Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
File:                     TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft (raw, json)
Hash identifier:          znwwP+rpSQyZRbxBRzAICFv253moOzUtL4No6n9RHLg=
Subject key identifier:   37:90:63:87:2F:C6:11:AC:5C:0F:91:92:21:98:EA:12:59:57:4B:6A
Authority key identifier: 4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF
Certificate issuer:       /CN=F36ED8A8AR/serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
Certificate serial:       E2
Authority info access:    rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
Manifest number:          E2
Signing time:             Mon 20 Oct 2025 04:57:37 +0000
Manifest this update:     Mon 20 Oct 2025 04:57:36 +0000
Manifest next update:     Wed 22 Oct 2025 04:57:36 +0000
Files and hashes:         1: TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl (hash: yrZOoYKq2lw4iEgxyMIsg3QSeoQMHab9UW3+y9RyUck=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                          rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 226 (0xe2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36ED8A8AR, serialNumber=4F265BC545A17E17BF809F19564D3616108D87DF
        Validity
            Not Before: Oct 20 04:57:36 2025 GMT
            Not After : Oct 22 04:57:36 2025 GMT
        Subject: CN=68f5c141-0846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:12:b9:1a:cc:e9:ab:cd:91:80:15:94:d1:11:
                    b7:f6:58:50:80:dc:ec:be:b8:e5:4c:0e:ed:6e:a7:
                    7c:dc:46:af:d0:49:5f:df:60:69:f0:8b:55:98:8b:
                    8d:bd:4d:74:34:cf:bf:48:b3:3b:f8:1d:fa:fd:5d:
                    66:01:d5:d7:42:e0:c1:d6:58:5e:1a:c2:bd:40:a7:
                    60:37:ea:09:37:f7:32:3a:1c:04:5a:bf:db:3c:20:
                    1a:30:a8:a2:ad:e2:1b:20:f9:03:90:d3:c9:d9:33:
                    eb:1e:84:8e:47:ae:50:90:5e:ee:0b:7e:73:52:c1:
                    c6:e2:37:cb:02:8f:74:49:ab:db:f4:6d:7d:36:54:
                    a0:10:cb:9e:24:28:37:db:a3:4a:a0:53:bc:ed:8f:
                    99:cf:09:85:e5:0c:f7:30:b5:93:80:2f:ef:f3:84:
                    ec:7b:16:cc:6e:df:ce:ea:0d:20:ac:f5:6c:6a:65:
                    84:f9:33:1e:aa:11:56:b2:a3:3f:b4:84:0c:a9:f4:
                    9d:3a:d0:58:c1:7a:a1:ca:1a:26:d9:8a:e6:b4:56:
                    33:aa:cc:00:ae:86:14:a0:20:d8:bc:fc:14:93:59:
                    d4:29:5c:af:91:72:66:f3:7f:8a:48:24:a0:8f:ac:
                    d7:af:e9:f3:ea:9d:25:d8:e5:02:f7:a0:c3:62:6d:
                    fd:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:90:63:87:2F:C6:11:AC:5C:0F:91:92:21:98:EA:12:59:57:4B:6A
            X509v3 Authority Key Identifier:
                keyid:4F:26:5B:C5:45:A1:7E:17:BF:80:9F:19:56:4D:36:16:10:8D:87:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/TyZbxUWhfhe_gJ8ZVk02FhCNh98.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36ED8A8/0E2BC6F6FE4B11EFBC1FC479762E951A/TyZbxUWhfhe_gJ8ZVk02FhCNh98.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:46:a6:80:93:7e:ef:00:6f:7f:74:32:00:20:c0:da:93:ac:
         8d:6b:b1:e5:ef:b8:41:f4:90:e3:f3:76:5c:fe:0e:d8:b8:5f:
         f1:4b:60:05:2c:07:54:7e:43:53:9b:91:83:09:f8:99:27:95:
         14:0f:78:e2:d2:37:1a:ea:b4:47:10:dd:33:85:34:86:7b:ce:
         d6:47:b7:c7:c2:e9:79:a5:a5:1d:7f:12:a1:91:36:fc:09:c0:
         cd:05:e5:7f:e3:70:fa:b1:39:ad:cf:d8:7d:f5:df:5e:5a:51:
         87:e0:e3:73:38:f9:0d:f7:f2:1b:8f:d9:d1:56:16:c3:e0:bf:
         7a:24:d8:55:59:3b:4c:5e:1f:d2:ef:d1:5d:33:9d:7f:c8:be:
         0c:af:be:3b:0f:f6:76:e5:61:1b:d9:4d:f2:08:36:42:b9:3f:
         b9:ef:18:ed:95:4c:07:75:db:ba:cb:20:22:75:aa:8e:db:a1:
         33:38:fc:4b:69:61:bc:12:a8:67:64:b8:88:96:c6:07:a9:f2:
         8b:80:db:64:82:43:7e:8e:3d:10:db:f0:43:5f:2d:f6:1b:17:
         2a:8f:0c:ac:fa:6e:b6:6b:c3:df:55:08:9b:8f:25:c5:b9:9d:
         1b:1f:98:84:b4:d3:37:98:0d:8a:f5:8f:c0:f4:1e:25:88:5a:
         63:87:22:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:51:53 2025 by rpki-client