Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
File:                     kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft (raw, json)
Hash identifier:          bdbd2EH9UnsTKJuIn9f/89XdMTz3u9h3GaNBopLsPEI=
Subject key identifier:   31:3E:92:76:1C:EF:37:E6:DC:75:AC:B5:1D:72:CC:2A:31:DD:E3:18
Authority key identifier: 93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F
Certificate issuer:       /CN=F362AF02AR/serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
Certificate serial:       0966
Authority info access:    rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
Manifest number:          095F
Signing time:             Mon 20 Oct 2025 01:24:33 +0000
Manifest this update:     Mon 20 Oct 2025 01:24:33 +0000
Manifest next update:     Wed 22 Oct 2025 01:24:33 +0000
Files and hashes:         1: kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl (hash: wcGHpTN2I/b9JMAWAmF73I6MF23ataaWzM67PM4E8ew=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                          rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2406 (0x966)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F362AF02AR, serialNumber=933E02961E0ABD835CBC7EE283F157194746323F
        Validity
            Not Before: Oct 20 01:24:33 2025 GMT
            Not After : Oct 22 01:24:33 2025 GMT
        Subject: CN=68f58f51-533b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:5a:d8:3b:5c:6b:ac:94:07:0b:67:02:e1:
                    1e:63:70:49:8c:06:cc:70:d3:f5:e1:9d:6d:e2:3c:
                    7c:bf:24:6c:5b:fe:89:aa:3e:13:d7:1b:b7:99:ea:
                    83:7b:63:22:b9:6a:e7:c6:17:37:8b:e3:8f:10:ba:
                    22:32:42:4a:a5:24:35:46:c7:64:c5:57:fa:a0:db:
                    af:87:37:c0:0a:ee:c7:8f:8b:40:a4:18:93:1b:a3:
                    ab:e1:11:df:66:da:3a:60:92:20:ee:92:eb:78:60:
                    ee:e1:82:18:2f:f3:27:1b:5b:80:97:a3:ae:3d:1d:
                    69:27:e2:22:ee:35:04:4e:ff:8c:c1:5d:c7:84:29:
                    27:15:8d:7b:19:cd:ee:00:02:a2:90:26:4b:f4:ad:
                    de:55:a8:04:ed:56:b6:15:78:6a:42:62:de:cf:db:
                    70:10:76:4f:57:6c:9e:bc:a4:ad:d8:b8:09:99:1b:
                    da:ab:ed:eb:ed:a4:b8:99:80:99:ee:a3:43:6c:19:
                    cf:7d:6e:19:65:f9:39:87:d2:8b:77:6b:0c:b2:7c:
                    fc:f9:fb:88:df:35:e1:3d:a9:47:d4:77:8a:9e:29:
                    87:62:40:e2:af:57:1c:30:98:6f:9f:99:94:f1:19:
                    92:99:3d:cf:84:3b:45:e8:60:fa:ed:e5:26:91:99:
                    4b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:3E:92:76:1C:EF:37:E6:DC:75:AC:B5:1D:72:CC:2A:31:DD:E3:18
            X509v3 Authority Key Identifier:
