Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
File:                     z9HOEVgucPjVG3hwclwV72fgxlE.mft (raw, json)
Hash identifier:          N6RrCYYX9V5M7xZBpFaHu6KS5v9x3DwjYWN93edps6M=
Subject key identifier:   90:EE:43:8B:E3:45:6C:98:A7:4B:8B:4F:40:92:68:D3:9A:4F:74:47
Authority key identifier: CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51
Certificate issuer:       /CN=F36DB4B4AF/serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
Certificate serial:       0DD2
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
Manifest number:          0DCF
Signing time:             Thu 03 Jul 2025 01:01:30 +0000
Manifest this update:     Thu 03 Jul 2025 01:01:29 +0000
Manifest next update:     Sat 05 Jul 2025 01:01:29 +0000
Files and hashes:         1: z9HOEVgucPjVG3hwclwV72fgxlE.crl (hash: jnN1SWtaKOwfQBxaR10L2WeRirYqx2cjMKJMUBsmFyQ=)
                          2: 44FF457CB46311E58407FA55F8AEA228.roa (hash: B9WSKZRqziRr6GOCV6BDWegKxCtGmeVw42cvf6ryK9U=)
                          3: A17B340AB46311E59241EB56F8AEA228.roa (hash: 7FwQeUfCbVL0Bd2EXyoVC5y/xe6Lbd8u11SpNh5f5zI=)
                          4: F0D40794B46211E5A330CA55F8AEA228.roa (hash: t2nsrO2U23DwtiWKoe3fqAaOO4rdHwgErkagqsJpKHc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 05 Jul 2025 01:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3538 (0xdd2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DB4B4AF, serialNumber=CFD1CE11582E70F8D51B7870725C15EF67E0C651
        Validity
            Not Before: Jul  3 01:01:29 2025 GMT
            Not After : Jul  5 01:01:29 2025 GMT
        Subject: CN=6865d66a-6421
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:76:64:5f:a8:67:26:a2:2a:84:d8:d6:66:96:
                    ba:b4:98:09:bb:79:59:ec:ae:55:2a:ea:44:86:ae:
                    02:f3:8c:61:eb:fd:9d:4a:7b:d0:02:8a:97:f7:7b:
                    33:23:f6:30:6e:b4:1f:9c:39:48:d2:82:42:74:f9:
                    16:2e:44:4f:5a:7f:0a:0c:e3:3e:40:dc:28:fa:9b:
                    e3:9d:55:90:67:a3:64:3a:2e:3a:e8:d8:92:02:04:
                    d2:4c:44:e3:d5:8e:34:45:1f:9c:5e:1e:04:cd:77:
                    68:9a:51:e5:66:84:3d:84:7b:a7:92:30:a7:25:89:
                    bc:26:fa:06:5d:7d:92:07:54:a5:7d:db:94:11:c9:
                    dd:36:bc:a2:07:aa:f6:4a:26:cb:81:cd:11:59:97:
                    9d:af:cc:4e:16:73:d1:eb:c4:73:1c:0f:ba:a4:9b:
                    2d:a3:60:b6:44:d7:d3:27:ab:af:d6:43:8e:ef:33:
                    db:42:56:55:73:97:8b:05:8d:e7:18:4b:47:de:91:
                    84:05:9a:08:8f:6f:7a:75:90:55:7f:e8:c6:a4:cc:
                    ee:aa:eb:9d:84:38:76:f1:3b:50:98:2c:42:57:8b:
                    b6:29:f5:f3:5f:96:5e:bd:5b:0d:58:54:a7:88:90:
                    07:29:8b:29:26:b3:bc:36:8b:69:78:87:ee:5e:0d:
                    d9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:EE:43:8B:E3:45:6C:98:A7:4B:8B:4F:40:92:68:D3:9A:4F:74:47
