Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File:                     CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier:          3sOvMYk/ThhXpn+vn7Rp3+Ohe0TLUQe9NtGr9qxdUmc=
Subject key identifier:   32:22:B0:0F:49:19:D8:F3:ED:2B:1A:EC:DB:7B:1A:76:06:5D:76:ED
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer:       /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial:       0452
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number:          0451
Signing time:             Mon 20 Oct 2025 03:09:49 +0000
Manifest this update:     Mon 20 Oct 2025 03:09:48 +0000
Manifest next update:     Wed 22 Oct 2025 03:09:48 +0000
Files and hashes:         1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: cevH/ePt+WFq2aL4crFRl3aIQ8HxGKQiWExh2g48xck=)
                          2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1106 (0x452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA64DAF, serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
        Validity
            Not Before: Oct 20 03:09:48 2025 GMT
            Not After : Oct 22 03:09:48 2025 GMT
        Subject: CN=68f5a7fd-892f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f0:8a:9f:0e:3d:b9:93:f6:49:fe:ce:7a:fa:
                    ca:31:3f:0f:b2:37:12:16:60:dd:b0:58:53:25:5d:
                    09:2e:28:ff:d7:4b:7a:b9:be:72:14:c7:b1:3e:39:
                    02:a4:08:70:3a:a5:22:47:2f:43:4f:2a:58:ae:1b:
                    8f:5d:fa:e4:4a:d8:e3:28:74:77:2b:98:b2:db:08:
                    5b:cc:c8:38:de:ac:0b:79:ad:21:4c:e6:0d:ce:e2:
                    cd:82:d8:53:66:d6:12:7c:36:f5:b7:e0:17:49:ff:
                    b7:eb:66:70:e4:7c:52:53:be:bb:30:57:02:d4:c2:
                    f6:c1:0c:65:fa:e9:c5:74:82:32:80:2e:7d:83:df:
                    50:c9:51:7e:d9:53:4c:9e:2f:5d:cf:d8:de:d9:1c:
                    85:86:f1:1e:a9:48:d3:30:2f:b5:7d:8b:c1:07:53:
                    af:07:48:6b:db:4a:79:05:e4:0f:9f:d7:ba:8a:36:
                    45:7b:59:c5:6f:0a:09:62:c4:86:4e:01:6b:cb:5a:
                    fd:9d:25:67:51:5d:7d:65:66:4e:d0:b7:1d:3c:56:
                    5b:e7:6c:01:3a:0a:a0:3b:62:af:63:4e:0b:25:1c:
                    ab:d5:33:14:2a:e5:37:23:fd:f1:3c:ae:2b:d4:20:
                    a7:f7:3f:ee:5d:0e:50:79:f7:28:f5:7b:45:91:4a:
                    44:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:22:B0:0F:49:19:D8:F3:ED:2B:1A:EC:DB:7B:1A:76:06:5D:76:ED
            X509v3 Authority Key Identifier:
                keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:18:f9:d6:8e:20:e7:80:c5:34:bc:b4:b9:b4:ba:1d:a6:cb:
         06:8a:62:29:dc:78:ff:81:fc:9e:4a:1b:91:8c:13:af:4f:65:
         2f:2e:9e:74:11:66:60:73:e3:15:8a:1e:33:f5:ba:85:e4:64:
         8b:84:41:9b:0a:e9:64:11:5b:09:8b:23:00:f2:6d:b9:95:43:
         c9:4f:9f:15:f4:80:b6:1b:59:03:6f:b9:1f:25:09:7b:54:82:
         1c:95:53:a4:35:62:5f:13:45:e3:ec:0d:e5:7d:a1:2f:b7:9d:
         21:86:c2:6f:87:a0:3f:33:d4:81:ff:41:3a:03:fe:1a:cb:d4:
         b6:2d:60:ea:c2:af:2e:24:f9:f9:0f:4b:83:bf:87:fc:de:45:
         71:7f:ee:21:51:bd:17:78:91:54:88:bd:75:1b:7d:a7:2f:9d:
         ec:4a:96:63:24:10:f9:5b:7e:52:83:6b:9e:b5:33:de:c6:74:
         00:25:de:9e:eb:05:05:7b:f1:ca:3f:65:78:18:9d:62:28:8c:
         2d:c1:9f:3b:7a:f4:aa:cb:a4:86:13:52:e4:4b:6f:c7:a9:15:
         6d:f4:d8:98:dc:84:4c:e4:44:c1:aa:c6:fc:c4:63:c5:1e:97:
         dc:64:33:5c:9c:1e:50:ba:70:56:3b:64:aa:b4:8a:be:3c:7e:
         fb:7c:ac:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:44:47 2025 by rpki-client