                keyid:93:3E:02:96:1E:0A:BD:83:5C:BC:7E:E2:83:F1:57:19:47:46:32:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/kz4Clh4KvYNcvH7ig_FXGUdGMj8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F362AF02/4F6FDA66838C11E9B364E911F8AEA228/kz4Clh4KvYNcvH7ig_FXGUdGMj8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:3f:59:ca:46:da:5e:74:45:0c:0f:80:eb:ab:8d:ed:4d:ae:
         82:b9:8c:18:36:c2:37:a1:12:6d:1e:65:b3:5e:95:e7:07:bc:
         3b:03:83:16:e3:69:3d:25:45:12:f1:40:bf:af:df:01:9d:86:
         1e:09:82:dc:05:40:a4:f3:70:cd:1a:5d:dc:b1:c6:f6:36:03:
         74:d4:69:27:bd:59:a3:36:00:b5:1b:4a:00:f9:e0:b9:0e:3b:
         a0:5a:6b:37:f0:5d:61:e1:5f:80:21:cf:11:17:4b:5a:d2:90:
         8c:33:1e:92:1e:a8:db:69:d7:06:b1:4b:60:7b:72:50:dc:c6:
         8b:4b:08:85:73:16:8f:db:a0:43:30:e7:28:a1:1a:68:d6:99:
         db:00:54:8d:62:1b:67:9f:c5:36:5d:bc:95:90:39:9c:40:7e:
         38:13:e6:6c:63:7d:95:f5:4d:cc:2e:10:02:07:c3:f7:36:e2:
         a0:44:01:67:f5:f7:fb:fb:2f:46:10:30:24:f6:3a:9b:a6:78:
         5c:fc:aa:30:23:76:5d:26:1f:76:ef:41:5b:4e:07:a9:be:90:
         28:91:7d:ce:1b:95:60:e5:8a:43:7b:d9:2a:8a:c7:83:01:06:
         c8:1b:1e:4c:9f:47:78:a3:2e:17:e6:00:db:e3:a4:6d:88:41:
         3a:7a:b6:92
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICCWYwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MkFGMDJBUjExMC8GA1UEBRMoOTMzRTAyOTYxRTBBQkQ4MzVDQkM3RUUyODNGMTU3
MTk0NzQ2MzIzRjAeFw0yNTEwMjAwMTI0MzNaFw0yNTEwMjIwMTI0MzNaMBgxFjAU
BgNVBAMTDTY4ZjU4ZjUxLTUzM2IwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC4tlrYO1xrrJQHC2cC4R5jcEmMBsxw0/XhnW3iPHy/JGxb/omqPhPXG7eZ
6oN7YyK5aufGFzeL448QuiIyQkqlJDVGx2TFV/qg26+HN8AK7sePi0CkGJMbo6vh
Ed9m2jpgkiDukut4YO7hghgv8ycbW4CXo649HWkn4iLuNQRO/4zBXceEKScVjXsZ
ze4AAqKQJkv0rd5VqATtVrYVeGpCYt7P23AQdk9XbJ68pK3YuAmZG9qr7evtpLiZ
gJnuo0NsGc99bhll+TmH0ot3awyyfPz5+4jfNeE9qUfUd4qeKYdiQOKvVxwwmG+f
mZTxGZKZPc+EO0XoYPrt5SaRmUu3AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUMT6S
dhzvN+bcday1HXLMKjHd4xgwHwYDVR0jBBgwFoAUkz4Clh4KvYNcvH7ig/FXGUdG
Mj8wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjJBRjAyLzRGNkZEQTY2ODM4QzExRTlCMzY0RTkxMUY4QUVBMjI4L2t6NENs
aDRLdllOY3ZIN2lnX0ZYR1VkR01qOC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L2t6NENsaDRLdllOY3ZIN2lnX0ZYR1VkR01qOC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MkFGMDIvNEY2RkRBNjY4MzhDMTFFOUIzNjRFOTExRjhBRUEy
Mjgva3o0Q2xoNEt2WU5jdkg3aWdfRlhHVWRHTWo4Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAfP1nKRtpedEUMD4Drq43tTa6CuYwYNsI3
oRJtHmWzXpXnB7w7A4MW42k9JUUS8UC/r98BnYYeCYLcBUCk83DNGl3cscb2NgN0
1GknvVmjNgC1G0oA+eC5DjugWms38F1h4V+AIc8RF0ta0pCMMx6SHqjbadcGsUtg
e3JQ3MaLSwiFcxaP26BDMOcooRpo1pnbAFSNYhtnn8U2XbyVkDmcQH44E+ZsY32V
9U3MLhACB8P3NuKgRAFn9ff7+y9GEDAk9jqbpnhc/KowI3ZdJh9270FbTgepvpAo
kX3OG5Vg5YpDe9kqiseDAQbIGx5Mn0d4oy4X5gDb46RtiEE6eraS
-----END CERTIFICATE-----
Generated at Mon Oct 20 19:26:41 2025 by rpki-client