Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
File:                     9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft (raw, json)
Hash identifier:          Vxup21mxK2vz6h8Gjtji++XzpEmUx+///tZdYqfyHCY=
Subject key identifier:   A6:78:CF:9B:B2:67:8C:78:A9:35:55:8A:2A:3E:43:F2:12:E8:B3:12
Authority key identifier: F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74
Certificate issuer:       /CN=F36EED3EAF/serialNumber=F59284D76678851F7AA743B13F6C067479550074
Certificate serial:       0373
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
Manifest number:          0372
Signing time:             Mon 20 Oct 2025 03:36:16 +0000
Manifest this update:     Mon 20 Oct 2025 03:36:15 +0000
Manifest next update:     Wed 22 Oct 2025 03:36:15 +0000
Files and hashes:         1: 9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl (hash: +i9FmWzajMGqmOeCBXy+dT5QsQzYHVgvFI3ejZkurg0=)
                          2: C226B7D40AA411EEAEA4A5484AD9E6FC.roa (hash: Qm72goTpyMAJ3Op/uLoxMku/eqrMrQ5Gy2DoW/t8FVs=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:06:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 883 (0x373)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36EED3EAF, serialNumber=F59284D76678851F7AA743B13F6C067479550074
        Validity
            Not Before: Oct 20 03:36:15 2025 GMT
            Not After : Oct 22 03:36:15 2025 GMT
        Subject: CN=68f5ae30-7f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:15:ea:35:e9:0d:21:7a:d0:11:af:64:3a:8f:
                    99:1e:a6:68:f0:ca:8d:6d:96:3b:29:c9:a9:cc:e5:
                    24:73:78:85:13:68:64:be:cb:8a:9e:95:1c:99:02:
                    4c:6a:49:05:86:7a:4f:39:2a:63:f9:d1:e6:68:cd:
                    a9:6b:a9:f5:d6:3c:3f:1f:e6:f0:6a:0b:df:92:5e:
                    6c:cd:d6:fa:0f:ad:7c:8b:36:cc:31:cb:3a:86:9b:
                    a5:37:bb:eb:05:da:f4:52:ee:18:6a:ab:c6:9e:1b:
                    cd:7e:2d:3d:4d:4f:68:47:f4:af:3e:43:9f:60:c7:
                    f5:cb:17:28:2c:c0:bf:9a:90:93:34:37:5e:c6:ea:
                    2a:34:82:fc:dd:15:78:09:e1:dd:a2:ae:59:2a:fc:
                    fe:a0:50:9f:b4:7d:9b:c9:b6:be:9c:00:a8:aa:a5:
                    58:c5:d7:ce:58:66:45:ba:49:25:54:cd:5e:79:3a:
                    ba:71:f9:7e:bc:94:8b:63:89:7d:8e:21:a9:99:aa:
                    f6:ba:c9:ac:0c:e7:90:45:eb:91:58:e9:ee:2f:1e:
                    d1:d2:aa:66:08:e4:1b:15:1c:11:7d:00:4c:d8:5a:
                    90:65:2c:38:ba:ad:c7:22:66:12:98:ac:fb:3c:88:
                    fc:7e:b7:2f:73:35:5e:62:a1:be:e7:3a:90:d3:84:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:78:CF:9B:B2:67:8C:78:A9:35:55:8A:2A:3E:43:F2:12:E8:B3:12
            X509v3 Authority Key Identifier:
                keyid:F5:92:84:D7:66:78:85:1F:7A:A7:43:B1:3F:6C:06:74:79:55:00:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36EED3E/2AF8FB660AA311EEAF2CFA434AD9E6FC/9ZKE12Z4hR96p0OxP2wGdHlVAHQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:d7:c0:b0:9f:ce:4c:db:74:f2:dc:89:2b:7d:66:54:36:ed:
         15:d6:bf:0b:42:33:ee:ef:a6:9a:63:a3:60:87:36:e7:4c:1e:
         02:d2:61:55:1c:8d:e8:17:47:e3:75:70:5c:ff:c9:6f:0c:59:
         8f:3a:32:4f:a1:c7:91:7e:4f:0f:a6:01:22:1d:b7:2b:d7:7b:
         47:3d:94:35:51:a1:64:01:48:54:92:58:b5:aa:03:99:94:ba:
         f9:82:c8:f1:d4:67:d0:38:df:99:04:99:e4:3c:05:f9:3e:ec:
         30:cc:10:d3:60:7c:b5:02:fc:ff:36:06:0a:62:d7:4a:cd:4a:
         42:a3:35:28:7f:6d:29:13:6a:fa:49:a3:dd:70:33:8d:7a:70:
         7e:b3:f6:9e:68:de:67:22:c8:ab:3f:1f:67:64:20:70:55:de:
         2d:89:96:de:e9:a5:f7:d7:c0:d0:69:8f:b1:6f:ce:de:d2:1b:
         84:91:c6:b8:2b:13:f5:a9:4a:93:7a:fe:3a:5d:09:5d:c1:dc:
         c3:31:b8:69:5d:e5:0c:bb:37:c2:43:39:6c:f9:3f:84:2f:7b:
         bf:1f:94:9c:15:1b:bb:10:21:a6:b4:60:ca:ae:8d:ea:eb:f1:
         86:d7:32:1a:fc:6a:ec:6b:3d:9a:a9:8f:6b:f5:16:91:49:a4:
         08:14:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:20:48 2025 by rpki-client