Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.mft
File:                     ZR6Rlo4xccF87sDESReO5-FJdBg.mft (raw, json)
Hash identifier:          Nbfb3rpAoX+b4Y0xdRSx0i5QHTFDWsDUX82F550lIP4=
Subject key identifier:   BA:7D:D9:23:3D:A0:3C:CA:BC:54:CF:2E:88:4A:17:BE:20:0C:BF:49
Authority key identifier: 65:1E:91:96:8E:31:71:C1:7C:EE:C0:C4:49:17:8E:E7:E1:49:74:18
Certificate issuer:       /CN=F364FE7FAR/serialNumber=651E91968E3171C17CEEC0C449178EE7E1497418
Certificate serial:       03E1
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZR6Rlo4xccF87sDESReO5-FJdBg.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.mft
Manifest number:          03DF
Signing time:             Sat 23 Aug 2025 03:21:05 +0000
Manifest this update:     Sat 23 Aug 2025 03:21:04 +0000
Manifest next update:     Mon 25 Aug 2025 03:21:04 +0000
Files and hashes:         1: ZR6Rlo4xccF87sDESReO5-FJdBg.crl (hash: j1qh+o3oUDTI4BhZMA99zznYbYWQGgFTm3lnPORuRxU=)
                          2: C5A3761CEDD911EFA5DF909F762E951A.roa (hash: hZfV1xEAL1sT3W1eG7s8f3Z0rtLuoAUEZBkWsBcTbHY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.mft
                          rsync://rpki.afrinic.net/repository/arin/ZR6Rlo4xccF87sDESReO5-FJdBg.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364FE7FAR, serialNumber=651E91968E3171C17CEEC0C449178EE7E1497418
        Validity
            Not Before: Aug 23 03:21:04 2025 GMT
            Not After : Aug 25 03:21:04 2025 GMT
        Subject: CN=68a933a1-f47c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:13:96:61:46:27:71:10:d0:05:28:11:9e:
                    db:15:ee:28:b0:e0:a2:f3:8a:90:cd:ce:e9:49:e0:
                    a4:b4:3f:8d:90:01:6f:53:3a:fa:ad:ca:dd:6c:10:
                    de:64:7c:db:91:33:fe:c8:13:5d:69:9a:e6:01:09:
                    c3:90:78:23:fa:bb:5b:d7:a6:6d:c7:13:65:91:a5:
                    df:6a:88:db:6e:79:b3:84:98:1f:a4:4d:86:d8:1c:
                    d1:47:0d:89:31:da:a0:aa:da:cd:d1:c8:e6:02:88:
                    59:9e:e9:26:6e:42:71:e6:07:c1:85:97:05:64:45:
                    fb:bd:8a:41:7e:6f:2c:8e:af:69:0a:63:df:e6:e8:
                    bd:b4:b2:77:1e:57:74:7a:f0:fa:48:a3:5a:d4:16:
                    c2:ab:09:69:3e:7e:a0:2b:e2:44:95:ee:3d:aa:87:
                    71:3b:90:d8:42:25:e1:f0:e5:96:f7:e2:32:cc:b6:
                    20:d3:42:8b:b3:85:cd:0c:3f:eb:38:73:6c:1c:b8:
                    50:c6:bc:8b:f9:c9:95:8b:78:7d:7a:17:6f:b6:be:
                    0f:7b:55:6a:32:cb:70:e6:92:9b:df:6e:49:46:df:
                    02:e2:38:c9:d3:7a:ac:ec:23:76:55:aa:34:1b:32:
                    2b:f3:e0:b1:98:df:20:6f:08:97:2d:ce:f5:23:94:
                    06:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:7D:D9:23:3D:A0:3C:CA:BC:54:CF:2E:88:4A:17:BE:20:0C:BF:49
            X509v3 Authority Key Identifier:
