Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
File:                     ffDZZHEjlpmcF8_uBLpMLB39GqE.mft (raw, json)
Hash identifier:          EQHj6YOamupakjIFREH2tP9K/Q9VcG7c5AewmVf6CnI=
Subject key identifier:   7E:96:11:A9:D5:86:49:E0:D9:BB:24:65:B0:17:B8:08:AA:84:E3:58
Authority key identifier: 7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1
Certificate issuer:       /CN=F36D03D3AF/serialNumber=7DF0D964712396999C17CFEE04BA4C2C1DFD1AA1
Certificate serial:       025F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
Manifest number:          025E
Signing time:             Sat 23 Aug 2025 04:14:04 +0000
Manifest this update:     Sat 23 Aug 2025 04:14:03 +0000
Manifest next update:     Mon 25 Aug 2025 04:14:03 +0000
Files and hashes:         1: ffDZZHEjlpmcF8_uBLpMLB39GqE.crl (hash: iZ2//ZWEwAf7iFEEoPxpaR9kNJj8JQJUtMuPGeWKdxQ=)
                          2: 11714A5EB05211EEB8B0949D775412E6.roa (hash: Y74sDhVPh3sDwTRwkCR1rG2U0+ospQWmyyWML+k0YKo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 607 (0x25f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36D03D3AF, serialNumber=7DF0D964712396999C17CFEE04BA4C2C1DFD1AA1
        Validity
            Not Before: Aug 23 04:14:03 2025 GMT
            Not After : Aug 25 04:14:03 2025 GMT
        Subject: CN=68a9400c-9f49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:62:63:f7:fd:37:55:79:d3:06:29:62:e4:45:
                    34:69:af:81:49:15:f8:fc:ea:d4:f4:f4:96:ee:88:
                    a8:39:7f:1b:2d:fc:7f:1d:02:97:fe:e9:e2:3a:e1:
                    a1:78:24:c7:7d:8c:0e:bb:06:03:80:ed:cb:52:24:
                    7a:a6:f6:10:38:3e:47:0e:90:68:91:1c:cb:54:a9:
                    09:71:76:58:5b:09:42:db:9d:82:b9:2c:b7:87:2d:
                    bc:77:76:e6:a3:12:72:56:df:88:d7:37:a6:64:a1:
                    ec:7d:39:03:67:bd:d9:40:e9:61:dc:5d:e9:14:28:
                    3a:2b:18:ab:2f:dc:c1:05:53:ff:62:4d:09:2a:05:
                    2b:ad:73:db:46:5a:99:fc:19:9c:63:cc:b0:40:8f:
                    9e:c3:cf:d9:c7:b8:85:9e:3f:db:e1:6f:b2:cd:28:
                    27:b1:bd:4a:58:d4:cd:ce:bd:fd:d3:24:81:2e:a5:
                    e1:bc:19:54:53:94:57:38:fe:92:bf:bf:14:4a:16:
                    b5:46:f0:27:f6:78:1d:fb:f1:c5:13:ed:0c:2b:73:
                    a2:5a:eb:83:78:5a:92:30:98:77:70:2f:c3:86:b2:
                    51:12:59:e4:38:9b:43:63:16:47:46:fd:ee:4e:08:
                    fa:27:5f:7e:45:a9:7c:d0:2a:5e:f7:02:2f:67:be:
                    d6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:96:11:A9:D5:86:49:E0:D9:BB:24:65:B0:17:B8:08:AA:84:E3:58
            X509v3 Authority Key Identifier:
