Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft
File:                     zVIytjxqgymQyGcHy3Ob3ATbmlk.mft (raw, json)
Hash identifier:          QfITgVvZVrcBDthzpVNPnfdl62Nu/slQMhM/QzJhYLM=
Subject key identifier:   7A:1E:AA:76:50:37:A0:7D:66:2C:CF:3E:F4:00:C6:D2:BE:A7:21:70
Authority key identifier: CD:52:32:B6:3C:6A:83:29:90:C8:67:07:CB:73:9B:DC:04:DB:9A:59
Certificate issuer:       /CN=F36114AAAF/serialNumber=CD5232B63C6A832990C86707CB739BDC04DB9A59
Certificate serial:       0222
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft
Manifest number:          0210
Signing time:             Wed 04 Jun 2025 04:18:22 +0000
Manifest this update:     Wed 04 Jun 2025 04:18:21 +0000
Manifest next update:     Fri 06 Jun 2025 04:18:21 +0000
Files and hashes:         1: zVIytjxqgymQyGcHy3Ob3ATbmlk.crl (hash: GRWw0KqRhQRK/PiG/UDRenrEiXlLRqFSp79bqjfZstw=)
                          2: 18567D62BE9E11EEB4D3B4A9775412E6.roa (hash: Y3fBKAh78k5vI18fpOwm6xT2sIv2rQrR5n28MiwgGw0=)
                          3: B931C400BE9C11EEA0A534A7775412E6.roa (hash: IJ0CO9zxuOXyI58eb3kLZpx5bBprglgm5dvQomrvs7c=)
                          4: AD97399EBE9811EE8014B5A0775412E6.roa (hash: KoccFF7o/yfcbuFNWG6sVlIT4Zk2HEV6xtp7qyYqZfA=)
                          5: 31A128EABE9D11EEA80005A8775412E6.roa (hash: 9O72yrx1j232eGHkNnAgxM/xeTRHwNjlaclX0vJiDlI=)
                          6: E3806EB4BE9C11EE8AD4BEA7775412E6.roa (hash: vi1SaeJ/he/8I4o22H/PsR8oFaPMpVTP4SEKAR/gzwk=)
                          7: F25441C6BE9D11EEADDB66A9775412E6.roa (hash: ThmE1VW2ZBVlYZBrNW/OBthIz+IP2YebXYtomjDPNPw=)
                          8: 0CA88DF8F41B11EF957DCA42762E951A.roa (hash: AROikz2JvvNh8UMiTRM9CoRA6myjtjj7cgzBl88JMUw=)
                          9: 8C387FCEBE9D11EEA544F8A8775412E6.roa (hash: 7a2h0aandtk+7wd2GG30FexJRyIFmO2jPX2swBuFU4w=)
                          10: 06562762BE9D11EE9AD5E1A7775412E6.roa (hash: A47Fv49HrGw8EWfdryHbDHlv+/Oz+z1q6LexSzcMJBw=)
                          11: 2027B3FCBEA911EE992A65BC775412E6.roa (hash: govcD5sR2yJWCYrEozEBzG6TFJptEd6fxcH+UyxA72c=)
                          12: B104455EBE9D11EE832320A9775412E6.roa (hash: NYNFo4d1hV3NuNv2EFx6eQE3ZKc/gOgb/XmK5mngB5c=)
                          13: 5DEF8AB8BE9D11EEA53E40A8775412E6.roa (hash: VO2iMV/jxCvAs2IJefOCn2yGYKSsfwTSPJXA5qWGccs=)
                          14: 7D9A0CEEBE9811EEAA3929A0775412E6.roa (hash: QAI8gTiTkofleiNwqNNvOdSN9OEqHznr5e0GGNajQk0=)
                          15: 472ED74CBE9911EEBE5488A1775412E6.roa (hash: IuMi4HBaMKSuvRfubLEiQXMhOlTDSvv+gItJsDU0jtw=)
                          16: 948EB766BE9C11EEA876EEA6775412E6.roa (hash: nC8yYXnLMq8zCmiLa8fcLRhOJAWhlPxS9VmBsCGk1WM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 06 Jun 2025 00:07:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36114AAAF, serialNumber=CD5232B63C6A832990C86707CB739BDC04DB9A59
        Validity
            Not Before: Jun  4 04:18:21 2025 GMT
            Not After : Jun  6 04:18:21 2025 GMT
        Subject: CN=683fc90e-38cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:81:8a:df:ad:ff:16:fb:af:13:5e:0a:eb:
                    4d:be:25:b1:21:e6:26:6f:23:44:d4:d8:a0:84:7d:
                    2a:0d:98:ee:f2:43:73:d9:09:49:10:4d:ee:d7:f0:
                    b1:e6:82:d1:69:a9:7c:f1:aa:61:5e:db:27:8f:06:
