Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
File:                     ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft (raw, json)
Hash identifier:          sw2b084cCoE2Fy/r5/AZEAvlXh2CUxJPMe5b20JktsE=
Subject key identifier:   CF:04:9E:F6:99:11:D0:1D:DE:C8:79:5A:E4:F6:6C:A3:D5:A5:B9:35
Authority key identifier: 67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77
Certificate issuer:       /CN=F3632159AR/serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
Certificate serial:       040A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
Manifest number:          0409
Signing time:             Sun 06 Jul 2025 03:18:43 +0000
Manifest this update:     Sun 06 Jul 2025 03:18:43 +0000
Manifest next update:     Tue 08 Jul 2025 03:18:42 +0000
Files and hashes:         1: ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl (hash: 7Q/SdbomQVINJTgsTqZQhxmpHrU7jFcAzy7PNtxgSHE=)
                          2: 1A49A96A7AC911ED812AA695F1222468.roa (hash: ETAi2jqzRi0+AxwIwLa8K/gDxbVP7M/q9PlBlPYnPkY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                          rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 08 Jul 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1034 (0x40a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632159AR, serialNumber=6721A192FCFD261A77C1CDDC47891C7814FAC777
        Validity
            Not Before: Jul  6 03:18:43 2025 GMT
            Not After : Jul  8 03:18:42 2025 GMT
        Subject: CN=6869eb13-17a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ba:ec:ee:c4:d7:67:fd:49:37:9a:9d:1e:99:
                    19:d1:63:d9:03:d2:fa:34:4e:7a:c0:44:c4:8b:b4:
                    75:2a:bb:91:31:f7:67:1f:a5:ef:55:58:e3:30:58:
                    27:8f:ef:fd:2c:77:3f:70:28:c0:89:a7:64:4b:08:
                    12:eb:32:53:7b:1c:09:18:57:00:51:c9:18:b4:4d:
                    be:0d:24:ea:61:6d:2d:16:b8:f1:51:cf:06:56:e9:
                    b4:f1:2e:2b:6a:a9:5b:13:07:d8:48:74:04:b9:7e:
                    f1:03:7f:72:0a:ed:cb:86:27:9f:c9:4d:1f:b2:1d:
                    df:4d:6a:61:de:ba:6f:d1:bb:e8:09:1e:f5:79:a8:
                    13:e9:c4:89:c1:77:f4:db:ea:f4:c0:3e:0d:85:ef:
                    cf:e5:c8:01:e3:ed:a0:8d:c3:af:ae:57:45:3f:49:
                    3b:d1:6c:c6:fd:11:db:e7:db:47:83:1e:3a:84:a7:
                    db:1e:30:ec:b5:cb:fe:4b:bc:78:ce:ed:86:a8:50:
                    2e:fd:c3:f4:bd:bb:6a:57:1a:9b:1e:05:67:0a:2e:
                    3f:e4:40:ce:80:eb:82:fe:c3:06:10:40:97:0a:85:
                    ba:00:ab:9d:37:d5:c2:c3:5d:79:19:67:42:b9:52:
                    e2:ed:1d:20:dd:07:9f:a2:88:e3:ee:ca:e6:31:8e:
                    59:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:04:9E:F6:99:11:D0:1D:DE:C8:79:5A:E4:F6:6C:A3:D5:A5:B9:35
            X509v3 Authority Key Identifier:
                keyid:67:21:A1:92:FC:FD:26:1A:77:C1:CD:DC:47:89:1C:78:14:FA:C7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632159/8A0A5AE84ABC11EDACFD3184F1222468/ZyGhkvz9Jhp3wc3cR4kceBT6x3c.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:b7:1d:31:0e:0b:5a:b8:d8:6c:1a:8f:98:4e:4a:b6:a6:a2:
         53:f6:2e:f6:cc:90:03:52:19:23:5d:21:17:39:31:6a:bf:80:
         d6:42:1e:1d:7f:10:cb:db:13:03:75:88:a6:cc:1e:46:d8:fc:
         f2:e4:ee:73:f3:d4:7d:76:fd:20:72:07:a5:93:2f:17:24:b6:
         62:b9:a5:f6:b2:77:36:c4:be:0e:2a:7d:07:13:50:0f:ed:aa:
         e1:5e:72:a5:5f:9c:b9:e9:95:95:32:27:6f:d8:e7:e9:35:ad:
         50:16:0c:71:0c:36:cd:c8:3f:4c:08:54:a7:6b:a5:75:6a:ce:
         8b:ce:30:e5:d0:ff:80:42:60:62:44:85:cd:7e:f4:5c:1b:38:
         4c:98:62:d3:b1:97:dd:d5:06:9c:bd:83:26:a5:d3:ed:60:32:
         96:63:69:4d:61:3d:7b:12:d7:bc:7b:5c:c5:cc:bf:cc:71:2a:
         40:57:01:c0:94:16:d4:14:b8:1b:db:90:49:15:c1:9f:9d:5e:
         84:87:ab:02:60:95:ef:83:2d:52:f8:d0:b1:9c:e4:e1:f4:6d:
         74:05:96:ac:aa:7d:62:44:c8:61:2f:05:75:4e:78:c5:dc:8a:
         c2:e7:07:3f:6b:90:ec:0d:8e:ee:d2:3a:fe:49:a3:4a:da:9f:
         fd:30:48:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 6 14:48:31 2025 by rpki-client