89JVlhhXMupPyD4WNBlzdYo8m
sUk7rTNbbUt+ahdVik+HssUjHAtRx5X89IoPuEWxRo9XuN8mvXGCy/SmBrGiz2af
SejJIyN3BsVU+npXNmnlo6qq9QULvWPcaQ83IxivAMwZ+/rvLmIfB/v4R1+dBNhb
HP1W18ccK2Fl0nRGFMRLpo8XUz701200n6a3Mnw8ggcktJOY/0XRtYpS0qOdrXTp
jfnGBh/HKKyYB9wmFJI65pICW5GYqwLQa2Br00SHpzG7Pfx4rXj8ABkWYfT+UIld
Qax++CMAwJwFBL67Rd9DgZ4MU7w83To5uOBxgBE/sqbdkDiOGI+iJr6K
-----END CERTIFICATE-----