Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
File:                     zES432VSaGhWOxfptlH5NdVgDNA.mft (raw, json)
Hash identifier:          1GonMB7h2QUrjCn/TuHBQWm3zhebyJ49r3GDti7UqbE=
Subject key identifier:   85:7E:0F:07:80:FC:06:7D:41:A2:20:98:8A:0C:A4:31:A9:72:78:0E
Authority key identifier: CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0
Certificate issuer:       /CN=F363FCC8AF/serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
Certificate serial:       07B0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
Manifest number:          07AD
Signing time:             Sun 19 Oct 2025 01:55:12 +0000
Manifest this update:     Sun 19 Oct 2025 01:55:11 +0000
Manifest next update:     Tue 21 Oct 2025 01:55:11 +0000
Files and hashes:         1: zES432VSaGhWOxfptlH5NdVgDNA.crl (hash: UbF9wUqBFLsJ0w40yhBwaNXvebdGp28n4MOq7kkGfdw=)
                          2: E27073C0F1C111EB9AE36071D8A014CE.roa (hash: y0Q3Frj55z+tecyGPqJPk0LP5+vSEULCrL6Cm5KqQeE=)
                          3: 6CB087F0CD7E11EA9E3A5845F8AEA228.roa (hash: rBsld+QOBW/CrzRT0eM+UJTuXYzPefxB5jKhtvGTg/I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1968 (0x7b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363FCC8AF, serialNumber=CC44B8DF65526868563B17E9B651F935D5600CD0
        Validity
            Not Before: Oct 19 01:55:11 2025 GMT
            Not After : Oct 21 01:55:11 2025 GMT
        Subject: CN=68f44500-9078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:cb:c2:6b:a7:c2:30:60:d6:98:a8:ab:a2:5f:
                    2d:50:27:f1:0c:72:87:3f:82:e7:3d:bc:f1:52:12:
                    6b:23:52:18:b7:1f:49:be:d3:9d:08:42:85:52:e7:
                    73:6b:96:04:3c:4f:d7:42:70:41:45:0f:e1:f0:c2:
                    d7:84:5f:a5:f5:99:c6:93:1b:e7:4f:52:7f:4f:30:
                    02:e0:bc:f5:7a:e0:44:c6:53:fb:c9:af:7b:90:ef:
                    53:2c:9b:c6:1e:2c:67:71:dd:d4:4a:e1:03:16:98:
                    b4:17:31:15:e3:59:8a:5b:72:4e:a4:ab:46:5c:2d:
                    01:35:6c:b5:71:54:b1:d9:2d:7c:ad:ea:ff:46:7b:
                    55:30:48:bd:08:b1:22:1c:3c:b1:5e:1b:39:61:f7:
                    a9:03:ab:00:a0:fc:72:af:e6:3d:0b:2d:8f:ed:eb:
                    af:8e:ae:68:af:cc:ca:fb:62:b4:fb:0b:b9:b7:0b:
                    66:6c:3e:34:a1:12:92:a0:b4:92:59:5e:46:f9:b4:
                    67:30:9c:87:6f:96:a2:fe:d0:bc:93:3c:93:2e:c6:
                    09:44:38:6f:2f:d1:42:29:f0:a6:52:28:26:99:63:
                    8c:bd:32:e3:ed:0f:5a:b5:33:ae:27:19:9c:6a:94:
                    6d:64:a3:a6:6d:4f:c7:69:af:6f:6a:a5:57:3c:82:
                    34:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:7E:0F:07:80:FC:06:7D:41:A2:20:98:8A:0C:A4:31:A9:72:78:0E
            X509v3 Authority Key Identifier:
                keyid:CC:44:B8:DF:65:52:68:68:56:3B:17:E9:B6:51:F9:35:D5:60:0C:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zES432VSaGhWOxfptlH5NdVgDNA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363FCC8/C2E12A8ACCF211EA8B7C4133F8AEA228/zES432VSaGhWOxfptlH5NdVgDNA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:cb:f5:05:57:30:2f:78:c7:59:c1:c6:95:6e:f3:53:61:05:
         11:0e:36:89:4b:78:4e:63:c0:88:56:2c:8c:13:23:10:45:38:
         59:c5:d2:21:2f:ee:1a:ba:34:10:d3:28:14:a3:c7:79:5e:b8:
         5a:ac:b8:36:c0:f5:18:00:79:44:a2:d3:09:7b:f4:6b:be:a1:
         32:2f:88:37:38:d4:68:d9:cd:48:c5:69:3c:b3:69:61:9b:97:
         34:fd:2e:75:10:fa:c4:1e:c1:c7:15:a0:8f:d8:e3:5e:13:52:
         09:62:39:a8:9b:94:f9:96:52:c7:7d:46:19:44:22:29:46:b9:
         c0:66:b5:69:83:a5:fb:7a:0f:c2:a1:52:85:a8:46:b1:3e:16:
         79:a2:1b:80:16:5e:39:a8:40:28:cb:a0:c3:61:74:5e:0e:c3:
         14:03:82:5d:b3:4a:34:f4:e5:02:72:14:4c:cf:e4:e1:d5:0b:
         7b:c6:55:5f:de:95:51:4e:5e:76:32:e0:6c:28:e6:2e:5e:f6:
         06:e2:c9:d9:0c:2f:e5:9e:c1:4b:74:ce:51:06:0f:88:5c:18:
         72:48:a2:e9:2a:ef:a8:75:0e:bd:bd:79:e4:06:13:90:c8:e4:
         67:82:c4:67:6d:4e:24:b8:27:1c:dc:b7:29:6e:6f:86:4a:34:
         ad:c2:01:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:57:14 2025 by rpki-client