Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
File:                     ZoAHqf6WL0fU33c33hdQYKxavOw.mft (raw, json)
Hash identifier:          bzp2B3BZp2oP7KrHcwx9xBe9FO5MioBHuPC73BS8y+k=
Subject key identifier:   2C:26:16:D6:73:00:7F:45:27:3E:8C:09:C3:E2:13:0C:55:E9:73:1C
Authority key identifier: 66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC
Certificate issuer:       /CN=F3687682AR/serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
Certificate serial:       0234
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
Manifest number:          0232
Signing time:             Mon 20 Oct 2025 04:16:09 +0000
Manifest this update:     Mon 20 Oct 2025 04:16:08 +0000
Manifest next update:     Wed 22 Oct 2025 04:16:08 +0000
Files and hashes:         1: ZoAHqf6WL0fU33c33hdQYKxavOw.crl (hash: 3nCyElOJIxr3zJH3MdBU5pH4fu6AAAd9C3hbsh8zgqY=)
                          2: 4348CF92009411EF9CFF8618017001B1.roa (hash: kE7Wa2CuajfImbklB2Ig5E0X9bA3vR+6n/vZhq2Lzac=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                          rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 564 (0x234)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3687682AR, serialNumber=668007A9FE962F47D4DF7737DE175060AC5ABCEC
        Validity
            Not Before: Oct 20 04:16:08 2025 GMT
            Not After : Oct 22 04:16:08 2025 GMT
        Subject: CN=68f5b789-5f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:ab:4b:c2:ec:09:a6:7d:b2:de:f2:49:3b:
                    29:ba:a4:f5:8e:2b:76:f1:8c:99:a8:d8:0e:ab:b8:
                    bd:ef:6a:31:4a:d1:25:e9:5e:87:1c:95:a8:fc:c4:
                    4a:a2:f6:3b:26:63:1d:3e:ee:3f:d2:0c:f4:cd:dc:
                    9b:02:2f:e8:3b:a6:0f:aa:8d:6e:98:13:7b:85:ba:
                    cd:d5:2b:09:f6:84:2d:43:17:49:4c:3a:8a:1d:77:
                    21:33:cc:19:d5:d5:5d:62:a1:a6:f1:40:dc:47:e8:
                    d5:0a:60:ba:42:38:14:36:69:ae:5b:cc:10:85:c6:
                    19:4a:75:f7:09:aa:f2:a0:a0:5c:b4:77:87:9a:64:
                    0e:f6:05:6b:4a:97:3d:f4:f4:20:42:ee:fa:c9:3b:
                    99:41:f6:dd:73:e0:2b:ba:b5:b9:8e:d3:bd:4e:3c:
                    40:b8:4a:a2:0a:f2:73:70:11:10:67:bc:51:ce:e6:
                    bd:38:9f:53:b9:96:5b:6e:f5:d6:06:72:4d:e1:74:
                    69:ce:55:58:0d:7a:6d:a9:29:92:cd:6d:0f:36:28:
                    00:dc:74:ac:6a:6e:e9:ff:07:ee:c0:dc:f3:3a:89:
                    7a:e6:2a:49:b7:84:5a:1d:94:96:4c:bf:03:95:4c:
                    a3:a0:19:2b:3c:f1:72:58:5a:e2:35:c8:41:4d:c6:
                    79:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:26:16:D6:73:00:7F:45:27:3E:8C:09:C3:E2:13:0C:55:E9:73:1C
            X509v3 Authority Key Identifier:
                keyid:66:80:07:A9:FE:96:2F:47:D4:DF:77:37:DE:17:50:60:AC:5A:BC:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZoAHqf6WL0fU33c33hdQYKxavOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3687682/ECCB3E1C009211EF94AE900D017001B1/ZoAHqf6WL0fU33c33hdQYKxavOw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:66:f5:d4:f1:34:78:bb:8d:8b:1e:66:e6:b6:bc:c2:72:f2:
         de:2c:a5:3f:9b:39:2f:bb:b1:f2:f9:81:53:f7:11:94:c0:51:
         5f:88:7b:5e:ff:f0:62:79:0f:df:a4:3a:34:cc:32:99:ea:fc:
         92:ee:63:4f:80:21:42:53:51:5a:e5:29:57:74:c3:3a:84:f4:
         a9:3a:f5:a2:54:42:cb:56:60:0a:c5:a8:1c:b5:bd:ec:df:b4:
         64:26:da:73:ae:c8:2b:2f:01:60:55:49:e0:58:1d:b6:22:8f:
         33:b1:77:b2:66:fd:7c:ca:eb:10:fa:5d:ca:79:4b:d5:53:00:
         a5:06:f1:3f:35:12:b3:1d:bb:29:0c:65:63:d5:3e:60:8b:8f:
         82:fe:80:ff:f1:11:53:33:15:88:b4:05:51:99:81:b4:37:4f:
         31:c7:24:4d:f0:8c:54:da:db:b0:b8:8a:fe:54:ff:73:57:45:
         93:a3:c5:ed:61:e3:95:2d:4b:15:65:16:6c:4b:d3:f6:6e:ff:
         d3:7a:bb:63:15:f6:34:b9:7d:3b:c7:69:e4:8b:dc:23:91:0f:
         ed:97:dd:25:c0:83:42:7f:50:76:e6:6b:d2:6b:b9:d1:24:e9:
         f3:65:a1:5d:1f:c7:a3:94:87:6a:ac:73:ae:c5:12:0d:13:df:
         16:5b:90:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:18:19 2025 by rpki-client