Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
File:                     zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft (raw, json)
Hash identifier:          njZwrx/2vODgrdy3+YTd8ot/0AAdRqPUqEBB5/7VKbo=
Subject key identifier:   D6:98:FD:89:46:BA:4E:8A:15:66:4F:E4:1F:78:C8:E3:AA:01:C3:E1
Authority key identifier: CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
Certificate issuer:       /CN=F3698125AR/serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
Certificate serial:       029F
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
Manifest number:          029D
Signing time:             Sat 23 Aug 2025 04:07:00 +0000
Manifest this update:     Sat 23 Aug 2025 04:06:59 +0000
Manifest next update:     Mon 25 Aug 2025 04:06:59 +0000
Files and hashes:         1: zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl (hash: 6Po0j4dRbKeLBTWJyFF3LNutJR/8G7QA4G0Hiz5Bwtc=)
                          2: 637017A4270D11EF83B8A0DA7CDC24C2.roa (hash: KcWpAlTox8uHxgsa4XXL2SuGUP0/4ifMRuSUqNE8VdQ=)
                          3: D2BCB8AC24CD11EFBA1E711B7DDC24C2.roa (hash: pk6a4ptH8vZ8/DDIS6o5NsLyUfZR0uUROi741ipkTm8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
                          rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 671 (0x29f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AR, serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
        Validity
            Not Before: Aug 23 04:06:59 2025 GMT
            Not After : Aug 25 04:06:59 2025 GMT
        Subject: CN=68a93e64-6619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:80:0d:82:ba:93:36:b1:1e:d3:bb:80:0c:
                    85:59:41:46:4c:b9:7a:3b:22:60:b8:48:b9:d0:6a:
                    12:4d:c8:c6:cd:92:c1:72:f9:36:c7:de:76:b6:8d:
                    85:5d:03:e1:8d:75:70:63:e3:66:57:46:96:8d:8a:
                    64:c0:a4:21:e3:eb:c6:4f:36:19:3b:a8:4c:20:a7:
                    ad:52:fb:10:1b:4b:af:eb:ca:d6:fa:b3:9e:ed:57:
                    2c:d8:06:7e:00:1b:d9:b1:a1:64:41:31:de:58:e7:
                    2f:f5:d7:71:9c:92:cf:58:97:35:0c:bf:12:3d:37:
                    78:f5:e2:1c:60:af:d7:1f:9b:52:58:04:78:df:f1:
                    5a:38:a1:36:5a:a9:2e:a1:a4:17:97:de:a5:12:a4:
                    52:14:22:59:3c:1c:a9:71:dd:fa:49:3c:b4:3f:8b:
                    d6:c3:29:74:2a:a8:b6:6b:58:22:f7:0d:c3:4a:36:
                    81:8f:3d:b7:b8:32:02:91:a9:e4:5d:10:f4:05:fc:
                    5c:91:2e:71:95:cd:fa:f3:36:f6:07:e1:e8:da:7f:
                    b3:0a:bb:b2:2e:2e:7c:1a:63:dc:00:42:f6:6b:c3:
                    41:30:57:84:25:52:4b:55:0f:8a:1c:e7:55:c3:61:
                    17:19:ec:f1:a1:6b:a4:85:96:8c:79:47:89:54:bd:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:98:FD:89:46:BA:4E:8A:15:66:4F:E4:1F:78:C8:E3:AA:01:C3:E1
            X509v3 Authority Key Identifier:
                keyid:CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:52:b6:bd:a3:be:22:0a:57:ca:2f:42:0c:8b:68:7e:20:52:
         1c:0e:b7:25:51:b5:67:d2:98:47:39:a5:c7:45:3c:fa:40:c6:
         0d:1e:34:9d:8b:4f:b0:82:4d:aa:0e:b4:f6:c1:21:0f:3b:fa:
         4f:0b:23:2f:84:9e:1f:61:ec:d7:78:5f:e5:96:d6:80:96:69:
         61:a5:74:9a:5c:18:52:08:2b:68:1d:11:33:30:35:12:cb:d6:
         ca:64:67:b1:8a:8b:1a:8e:bf:e6:f3:6c:e0:cf:60:c1:16:87:
         42:9c:89:16:03:69:0b:50:8a:c9:ac:59:f7:30:a5:26:e7:9b:
         30:66:f1:1a:67:63:8a:36:e7:9f:0c:4f:97:db:46:59:e4:f7:
         80:62:c6:1a:4d:72:74:d3:b4:ab:1d:f7:6b:02:bd:4f:2b:71:
         d6:ae:86:fd:3d:83:55:de:3e:52:e6:3d:5e:00:26:b9:3f:c4:
         e8:00:24:3d:9c:a8:20:15:3f:8f:6b:8c:94:78:fa:93:67:22:
         75:34:3d:48:d1:a1:3e:21:2f:c0:85:fe:65:67:8f:e6:cd:a4:
         c9:d2:fc:52:ce:25:e2:f0:6d:6a:c5:bd:d6:05:4e:16:d4:f1:
         1b:43:cb:1e:e1:b2:a6:43:1b:37:ad:29:b3:02:21:70:20:9b:
         c8:be:b0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:34:59 2025 by rpki-client