Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
File:                     Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft (raw, json)
Hash identifier:          RxXwAbDmCGk0DXkUkra3GwZWmJ0ABUUuQELpLZVDRBM=
Subject key identifier:   D2:CD:90:76:57:B5:A4:F5:DC:7F:1A:DF:A0:F5:04:8A:60:B6:5A:DC
Authority key identifier: 67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39
Certificate issuer:       /CN=F36B5EE7AR/serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
Certificate serial:       1E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
Manifest number:          1D
Signing time:             Sat 23 Aug 2025 05:26:12 +0000
Manifest this update:     Sat 23 Aug 2025 05:26:12 +0000
Manifest next update:     Mon 25 Aug 2025 05:26:11 +0000
Files and hashes:         1: Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl (hash: 4niGkQIC6dKktO6lOl7a1uh4csfPDsGp3/c3pu3eO2s=)
                          2: 38D8D2366B9211F095FD868ADAE4EC9C.roa (hash: QAj9ZVXFClZ+xgA1S3DzLLKJ/tdZw+gURdKUv7+f/hc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                          rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AR, serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
        Validity
            Not Before: Aug 23 05:26:12 2025 GMT
            Not After : Aug 25 05:26:11 2025 GMT
        Subject: CN=68a950f4-8e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:2b:39:58:44:0c:b7:8b:f5:97:15:6c:52:81:
                    75:75:bd:25:80:33:3c:5f:af:42:85:9d:75:96:54:
                    28:14:d4:92:82:50:27:c2:f3:6d:7f:be:92:65:4b:
                    97:e9:2c:4f:2d:db:4e:74:b6:a3:4d:e4:18:67:9a:
                    7b:07:81:d6:c8:1b:12:0f:eb:b6:02:bb:be:0c:ea:
                    74:32:1f:52:e3:5f:23:43:ab:7c:07:ee:82:dc:0d:
                    31:67:b6:29:26:eb:c6:a0:08:c5:31:b4:ee:66:3f:
                    44:c4:2d:c6:05:ef:e7:40:a7:7e:0b:3c:03:6d:13:
                    5e:b4:c8:ff:1f:86:6c:b7:64:4b:38:91:07:57:94:
                    cb:11:c5:7b:3f:81:03:9d:92:99:af:d1:61:2d:8f:
                    a4:4d:50:d6:c1:3f:b3:e2:ac:0f:e8:44:a5:7e:5a:
                    e1:ff:c6:71:2a:94:c4:6d:6c:13:63:cf:98:ea:18:
                    4b:d7:43:3e:7f:c9:e3:a7:4e:96:d4:39:55:f4:8e:
                    5d:ef:fe:f8:72:75:ac:97:c0:fa:3b:18:64:2f:45:
                    d9:d3:d8:fe:d5:2a:f5:90:0a:3a:c6:09:d5:a3:50:
                    d1:79:67:b4:8a:6c:28:f0:67:74:a7:29:2a:d1:69:
                    fb:e5:a9:9a:c7:d2:ea:77:66:4e:69:e6:89:34:55:
                    cf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:CD:90:76:57:B5:A4:F5:DC:7F:1A:DF:A0:F5:04:8A:60:B6:5A:DC
            X509v3 Authority Key Identifier:
                keyid:67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:d5:14:49:f3:d8:f1:64:30:b5:a1:16:ad:ef:8f:fd:e3:27:
