Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
File:                     ZbPoGBw9qNHWQehKRcjvgjndfqc.mft (raw, json)
Hash identifier:          l61To5kgwTOKkGWv+YpobJu8xIfnsNgAnkAKGjpKnXI=
Subject key identifier:   82:FC:53:94:AC:30:23:53:FE:C2:18:AD:AC:50:D9:4E:2B:4B:9F:70
Authority key identifier: 65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7
Certificate issuer:       /CN=F367B8D1RI/serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
Certificate serial:       0352
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
Manifest number:          0352
Signing time:             Mon 20 Oct 2025 03:40:39 +0000
Manifest this update:     Mon 20 Oct 2025 03:40:38 +0000
Manifest next update:     Wed 22 Oct 2025 03:40:38 +0000
Files and hashes:         1: ZbPoGBw9qNHWQehKRcjvgjndfqc.crl (hash: 0Of5jyvBt9wl5Tm/EZN8RMf/3aPPEbenVh8YkZLarqg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
                          rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:45:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 850 (0x352)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367B8D1RI, serialNumber=65B3E8181C3DA8D1D641E84A45C8EF8239DD7EA7
        Validity
            Not Before: Oct 20 03:40:38 2025 GMT
            Not After : Oct 22 03:40:38 2025 GMT
        Subject: CN=68f5af36-d0fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:75:d3:4c:15:be:54:09:6d:d3:f1:40:0c:
                    e0:9b:54:f5:f6:ef:f4:11:4d:14:30:b7:14:3a:15:
                    b5:a6:76:49:da:66:9a:5c:a2:1d:4a:fd:84:a6:2b:
                    8a:81:2f:9a:d0:a5:79:ca:f1:3b:f2:3d:cc:df:8b:
                    23:df:05:4c:fc:6f:72:34:60:40:3c:21:5f:46:ae:
                    ee:ad:49:06:79:36:21:8b:f1:0d:45:ab:61:7d:24:
                    0e:01:e6:b8:b7:73:ee:ca:8e:01:81:49:cf:27:03:
                    50:01:82:13:b2:47:82:c4:70:50:29:62:9a:d6:b3:
                    ce:ca:70:3f:20:e8:0b:7a:a5:4f:71:99:53:ab:59:
                    d3:0a:4e:0b:aa:0c:1d:95:23:e7:7a:bf:ee:92:ad:
                    4e:1e:e7:ce:87:75:e6:3a:c0:d9:ae:ac:c1:0c:cf:
                    3a:c3:d6:75:0f:ed:bc:30:b1:94:5c:5e:40:0e:3a:
                    c5:2b:a7:d2:54:5a:ab:b4:e6:f9:e9:ba:3a:e1:e7:
                    1d:bc:6e:ac:21:be:63:9e:a4:26:1d:a8:d1:95:2d:
                    cb:77:65:ee:da:06:4f:4b:62:1b:cb:cf:e0:6d:42:
                    a6:56:6a:53:2b:c6:88:5c:7e:2f:c2:1d:01:0c:46:
                    f6:13:68:29:1f:e0:91:ae:08:41:b8:5f:f3:42:b4:
                    e4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FC:53:94:AC:30:23:53:FE:C2:18:AD:AC:50:D9:4E:2B:4B:9F:70
            X509v3 Authority Key Identifier:
                keyid:65:B3:E8:18:1C:3D:A8:D1:D6:41:E8:4A:45:C8:EF:82:39:DD:7E:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/ZbPoGBw9qNHWQehKRcjvgjndfqc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367B8D1/2F69E8C221F011EE8646970F4AD9E6FC/ZbPoGBw9qNHWQehKRcjvgjndfqc.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8b:a1:d2:fe:24:22:1b:a6:7f:ea:bf:52:6e:a0:19:c3:9f:
         3f:1f:f2:37:1e:f7:05:bf:56:e4:f7:d5:67:87:aa:80:c0:90:
         ac:75:b3:0f:b0:da:ce:42:ac:e1:36:18:49:b9:1e:77:3e:1d:
         a9:c8:06:ca:d5:5f:b6:b1:5e:2d:50:bb:91:ba:bc:e9:bf:13:
         ba:b9:c7:c3:23:29:98:5f:85:08:74:bd:85:df:ae:f1:6b:88:
         a9:0b:a5:60:40:27:e3:7f:da:2e:35:0c:7c:40:a3:65:51:83:
         22:4c:ff:2b:a7:85:b6:8a:fe:5a:74:bf:04:25:ae:6f:cf:bc:
         c8:11:22:17:cd:e6:eb:1a:75:15:7f:4a:ce:a6:95:a1:6a:7f:
         ae:93:b8:42:6f:6d:33:40:14:2a:07:fd:85:32:db:cd:f4:55:
         fe:38:20:50:43:4b:07:b5:bf:3e:c7:75:77:62:9f:bd:19:7f:
         56:59:d7:91:0e:c5:a7:fb:9b:81:a6:f9:9f:5a:f7:ed:9b:dc:
         37:6f:c2:4b:7d:b9:cb:a1:b2:2a:9a:0e:48:7d:71:b2:cf:a9:
         ac:b6:54:b7:da:eb:d8:08:6b:89:ea:27:df:b1:54:96:98:0b:
         52:86:38:e6:46:fa:b7:39:c9:30:ef:03:fa:80:ce:65:df:94:
         cf:51:b0:94
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA1IwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0I4RDFSSTExMC8GA1UEBRMoNjVCM0U4MTgxQzNEQThEMUQ2NDFFODRBNDVDOEVG
ODIzOUREN0VBNzAeFw0yNTEwMjAwMzQwMzhaFw0yNTEwMjIwMzQwMzhaMBgxFjAU
BgNVBAMTDTY4ZjVhZjM2LWQwZmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCdOXXTTBW+VAlt0/FADOCbVPX27/QRTRQwtxQ6FbWmdknaZppcoh1K/YSm
K4qBL5rQpXnK8TvyPczfiyPfBUz8b3I0YEA8IV9Gru6tSQZ5NiGL8Q1Fq2F9JA4B
5ri3c+7KjgGBSc8nA1ABghOyR4LEcFApYprWs87KcD8g6At6pU9xmVOrWdMKTguq
DB2VI+d6v+6SrU4e586HdeY6wNmurMEMzzrD1nUP7bwwsZRcXkAOOsUrp9JUWqu0
5vnpujrh5x28bqwhvmOepCYdqNGVLct3Ze7aBk9LYhvLz+BtQqZWalMrxohcfi/C
HQEMRvYTaCkf4JGuCEG4X/NCtOTjAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUgvxT
lKwwI1P+whitrFDZTitLn3AwHwYDVR0jBBgwFoAUZbPoGBw9qNHWQehKRcjvgjnd
fqcwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdCOEQxLzJGNjlFOEMyMjFGMDExRUU4NjQ2OTcwRjRBRDlFNkZDL1piUG9H
Qnc5cU5IV1FlaEtSY2p2Z2puZGZxYy5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L1piUG9HQnc5cU5IV1FlaEtSY2p2Z2puZGZxYy5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0I4RDEvMkY2OUU4QzIyMUYwMTFFRTg2NDY5NzBGNEFEOUU2
RkMvWmJQb0dCdzlxTkhXUWVoS1JjanZnam5kZnFjLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqi6HS/iQiG6Z/6r9SbqAZw58/H/I3HvcF
v1bk99Vnh6qAwJCsdbMPsNrOQqzhNhhJuR53Ph2pyAbK1V+2sV4tULuRurzpvxO6
ucfDIymYX4UIdL2F367xa4ipC6VgQCfjf9ouNQx8QKNlUYMiTP8rp4W2iv5adL8E
Ja5vz7zIESIXzebrGnUVf0rOppWhan+uk7hCb20zQBQqB/2FMtvN9FX+OCBQQ0sH
tb8+x3V3Yp+9GX9WWdeRDsWn+5uBpvmfWvftm9w3b8JLfbnLobIqmg5IfXGyz6ms
tlS32uvYCGuJ6iffsVSWmAtShjjmRvq3Ockw7wP6gM5l35TPUbCU
-----END CERTIFICATE-----
Generated at Mon Oct 20 20:22:40 2025 by rpki-client