Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
File:                     1_pzTirYg6eruOt2mcdBlN3zfqM.mft (raw, json)
Hash identifier:          Qv4uzwGsMTI6+NiawD3o9xtI1+bvGMyjgrKFf8faIFE=
Subject key identifier:   86:19:78:4B:BA:C6:55:45:21:B3:AE:7B:66:5B:6F:56:EE:A9:B7:EE
Authority key identifier: D7:FA:73:4E:2A:D8:83:A7:AB:B8:EB:76:99:C7:41:94:DD:F3:7E:A3
Certificate issuer:       /CN=F36E1EE5AF/serialNumber=D7FA734E2AD883A7ABB8EB7699C74194DDF37EA3
Certificate serial:       03DC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
Manifest number:          03DB
Signing time:             Sat 23 Aug 2025 03:22:11 +0000
Manifest this update:     Sat 23 Aug 2025 03:22:10 +0000
Manifest next update:     Mon 25 Aug 2025 03:22:10 +0000
Files and hashes:         1: 1_pzTirYg6eruOt2mcdBlN3zfqM.crl (hash: 8CPXW2iJe49ZzRNDDgW1mpu2rrVPRK8+T0RujH0puuI=)
                          2: 46F2D560934511ED92A7B996F1222468.roa (hash: nGUyvzk/a5+GFzWKOpMkRUu0fAOKcVAtnLG++SWQPm0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 988 (0x3dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1EE5AF, serialNumber=D7FA734E2AD883A7ABB8EB7699C74194DDF37EA3
        Validity
            Not Before: Aug 23 03:22:10 2025 GMT
            Not After : Aug 25 03:22:10 2025 GMT
        Subject: CN=68a933e3-75a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:38:c5:66:6c:ef:f2:71:fe:58:72:c7:ed:66:
                    1c:04:73:e5:82:04:e1:e4:37:87:bf:11:07:ae:ec:
                    57:b9:77:35:f6:77:89:d8:12:f6:e7:58:7a:95:7b:
                    29:68:6a:0e:db:be:8d:8f:ad:d2:ec:f5:21:15:74:
                    98:4a:20:c1:14:38:c1:24:b5:6a:9a:26:a7:7d:fd:
                    48:35:93:e3:0b:ef:34:78:89:6f:bd:2b:0f:81:e6:
                    cf:14:03:e7:7c:19:04:9d:b0:4f:fc:8a:d2:de:c6:
                    76:9e:9c:dd:ae:dd:0a:14:07:ea:70:f0:95:62:81:
                    f7:65:e4:0a:3d:16:c2:a5:ae:a0:fb:0a:49:5f:92:
                    e1:84:42:2d:2d:11:4d:f6:7e:ac:8c:c9:32:c1:ce:
                    59:96:e9:ca:41:99:8c:6a:6a:c0:03:9a:7a:78:c6:
                    d7:57:23:ad:a6:e3:fe:fc:ef:c2:41:a2:de:fb:d8:
                    e6:e7:6a:94:c6:ef:22:28:14:39:b6:7d:ed:43:d6:
                    d0:83:a8:e8:d9:27:ac:08:af:c0:92:b2:7b:54:4a:
                    c9:ad:6b:24:c1:83:60:5d:ca:ec:46:34:95:f7:da:
                    ee:39:6f:41:aa:a5:45:44:43:bf:6e:3d:a1:0a:cd:
                    cd:f5:a1:0b:cc:7b:e4:04:d0:67:23:ee:6a:99:68:
                    04:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:19:78:4B:BA:C6:55:45:21:B3:AE:7B:66:5B:6F:56:EE:A9:B7:EE
            X509v3 Authority Key Identifier:
                keyid:D7:FA:73:4E:2A:D8:83:A7:AB:B8:EB:76:99:C7:41:94:DD:F3:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:65:b9:5d:9a:dd:3f:b2:51:f7:ff:51:2a:b3:75:24:fc:bc:
         99:93:74:cc:b1:cc:bb:ca:16:94:6e:fd:33:27:ca:6f:83:cc:
         b2:9c:23:6f:f4:bb:b3:df:8a:cb:43:17:52:9c:d0:70:ba:b6:
         96:f6:07:3c:92:6c:a9:2b:91:95:6f:84:c9:f7:12:ba:78:de:
         08:c5:cb:36:b5:75:f5:b3:9c:8d:75:54:a1:c7:f3:a1:e2:98:
         50:74:ea:7f:21:06:1c:cd:7c:38:87:4f:a8:a2:db:37:24:9e:
         ba:c0:84:65:41:da:28:fc:fa:f1:75:e6:bf:92:c8:ec:b3:87:
         f5:29:62:be:96:c7:ec:2a:01:bc:da:ee:6b:3a:43:89:48:01:
         05:6c:87:2b:bb:ce:51:77:82:93:6c:d4:0a:7c:ba:15:01:bd:
         35:f5:ae:22:ab:c2:3e:85:92:3f:70:69:f7:61:4e:8b:d3:6d:
         11:ab:58:94:3c:e4:63:2f:50:0c:04:41:d3:35:aa:dd:4e:d0:
         ae:8a:95:d2:68:f6:34:00:6a:f2:7a:5d:85:f3:1c:53:8f:f9:
         b4:76:2a:06:30:62:7c:10:ca:4b:35:1d:03:a4:01:5a:70:0f:
         fb:34:b3:88:86:fe:79:f8:37:b0:55:0e:9b:df:df:70:5f:a9:
         ea:7c:90:be
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICA9wwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTFFRTVBRjExMC8GA1UEBRMoRDdGQTczNEUyQUQ4ODNBN0FCQjhFQjc2OTlDNzQx
OTREREYzN0VBMzAeFw0yNTA4MjMwMzIyMTBaFw0yNTA4MjUwMzIyMTBaMBgxFjAU
BgNVBAMTDTY4YTkzM2UzLTc1YTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiOMVmbO/ycf5YcsftZhwEc+WCBOHkN4e/EQeu7Fe5dzX2d4nYEvbnWHqV
eyloag7bvo2PrdLs9SEVdJhKIMEUOMEktWqaJqd9/Ug1k+ML7zR4iW+9Kw+B5s8U
A+d8GQSdsE/8itLexnaenN2u3QoUB+pw8JVigfdl5Ao9FsKlrqD7CklfkuGEQi0t
EU32fqyMyTLBzlmW6cpBmYxqasADmnp4xtdXI62m4/7878JBot772ObnapTG7yIo
FDm2fe1D1tCDqOjZJ6wIr8CSsntUSsmtayTBg2BdyuxGNJX32u45b0GqpUVEQ79u
PaEKzc31oQvMe+QE0Gcj7mqZaARLAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUhhl4
S7rGVUUhs657ZltvVu6pt+4wHwYDVR0jBBgwFoAU1/pzTirYg6eruOt2mcdBlN3z
fqMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUxRUU1L0MzQTg2MkQ2OTM0MTExRUQ5NDRDRUQ4Q0YxMjIyNDY4LzFfcHpU
aXJZZzZlcnVPdDJtY2RCbE4zemZxTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzFfcHpUaXJZZzZlcnVPdDJtY2RCbE4zemZxTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTFFRTUvQzNBODYyRDY5MzQxMTFFRDk0NENFRDhDRjEy
MjI0NjgvMV9welRpcllnNmVydU90Mm1jZEJsTjN6ZnFNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCvZbldmt0/slH3/1Eqs3Uk/LyZk3TM
scy7yhaUbv0zJ8pvg8yynCNv9Luz34rLQxdSnNBwuraW9gc8kmypK5GVb4TJ9xK6
eN4Ixcs2tXX1s5yNdVShx/Oh4phQdOp/IQYczXw4h0+oots3JJ66wIRlQdoo/Prx
dea/ksjss4f1KWK+lsfsKgG82u5rOkOJSAEFbIcru85Rd4KTbNQKfLoVAb019a4i
q8I+hZI/cGn3YU6L020Rq1iUPORjL1AMBEHTNardTtCuipXSaPY0AGryel2F8xxT
j/m0dioGMGJ8EMpLNR0DpAFacA/7NLOIhv55+DewVQ6b399wX6nqfJC+
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:48 2025 by rpki-client