         ae:69:2a:bf:8d:57:af:ad:10:ad:26:29:8c:36:33:8c:b3:68:
         5d:96:a0:17:22:71:aa:72:8d:d6:ee:d6:08:ed:9b:78:c7:2b:
         0a:cb:06:eb:00:06:24:69:a5:b1:54:70:3d:df:31:6d:ef:0d:
         10:d8:26:1a:55:20:08:2d:b1:e9:58:fc:05:7f:80:b9:22:19:
         6f:aa:af:e9:76:44:f7:49:7c:f8:8c:ef:e3:91:41:62:bd:0b:
         9c:44:25:91:b9:40:69:a3:de:c6:e6:ef:5f:f3:b8:2a:c4:74:
         76:e1:35:8b:01:95:1b:91:be:72:b6:44:9d:9a:60:e2:30:7d:
         23:ad:34:d8:b0:49:d8:33:92:77:f9:b3:c6:72:26:65:d7:68:
         99:40:56:89:76:3d:e9:5d:3b:ce:c1:9f:39:8a:bf:07:e2:39:
         ee:75:7b:09:8b:b7:f1:a9:51:37:4f:bc:6b:61:32:7d:18:07:
         d3:ad:07:ab:e2:88:20:92:a0:d9:43:bf:cc:ea:10:dd:1b:67:
         3f:1b:91:9b:71:75:8b:72:24:a3:d3:1e:81:1e:41:a4:fb:1f:
         f2:0e:15:35:13:4b:ad:a1:16:5d:e1:40:3e:bb:03:58:76:36:
         50:d0:a0:10
-----BEGIN CERTIFICATE-----
MIIFkjCCBHqgAwIBAgIBHjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzZC
NUVFN0FSMTEwLwYDVQQFEyg2NzVDQkE0QjUwQkQ1Q0U4OTg0NzJENTU0RjE3MDQ5
Q0JERUMwNDM5MB4XDTI1MDgyMzA1MjYxMloXDTI1MDgyNTA1MjYxMVowGDEWMBQG
A1UEAxMNNjhhOTUwZjQtOGU5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKkrOVhEDLeL9ZcVbFKBdXW9JYAzPF+vQoWddZZUKBTUkoJQJ8LzbX++kmVL
l+ksTy3bTnS2o03kGGeaeweB1sgbEg/rtgK7vgzqdDIfUuNfI0OrfAfugtwNMWe2
KSbrxqAIxTG07mY/RMQtxgXv50Cnfgs8A20TXrTI/x+GbLdkSziRB1eUyxHFez+B
A52Sma/RYS2PpE1Q1sE/s+KsD+hEpX5a4f/GcSqUxG1sE2PPmOoYS9dDPn/J46dO
ltQ5VfSOXe/++HJ1rJfA+jsYZC9F2dPY/tUq9ZAKOsYJ1aNQ0XlntIpsKPBndKcp
KtFp++WpmsfS6ndmTmnmiTRVz+MCAwEAAaOCArUwggKxMB0GA1UdDgQWBBTSzZB2
V7Wk9dx/Gt+g9QSKYLZa3DAfBgNVHSMEGDAWgBRnXLpLUL1c6JhHLVVPFwScvewE
OTAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2QjVFRTcvMDE1MTBBMDA2QjkxMTFGMEFGNTVGNjgxREFFNEVDOUMvWjF5NlMx
QzlYT2lZUnkxVlR4Y0VuTDNzQkRrLmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2FyaW4v
WjF5NlMxQzlYT2lZUnkxVlR4Y0VuTDNzQkRrLmNlcjBPBgNVHSABAf8ERTBDMEEG
CCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmljLm5l
dC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUFBzAL
hn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVw
b3NpdG9yeS9GMzZCNUVFNy8wMTUxMEEwMDZCOTExMUYwQUY1NUY2ODFEQUU0RUM5
Qy9aMXk2UzFDOVhPaVlSeTFWVHhjRW5MM3NCRGsubWZ0MDUGCCsGAQUFBzANhilo
dHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEF
BQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwDQYJKoZIhvcNAQELBQADggEBAGzVFEnz2PFkMLWhFq3vj/3jJ65pKr+NV6+t
EK0mKYw2M4yzaF2WoBcicapyjdbu1gjtm3jHKwrLBusABiRppbFUcD3fMW3vDRDY
JhpVIAgtselY/AV/gLkiGW+qr+l2RPdJfPiM7+ORQWK9C5xEJZG5QGmj3sbm71/z
uCrEdHbhNYsBlRuRvnK2RJ2aYOIwfSOtNNiwSdgzknf5s8ZyJmXXaJlAVol2Peld
O87BnzmKvwfiOe51ewmLt/GpUTdPvGthMn0YB9OtB6viiCCSoNlDv8zqEN0bZz8b
kZtxdYtyJKPTHoEeQaT7H/IOFTUTS62hFl3hQD67A1h2NlDQoBA=
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:52 2025 by rpki-client