Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File:                     ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier:          N0NNgMgECOPnOXwSG7yDVBbGPRalgoFyqsER+1tIEJc=
Subject key identifier:   B2:41:18:3F:04:95:5E:A8:9B:D9:54:3D:10:3D:DA:32:38:85:AC:76
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer:       /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial:       0473
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number:          0472
Signing time:             Sun 19 Oct 2025 03:06:18 +0000
Manifest this update:     Sun 19 Oct 2025 03:06:17 +0000
Manifest next update:     Tue 21 Oct 2025 03:06:17 +0000
Files and hashes:         1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: IIbwM4mcrwsV09XP0yQHITv3hTEgk5R7eXgXpJBhWj8=)
                          2: 1A49A96A7AC911ED812AA695F1222468.roa (hash: ETAi2jqzRi0+AxwIwLa8K/gDxbVP7M/q9PlBlPYnPkY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                          rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 03:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1139 (0x473)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AR, serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
        Validity
            Not Before: Oct 19 03:06:17 2025 GMT
            Not After : Oct 21 03:06:17 2025 GMT
        Subject: CN=68f455aa-8ab2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:02:68:7d:ad:c5:94:fd:0d:ce:ab:1a:4f:13:
                    db:ac:d8:9c:63:3a:ef:9f:2e:3d:c0:f3:eb:8d:ec:
                    f4:00:10:ed:de:ee:bd:25:9c:1f:98:52:a8:e8:8a:
                    e4:90:33:0e:38:a0:30:c5:45:9f:16:85:3d:f7:89:
                    34:90:1a:d4:dc:bf:58:54:9d:a2:b1:64:2a:ec:9b:
                    fd:b8:2c:ca:4b:5f:9b:42:b4:d4:67:76:0f:27:94:
                    db:78:6a:02:77:fb:c4:5b:cf:43:a3:31:eb:3a:c8:
                    e3:00:a4:31:10:14:86:e2:53:24:bc:b1:b6:00:b0:
                    70:5f:20:5f:22:5d:ee:80:e0:aa:db:ec:8b:5e:3c:
                    3c:26:e4:0a:de:56:0a:41:36:cc:64:2b:1a:83:29:
                    ad:a1:46:8b:95:03:67:56:64:f2:f8:b5:5f:cc:74:
                    d8:01:a1:0e:4d:54:83:81:6e:30:8e:3f:31:b3:a9:
                    7f:8f:1b:81:a1:a1:cb:a8:99:5c:64:05:6a:8d:fc:
                    7d:ce:7a:5e:b3:f7:5c:83:b5:7a:3a:44:54:ca:b1:
                    60:53:1c:f1:a3:75:f3:36:16:f6:ff:91:8c:1f:c9:
                    b9:d7:ab:c8:df:4a:c5:03:3f:ed:15:88:c3:35:1f:
                    e8:cd:87:60:01:52:90:3d:ea:b3:bb:d7:60:0c:de:
                    f9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:41:18:3F:04:95:5E:A8:9B:D9:54:3D:10:3D:DA:32:38:85:AC:76
            X509v3 Authority Key Identifier:
                keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:3f:93:b2:4f:13:ce:8e:bc:de:33:79:c1:d0:1a:d1:21:8e:
         74:99:09:d0:bc:37:d6:48:12:a6:e0:3d:c5:41:5f:20:5c:a8:
         75:ef:e0:e3:9a:4a:d2:8b:a7:e5:c1:eb:8a:e0:8f:da:c0:21:
         f1:e4:f1:dd:89:08:99:94:be:df:13:a7:ae:23:a2:7d:6b:18:
         2c:48:eb:82:b7:e6:e0:1c:63:63:c9:f5:e2:82:15:fe:e2:3d:
         aa:10:ae:32:95:3d:f6:81:6a:db:59:f4:e1:56:e9:ad:ed:c4:
         da:30:7e:ed:02:e0:8a:56:ef:28:0e:4c:56:44:30:5b:cf:64:
         d1:7e:4b:e0:a3:ab:9c:b0:2f:0a:72:7b:ae:89:f8:d3:63:2c:
         82:1e:7f:5a:d0:24:49:6d:e4:9a:0e:b6:33:fb:e3:f4:aa:ce:
         dd:d7:3e:cc:5b:d0:2a:26:7d:7d:20:d8:22:42:08:01:d6:ab:
         25:53:01:cf:dc:1e:d6:d5:37:ff:cf:d9:c5:14:31:71:05:69:
         c7:c9:07:1d:05:1e:ec:1b:76:08:d7:66:c9:b3:f8:f1:e0:c7:
         55:94:93:37:ac:2e:f8:c1:45:26:d7:2d:7b:b7:2f:c4:fd:eb:
         e8:5d:39:3c:b3:ec:e7:92:a6:7a:e8:d8:cc:74:53:b0:2c:c8:
         da:ca:90:0f
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBHMwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MzIxNTlBUjExMC8GA1UEBRMoNjcyMUExOTJGQ0ZEMjYxQTc3QzFDRERDNDc4OTFD
NzgxNEZBQzc3NzAeFw0yNTEwMTkwMzA2MTdaFw0yNTEwMjEwMzA2MTdaMBgxFjAU
BgNVBAMTDTY4ZjQ1NWFhLThhYjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDwAmh9rcWU/Q3OqxpPE9us2JxjOu+fLj3A8+uN7PQAEO3e7r0lnB+YUqjo
iuSQMw44oDDFRZ8WhT33iTSQGtTcv1hUnaKxZCrsm/24LMpLX5tCtNRndg8nlNt4
agJ3+8Rbz0OjMes6yOMApDEQFIbiUyS8sbYAsHBfIF8iXe6A4Krb7ItePDwm5Are
VgpBNsxkKxqDKa2hRouVA2dWZPL4tV/MdNgBoQ5NVIOBbjCOPzGzqX+PG4Ghocuo
mVxkBWqN/H3Oel6z91yDtXo6RFTKsWBTHPGjdfM2Fvb/kYwfybnXq8jfSsUDP+0V
iMM1H+jNh2ABUpA96rO712AM3vnvAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUskEY
PwSVXqib2VQ9ED3aMjiFrHYwHwYDVR0jBBgwFoAUZyGhkvz9Jhp3wc3cR4kceBT6
x3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjMyMTU5LzhBMEE1QUU4NEFCQzExRURBQ0ZEMzE4NEYxMjIyNDY4L1p5R2hr
dno5SmhwM3djM2NSNGtjZUJUNngzYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1p5R2hrdno5SmhwM3djM2NSNGtjZUJUNngzYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MzIxNTkvOEEwQTVBRTg0QUJDMTFFREFDRkQzMTg0RjEyMjI0
NjgvWnlHaGt2ejlKaHAzd2MzY1I0a2NlQlQ2eDNjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB1P5OyTxPOjrzeM3nB0BrRIY50mQnQvDfW
SBKm4D3FQV8gXKh17+DjmkrSi6flweuK4I/awCHx5PHdiQiZlL7fE6euI6J9axgs
SOuCt+bgHGNjyfXighX+4j2qEK4ylT32gWrbWfThVumt7cTaMH7tAuCKVu8oDkxW
RDBbz2TRfkvgo6ucsC8KcnuuifjTYyyCHn9a0CRJbeSaDrYz++P0qs7d1z7MW9Aq
Jn19INgiQggB1qslUwHP3B7W1Tf/z9nFFDFxBWnHyQcdBR7sG3YI12bJs/jx4MdV
lJM3rC74wUUm1y17ty/E/evoXTk8s+znkqZ66NjMdFOwLMjaypAP
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:48:15 2025 by rpki-client