                keyid:65:1E:91:96:8E:31:71:C1:7C:EE:C0:C4:49:17:8E:E7:E1:49:74:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZR6Rlo4xccF87sDESReO5-FJdBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364FE7F/78E31B1E90B811EDBE277DECF1222468/ZR6Rlo4xccF87sDESReO5-FJdBg.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:4e:c0:f2:e0:2f:e2:e5:89:f2:b3:cb:14:3e:89:90:b1:bc:
         9d:78:d6:54:b5:51:52:9c:1c:0d:7b:45:95:21:d3:a8:28:5f:
         88:0d:13:32:ad:f0:4c:d6:51:e8:32:2a:4c:d1:6f:d7:e9:88:
         67:52:d4:aa:25:47:ec:27:95:2d:09:69:fc:83:99:85:7f:11:
         e6:b2:b9:59:ab:5a:79:28:dc:dd:e0:02:58:08:79:0b:5d:df:
         c2:02:c0:02:01:4e:68:39:90:c7:a4:39:20:8e:92:7f:16:56:
         19:a2:99:84:34:db:11:21:63:4f:24:f1:50:c3:8b:b1:e5:eb:
         50:a1:ff:2a:8c:71:25:4c:9e:bc:cd:79:dd:f1:f8:85:f3:d2:
         ac:3b:84:5d:98:ac:59:f1:40:8f:aa:d0:05:08:92:87:18:91:
         e4:c6:6a:81:e0:ed:c7:d5:6c:bb:3e:70:77:14:d2:ab:04:0b:
         c7:ee:de:7a:c9:64:bc:4a:bb:b1:62:79:d8:65:25:ed:d8:0f:
         ad:2d:d5:fd:eb:14:1a:a5:6a:d9:a1:e5:7d:6b:92:72:ce:50:
         0a:6a:90:04:d1:6b:84:a7:e5:c4:b6:03:a8:b2:c0:51:68:f3:
         76:73:9a:5d:5a:1b:60:9a:81:85:90:e0:30:53:b1:e4:9c:46:
         e9:c0:50:1d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA+EwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
NEZFN0ZBUjExMC8GA1UEBRMoNjUxRTkxOTY4RTMxNzFDMTdDRUVDMEM0NDkxNzhF
RTdFMTQ5NzQxODAeFw0yNTA4MjMwMzIxMDRaFw0yNTA4MjUwMzIxMDRaMBgxFjAU
BgNVBAMTDTY4YTkzM2ExLWY0N2MwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDUUROWYUYncRDQBSgRntsV7iiw4KLzipDNzulJ4KS0P42QAW9TOvqtyt1s
EN5kfNuRM/7IE11pmuYBCcOQeCP6u1vXpm3HE2WRpd9qiNtuebOEmB+kTYbYHNFH
DYkx2qCq2s3RyOYCiFme6SZuQnHmB8GFlwVkRfu9ikF+byyOr2kKY9/m6L20snce
V3R68PpIo1rUFsKrCWk+fqAr4kSV7j2qh3E7kNhCJeHw5Zb34jLMtiDTQouzhc0M
P+s4c2wcuFDGvIv5yZWLeH16F2+2vg97VWoyy3DmkpvfbklG3wLiOMnTeqzsI3ZV
qjQbMivz4LGY3yBvCJctzvUjlAbTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUun3Z
Iz2gPMq8VM8uiEoXviAMv0kwHwYDVR0jBBgwFoAUZR6Rlo4xccF87sDESReO5+FJ
dBgwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjRGRTdGLzc4RTMxQjFFOTBCODExRURCRTI3N0RFQ0YxMjIyNDY4L1pSNlJs
bzR4Y2NGODdzREVTUmVPNS1GSmRCZy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1pSNlJsbzR4Y2NGODdzREVTUmVPNS1GSmRCZy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2NEZFN0YvNzhFMzFCMUU5MEI4MTFFREJFMjc3REVDRjEyMjI0
NjgvWlI2UmxvNHhjY0Y4N3NERVNSZU81LUZKZEJnLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQALTsDy4C/i5Ynys8sUPomQsbydeNZUtVFS
nBwNe0WVIdOoKF+IDRMyrfBM1lHoMipM0W/X6YhnUtSqJUfsJ5UtCWn8g5mFfxHm
srlZq1p5KNzd4AJYCHkLXd/CAsACAU5oOZDHpDkgjpJ/FlYZopmENNsRIWNPJPFQ
w4ux5etQof8qjHElTJ68zXnd8fiF89KsO4RdmKxZ8UCPqtAFCJKHGJHkxmqB4O3H
1Wy7PnB3FNKrBAvH7t56yWS8SruxYnnYZSXt2A+tLdX96xQapWrZoeV9a5JyzlAK
apAE0WuEp+XEtgOossBRaPN2c5pdWhtgmoGFkOAwU7HknEbpwFAd
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:55:01 2025 by rpki-client