Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File:                     zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier:          nQpCxNRDTca/V1HmR8UVq3OWyXCO6onlSbqwDj6gAsU=
Subject key identifier:   6C:B4:8B:3C:D7:2B:DC:82:7F:36:03:7A:B2:E7:E0:66:B8:14:47:93
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer:       /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial:       01A0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number:          019C
Signing time:             Sat 23 Aug 2025 04:41:08 +0000
Manifest this update:     Sat 23 Aug 2025 04:41:07 +0000
Manifest next update:     Mon 25 Aug 2025 04:41:07 +0000
Files and hashes:         1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: fo8mnKFL6BjgYO+1bV3P3kOP9J3qxwv68eGMR9WcdN8=)
                          2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 416 (0x1a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
        Validity
            Not Before: Aug 23 04:41:07 2025 GMT
            Not After : Aug 25 04:41:07 2025 GMT
        Subject: CN=68a94664-d7f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:25:1f:7d:63:28:a7:00:b1:47:84:a8:c5:41:
                    6e:58:b9:5f:eb:6e:35:11:9c:18:a3:10:cd:a0:0b:
                    e2:c5:08:6b:be:9a:26:b2:6b:86:69:0f:a2:19:3c:
                    8d:89:80:e4:6e:bc:21:ba:b9:2f:80:31:d3:d6:2b:
                    94:37:56:1d:7c:7e:c1:0d:69:d9:2b:96:39:3c:63:
                    f9:b8:01:83:74:23:2e:cc:98:9a:89:a1:ec:97:0c:
                    dc:43:cd:4f:a6:b4:a0:da:66:f0:7c:18:4d:77:ea:
                    07:07:92:b4:ee:b6:04:c0:a0:33:d7:86:e8:ed:c8:
                    31:3f:6c:01:d2:07:aa:ef:60:bb:05:6e:fa:c7:bc:
                    40:5a:b9:a8:54:da:92:18:c6:5d:22:4d:46:32:95:
                    79:5d:47:2c:b3:a1:6e:e0:1e:01:63:f3:d2:9f:57:
                    a3:55:e4:02:ee:13:28:5e:91:33:1e:07:a7:03:79:
                    a3:c8:12:2e:d5:5f:96:ca:8b:bd:06:37:9b:46:6f:
                    26:0c:58:a2:76:bd:84:70:d9:f4:c7:7d:0f:9a:82:
                    dc:1b:54:b8:63:43:6b:09:07:db:8a:20:eb:fd:18:
                    a2:89:96:f2:ab:a1:c9:1f:64:79:55:80:d2:27:18:
                    eb:31:7f:a6:c4:ec:31:78:56:ce:a8:30:c2:a6:3f:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B4:8B:3C:D7:2B:DC:82:7F:36:03:7A:B2:E7:E0:66:B8:14:47:93
            X509v3 Authority Key Identifier:
                keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:8a:03:26:ed:ee:96:6f:6e:cf:e7:f9:37:ec:23:04:4c:bc:
         35:b6:c2:97:a6:93:fb:ab:4b:dc:8e:b1:c9:2b:96:f6:24:ef:
         95:1b:48:f0:02:48:41:c2:8a:5c:a5:ef:b5:bc:c4:2b:8b:7d:
         e5:27:96:f0:cf:9f:41:0b:44:20:f0:79:bc:a4:c0:0f:ba:76:
         6f:c0:4e:35:10:56:94:8e:37:ef:3d:8c:92:9a:39:ce:b0:b5:
         27:1d:66:0f:c1:c7:30:a7:be:1e:44:b2:45:69:d9:b0:1e:5a:
         7e:cc:d6:4e:73:b1:19:ef:6d:0a:5b:03:4b:b3:38:63:e4:8c:
         b4:e8:8d:53:c6:ec:dc:aa:d6:96:3a:21:03:0d:ad:4f:e7:e3:
         df:b0:99:bf:f8:c6:27:63:8a:ae:a6:dc:aa:21:a2:59:28:2f:
         51:7e:ad:62:6f:3f:c1:79:34:d9:a2:a2:eb:c5:f0:77:16:76:
         c5:04:e5:20:59:22:15:c8:7b:d2:c3:02:71:88:38:ae:aa:d8:
         31:55:c1:38:5c:dd:0c:2b:19:6b:69:bf:05:60:80:f9:24:64:
         44:2b:e4:dc:dd:38:b4:d1:5f:0a:67:bd:74:f7:6d:e6:34:26:
         1c:5b:5f:e7:27:11:36:70:f4:9c:02:7f:1a:81:a4:8f:89:cb:
         ff:d9:f5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:38:52 2025 by rpki-client