            X509v3 Authority Key Identifier:
                keyid:CF:D1:CE:11:58:2E:70:F8:D5:1B:78:70:72:5C:15:EF:67:E0:C6:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/z9HOEVgucPjVG3hwclwV72fgxlE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DB4B4/CEEEADECB46111E5B4A90854F8AEA228/z9HOEVgucPjVG3hwclwV72fgxlE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:1a:e6:1a:a7:b2:4f:22:c7:d7:87:5d:45:20:0f:46:85:b6:
         65:29:d3:3d:3f:3d:fb:42:cf:cf:a1:9a:4d:6e:5b:38:c2:59:
         ac:05:d3:f6:ff:0a:c9:aa:c4:78:62:7d:bd:cc:84:e0:04:70:
         ff:92:31:89:a0:aa:49:13:90:53:ed:15:ca:13:32:f8:d7:96:
         bb:43:75:28:5c:f4:5d:0f:71:db:4f:e4:fe:cd:37:f1:9a:29:
         ec:07:57:99:c2:91:c6:a3:ce:99:cf:cf:42:17:5d:9a:3e:0c:
         46:40:03:5e:96:03:ef:74:c5:8b:29:c6:f6:c7:9e:c7:7a:19:
         e4:9b:17:26:eb:3c:4c:89:66:01:5c:75:85:7b:a2:77:d6:bf:
         34:45:78:5d:d8:8c:1c:57:c5:37:72:ea:ce:20:e8:a9:6e:5b:
         72:ed:74:84:12:3b:ee:22:a1:30:7f:12:62:8a:97:75:c8:a3:
         81:ce:ec:80:35:fb:0e:9e:ee:0c:6b:5a:53:38:8e:dc:b3:25:
         f7:72:ba:df:19:ee:3e:65:a5:fb:90:04:fb:26:bb:30:53:6f:
         a0:94:75:95:ae:0b:95:7d:55:ed:47:e3:80:0a:98:2b:cd:02:
         0b:16:2d:99:f7:08:44:53:f7:04:18:27:f9:a1:d2:23:16:5c:
         30:33:e6:3c
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICDdIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
REI0QjRBRjExMC8GA1UEBRMoQ0ZEMUNFMTE1ODJFNzBGOEQ1MUI3ODcwNzI1QzE1
RUY2N0UwQzY1MTAeFw0yNTA3MDMwMTAxMjlaFw0yNTA3MDUwMTAxMjlaMBgxFjAU
BgNVBAMTDTY4NjVkNjZhLTY0MjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCbdmRfqGcmoiqE2NZmlrq0mAm7eVnsrlUq6kSGrgLzjGHr/Z1Ke9ACipf3
ezMj9jButB+cOUjSgkJ0+RYuRE9afwoM4z5A3Cj6m+OdVZBno2Q6Ljro2JICBNJM
ROPVjjRFH5xeHgTNd2iaUeVmhD2Ee6eSMKclibwm+gZdfZIHVKV925QRyd02vKIH
qvZKJsuBzRFZl52vzE4Wc9HrxHMcD7qkmy2jYLZE19Mnq6/WQ47vM9tCVlVzl4sF
jecYS0fekYQFmgiPb3p1kFV/6MakzO6q652EOHbxO1CYLEJXi7Yp9fNfll69Ww1Y
VKeIkAcpiykms7w2i2l4h+5eDdmLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUkO5D
i+NFbJinS4tPQJJo05pPdEcwHwYDVR0jBBgwFoAUz9HOEVgucPjVG3hwclwV72fg
xlEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkRCNEI0L0NFRUVBREVDQjQ2MTExRTVCNEE5MDg1NEY4QUVBMjI4L3o5SE9F
Vmd1Y1BqVkczaHdjbHdWNzJmZ3hsRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3o5SE9FVmd1Y1BqVkczaHdjbHdWNzJmZ3hsRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2REI0QjQvQ0VFRUFERUNCNDYxMTFFNUI0QTkwODU0RjhB
RUEyMjgvejlIT0VWZ3VjUGpWRzNod2Nsd1Y3MmZneGxFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCxGuYap7JPIsfXh11FIA9GhbZlKdM9
Pz37Qs/PoZpNbls4wlmsBdP2/wrJqsR4Yn29zITgBHD/kjGJoKpJE5BT7RXKEzL4
15a7Q3UoXPRdD3HbT+T+zTfxminsB1eZwpHGo86Zz89CF12aPgxGQANelgPvdMWL
Kcb2x57Hehnkmxcm6zxMiWYBXHWFe6J31r80RXhd2IwcV8U3curOIOipblty7XSE
EjvuIqEwfxJiipd1yKOBzuyANfsOnu4Ma1pTOI7csyX3crrfGe4+ZaX7kAT7Jrsw
U2+glHWVrguVfVXtR+OACpgrzQILFi2Z9whEU/cEGCf5odIjFlwwM+Y8
-----END CERTIFICATE-----
Generated at Thu Jul 3 23:49:03 2025 by rpki-client