Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
File:                     zr6Z7rC-POjbGbpEdmyj48gHqYk.mft (raw, json)
Hash identifier:          ric0yjdr0ujE1jLGmvQWSD7h/Jq8nI8KxKjVHhdllpU=
Subject key identifier:   9B:64:07:EA:AF:BF:E0:0E:20:46:D8:72:B7:70:AC:D9:2B:D7:E2:CC
Authority key identifier: CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89
Certificate issuer:       /CN=F36C4A3BAF/serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
Certificate serial:       02AB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
Manifest number:          02AA
Signing time:             Sun 19 Oct 2025 03:59:35 +0000
Manifest this update:     Sun 19 Oct 2025 03:59:34 +0000
Manifest next update:     Tue 21 Oct 2025 03:59:34 +0000
Files and hashes:         1: zr6Z7rC-POjbGbpEdmyj48gHqYk.crl (hash: m91AnaFiySKOdweYjmfTVV+H9TD6mEdDd1neVG91BnY=)
                          2: B4ABD18CA48E11EEB808FE65D25BE465.roa (hash: S5XSL+t01DymTgJeqFWNkxH4TrI/NWZhOLYNwLD+7Qs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 03:59:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 683 (0x2ab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C4A3BAF, serialNumber=CEBE99EEB0BE3CE8DB19BA44766CA3E3C807A989
        Validity
            Not Before: Oct 19 03:59:34 2025 GMT
            Not After : Oct 21 03:59:34 2025 GMT
        Subject: CN=68f46227-2475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:f8:ce:df:a1:f3:64:b8:b6:97:d1:d6:af:
                    a9:84:51:6a:7a:01:4d:17:90:c0:78:b9:f2:a5:d4:
                    da:07:ff:79:86:43:1f:44:64:75:df:ca:a0:8e:30:
                    2f:de:43:ce:a0:56:79:c9:83:56:08:e7:57:58:3e:
                    85:27:df:27:65:38:ad:ec:03:fe:52:da:33:23:47:
                    1f:af:4c:86:f6:f1:1f:e6:00:01:a8:d2:33:77:8b:
                    67:68:80:0f:53:56:41:68:9b:7d:c4:44:90:18:29:
                    6f:64:e7:03:33:2c:1a:06:49:ec:20:e0:22:55:f2:
                    f4:1a:e1:53:9d:13:fd:28:74:82:20:c4:9d:e7:6d:
                    34:db:5b:1f:06:8a:48:47:fa:46:3e:d2:c0:6a:20:
                    1f:7a:f4:93:98:20:b0:03:94:0e:12:74:b3:7c:2e:
                    f9:84:8d:c3:87:2f:e1:47:48:5e:91:b9:bb:a9:34:
                    f5:f5:a6:44:7c:c3:6a:26:7e:b7:48:f0:0c:6d:09:
                    f3:3f:e5:c0:8b:f6:63:e9:14:b9:62:eb:f2:e8:26:
                    ee:5c:45:e3:2c:49:91:5b:ba:fb:77:b5:f5:ad:f7:
                    6f:9b:8c:1b:b9:bb:68:ef:05:7a:92:5c:23:dc:b6:
                    e5:47:1b:09:75:4a:63:30:e0:86:ab:eb:83:b8:3d:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:64:07:EA:AF:BF:E0:0E:20:46:D8:72:B7:70:AC:D9:2B:D7:E2:CC
            X509v3 Authority Key Identifier:
                keyid:CE:BE:99:EE:B0:BE:3C:E8:DB:19:BA:44:76:6C:A3:E3:C8:07:A9:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zr6Z7rC-POjbGbpEdmyj48gHqYk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C4A3B/4FAFFDAEA48D11EE88CB8763D25BE465/zr6Z7rC-POjbGbpEdmyj48gHqYk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:ce:b0:b3:8d:84:7d:18:72:1e:fc:e1:f8:4c:64:e0:de:29:
         58:2a:7d:6c:0d:fb:d1:61:bd:4c:af:6c:1a:58:6c:85:a0:50:
         4a:fe:12:56:a9:a1:b7:33:d6:2a:5c:92:de:14:42:90:e2:2d:
         a7:c9:b7:05:81:88:2a:95:97:c1:d1:ca:8f:0d:02:92:33:93:
         8b:34:08:53:2a:e0:a1:08:2a:17:d4:ca:c8:9d:31:81:fb:77:
         93:00:4b:7f:b0:46:36:fe:8a:c2:0a:be:ff:da:b9:49:75:86:
         9c:f3:7e:ee:ce:13:67:7c:8a:4a:be:9b:ce:8b:91:02:f7:62:
         f4:6b:06:a0:65:14:17:e7:26:47:a8:ae:e4:03:6a:66:1c:ae:
         4b:a3:1c:f9:d5:1d:85:2e:b3:c8:63:e7:6f:fe:c3:a0:c4:a2:
         1e:c8:71:26:0f:8d:e0:0e:40:21:23:89:e8:8c:df:6a:39:d6:
         0a:71:2b:75:4e:a1:9d:35:b9:80:9f:2b:33:4f:2e:e1:34:fc:
         4b:06:60:22:a6:34:3f:0d:81:1b:27:9b:f2:91:f4:ee:c9:bf:
         64:81:c0:a4:22:9b:54:a2:12:cb:6e:45:7d:83:66:7a:6c:e4:
         c9:c4:4d:8c:a9:65:ba:c4:19:a7:d6:fc:bf:7a:fa:58:9c:9d:
         18:99:a4:04
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAqswDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QzRBM0JBRjExMC8GA1UEBRMoQ0VCRTk5RUVCMEJFM0NFOERCMTlCQTQ0NzY2Q0Ez
RTNDODA3QTk4OTAeFw0yNTEwMTkwMzU5MzRaFw0yNTEwMjEwMzU5MzRaMBgxFjAU
BgNVBAMTDTY4ZjQ2MjI3LTI0NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC0S/jO36HzZLi2l9HWr6mEUWp6AU0XkMB4ufKl1NoH/3mGQx9EZHXfyqCO
MC/eQ86gVnnJg1YI51dYPoUn3ydlOK3sA/5S2jMjRx+vTIb28R/mAAGo0jN3i2do
gA9TVkFom33ERJAYKW9k5wMzLBoGSewg4CJV8vQa4VOdE/0odIIgxJ3nbTTbWx8G
ikhH+kY+0sBqIB969JOYILADlA4SdLN8LvmEjcOHL+FHSF6RubupNPX1pkR8w2om
frdI8AxtCfM/5cCL9mPpFLli6/LoJu5cReMsSZFbuvt3tfWt92+bjBu5u2jvBXqS
XCPctuVHGwl1SmMw4Iar64O4PbrHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUm2QH
6q+/4A4gRthyt3Cs2SvX4swwHwYDVR0jBBgwFoAUzr6Z7rC+POjbGbpEdmyj48gH
qYkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkM0QTNCLzRGQUZGREFFQTQ4RDExRUU4OENCODc2M0QyNUJFNDY1L3pyNlo3
ckMtUE9qYkdicEVkbXlqNDhnSHFZay5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3pyNlo3ckMtUE9qYkdicEVkbXlqNDhnSHFZay5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2QzRBM0IvNEZBRkZEQUVBNDhEMTFFRTg4Q0I4NzYzRDI1
QkU0NjUvenI2WjdyQy1QT2piR2JwRWRteWo0OGdIcVlrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBMzrCzjYR9GHIe/OH4TGTg3ilYKn1s
DfvRYb1Mr2waWGyFoFBK/hJWqaG3M9YqXJLeFEKQ4i2nybcFgYgqlZfB0cqPDQKS
M5OLNAhTKuChCCoX1MrInTGB+3eTAEt/sEY2/orCCr7/2rlJdYac837uzhNnfIpK
vpvOi5EC92L0awagZRQX5yZHqK7kA2pmHK5Loxz51R2FLrPIY+dv/sOgxKIeyHEm
D43gDkAhI4nojN9qOdYKcSt1TqGdNbmAnyszTy7hNPxLBmAipjQ/DYEbJ5vykfTu
yb9kgcCkIptUohLLbkV9g2Z6bOTJxE2MqWW6xBmn1vy/evpYnJ0YmaQE
-----END CERTIFICATE-----
Generated at Mon Oct 20 05:22:58 2025 by rpki-client