                keyid:7D:F0:D9:64:71:23:96:99:9C:17:CF:EE:04:BA:4C:2C:1D:FD:1A:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ffDZZHEjlpmcF8_uBLpMLB39GqE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36D03D3/3A3857B2B05111EEAFF4F09B775412E6/ffDZZHEjlpmcF8_uBLpMLB39GqE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:ad:39:ee:a4:14:75:cd:7a:35:43:9b:ea:4f:06:45:09:35:
         c5:3e:5f:ad:b0:17:e3:5c:6c:f5:2f:7d:c6:dc:29:88:65:ac:
         e9:83:df:88:46:ef:51:3b:94:03:5f:12:1b:d6:75:2c:f4:8a:
         5e:11:95:5a:42:1b:c5:3c:35:34:b7:18:a3:e6:78:5c:c8:46:
         82:65:85:03:11:ec:d6:c5:e5:91:98:e5:06:2a:a9:56:49:da:
         a2:15:9d:a3:69:51:af:76:cb:4a:65:91:29:4e:24:6b:3d:88:
         cb:9b:5b:22:2d:a3:39:20:74:2b:c7:0d:1d:34:12:15:da:e1:
         f7:f1:73:e9:ac:ac:8a:55:2d:dc:4a:87:25:4b:57:78:99:74:
         11:ac:87:25:20:43:f0:df:13:0f:52:fe:f3:75:b9:49:eb:6b:
         a3:99:e3:c0:bb:4d:f8:7f:72:97:65:6c:ae:14:9e:f0:09:99:
         63:ee:97:ee:3d:69:7a:10:45:67:1a:d8:39:b4:a2:76:9f:e8:
         aa:07:af:9d:4a:87:a3:f8:f5:80:b3:0f:91:6e:22:90:b7:c7:
         29:44:fe:38:f9:d1:29:e5:90:d7:aa:1f:13:b8:2b:77:87:af:
         cd:91:51:cf:3e:8a:05:ed:88:be:da:c6:51:6f:7a:b9:12:84:
         81:05:4a:3e
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAl8wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RDAzRDNBRjExMC8GA1UEBRMoN0RGMEQ5NjQ3MTIzOTY5OTlDMTdDRkVFMDRCQTRD
MkMxREZEMUFBMTAeFw0yNTA4MjMwNDE0MDNaFw0yNTA4MjUwNDE0MDNaMBgxFjAU
BgNVBAMTDTY4YTk0MDBjLTlmNDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDGYmP3/TdVedMGKWLkRTRpr4FJFfj86tT09JbuiKg5fxst/H8dApf+6eI6
4aF4JMd9jA67BgOA7ctSJHqm9hA4PkcOkGiRHMtUqQlxdlhbCULbnYK5LLeHLbx3
duajEnJW34jXN6Zkoex9OQNnvdlA6WHcXekUKDorGKsv3MEFU/9iTQkqBSutc9tG
Wpn8GZxjzLBAj57Dz9nHuIWeP9vhb7LNKCexvUpY1M3Ovf3TJIEupeG8GVRTlFc4
/pK/vxRKFrVG8Cf2eB378cUT7Qwrc6Ja64N4WpIwmHdwL8OGslESWeQ4m0NjFkdG
/e5OCPonX35FqXzQKl73Ai9nvtbHAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUfpYR
qdWGSeDZuyRlsBe4CKqE41gwHwYDVR0jBBgwFoAUffDZZHEjlpmcF8/uBLpMLB39
GqEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkQwM0QzLzNBMzg1N0IyQjA1MTExRUVBRkY0RjA5Qjc3NTQxMkU2L2ZmRFpa
SEVqbHBtY0Y4X3VCTHBNTEIzOUdxRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL2ZmRFpaSEVqbHBtY0Y4X3VCTHBNTEIzOUdxRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RDAzRDMvM0EzODU3QjJCMDUxMTFFRUFGRjRGMDlCNzc1
NDEyRTYvZmZEWlpIRWpscG1jRjhfdUJMcE1MQjM5R3FFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBSrTnupBR1zXo1Q5vqTwZFCTXFPl+t
sBfjXGz1L33G3CmIZazpg9+IRu9RO5QDXxIb1nUs9IpeEZVaQhvFPDU0txij5nhc
yEaCZYUDEezWxeWRmOUGKqlWSdqiFZ2jaVGvdstKZZEpTiRrPYjLm1siLaM5IHQr
xw0dNBIV2uH38XPprKyKVS3cSoclS1d4mXQRrIclIEPw3xMPUv7zdblJ62ujmePA
u034f3KXZWyuFJ7wCZlj7pfuPWl6EEVnGtg5tKJ2n+iqB6+dSoej+PWAsw+RbiKQ
t8cpRP44+dEp5ZDXqh8TuCt3h6/NkVHPPooF7Yi+2sZRb3q5EoSBBUo+
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:27:49 2025 by rpki-client