                    bc:bf:08:5b:2e:01:82:50:53:9c:19:ac:bd:25:7b:
                    b7:a7:26:af:01:73:8c:11:51:b6:6d:9a:b4:f7:0a:
                    cf:2c:62:4c:5b:45:61:f7:59:57:45:27:26:c6:b8:
                    08:01:73:24:13:cd:7d:c7:80:f9:92:23:1e:12:d9:
                    96:55:9e:cc:f1:35:4a:38:5b:8d:dd:f4:3f:05:24:
                    05:0e:a3:1a:e5:4f:f9:d7:0c:b0:a3:a8:ca:6c:24:
                    f6:a5:e7:b7:57:59:cb:eb:75:3c:ac:6c:cb:27:3a:
                    8e:29:44:43:cd:a1:39:fd:61:90:1c:c4:4d:49:8f:
                    1f:bd:cf:af:58:f4:f8:f0:f1:3d:c0:f1:3f:69:9e:
                    1d:a7:09:4b:c0:dc:e1:52:fd:59:c9:f2:d2:b9:47:
                    41:b8:60:18:fa:90:94:0e:9e:1e:02:d5:67:eb:5d:
                    0d:21:c2:32:98:8f:df:cd:01:37:5e:0c:49:f9:45:
                    0b:fa:83:d8:a9:5f:78:f0:5d:6c:44:22:29:8f:2d:
                    d4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:1E:AA:76:50:37:A0:7D:66:2C:CF:3E:F4:00:C6:D2:BE:A7:21:70
            X509v3 Authority Key Identifier:
                keyid:CD:52:32:B6:3C:6A:83:29:90:C8:67:07:CB:73:9B:DC:04:DB:9A:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zVIytjxqgymQyGcHy3Ob3ATbmlk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36114AA/86D6E57EBE8F11EE832F4491775412E6/zVIytjxqgymQyGcHy3Ob3ATbmlk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:9c:a1:13:b4:bc:12:b5:79:35:54:57:0a:9c:43:d5:8d:3b:
         73:ca:6f:30:03:fc:e8:de:e3:f3:74:68:2c:a8:7b:56:e7:3d:
         70:37:a8:de:9e:86:42:14:d4:44:fd:be:15:9a:9a:ec:03:a1:
         8c:50:f3:5e:87:ed:32:52:9f:63:f7:49:6b:cc:ca:1c:0c:8e:
         2c:57:46:8b:9f:26:78:5d:95:b4:a3:cf:42:73:ec:4e:35:63:
         d3:b5:9a:4c:a1:9d:75:f1:a7:72:e3:d0:49:f0:05:b4:c0:16:
         50:76:38:51:4b:3c:29:04:b3:c5:38:b0:fe:75:ad:7c:97:59:
         97:f8:d4:f9:5d:54:b2:26:a0:62:a9:b4:53:4c:79:4e:65:fc:
         cb:98:26:dc:11:1d:fa:74:b0:6b:65:bf:39:76:1a:03:aa:11:
         8a:66:69:7c:b1:c5:7f:0f:a6:7f:ba:06:01:f5:dd:23:8b:45:
         f9:f5:54:98:f4:cb:ca:64:a1:2b:c8:03:3a:be:4b:58:9e:b4:
         bc:b1:34:e0:46:12:8e:a1:26:74:b2:6d:e7:af:04:24:df:cd:
         29:99:d8:da:b4:f3:b3:9c:e9:fe:ef:ad:c6:53:65:04:ad:89:
         8a:f4:cd:35:c5:5d:8c:c0:77:a5:2f:ae:c0:eb:39:9f:f6:26:
         4f:bb:73:c4
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAiIwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MTE0QUFBRjExMC8GA1UEBRMoQ0Q1MjMyQjYzQzZBODMyOTkwQzg2NzA3Q0I3MzlC
REMwNERCOUE1OTAeFw0yNTA2MDQwNDE4MjFaFw0yNTA2MDYwNDE4MjFaMBgxFjAU
BgNVBAMTDTY4M2ZjOTBlLTM4Y2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDEZ4GK363/FvuvE14K602+JbEh5iZvI0TU2KCEfSoNmO7yQ3PZCUkQTe7X
8LHmgtFpqXzxqmFe2yePBry/CFsuAYJQU5wZrL0le7enJq8Bc4wRUbZtmrT3Cs8s
YkxbRWH3WVdFJybGuAgBcyQTzX3HgPmSIx4S2ZZVnszxNUo4W43d9D8FJAUOoxrl
T/nXDLCjqMpsJPal57dXWcvrdTysbMsnOo4pREPNoTn9YZAcxE1Jjx+9z69Y9Pjw
8T3A8T9pnh2nCUvA3OFS/VnJ8tK5R0G4YBj6kJQOnh4C1WfrXQ0hwjKYj9/NATde
DEn5RQv6g9ipX3jwXWxEIimPLdQxAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUeh6q
dlA3oH1mLM8+9ADG0r6nIXAwHwYDVR0jBBgwFoAUzVIytjxqgymQyGcHy3Ob3ATb
mlkwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjExNEFBLzg2RDZFNTdFQkU4RjExRUU4MzJGNDQ5MTc3NTQxMkU2L3pWSXl0
anhxZ3ltUXlHY0h5M09iM0FUYm1say5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3pWSXl0anhxZ3ltUXlHY0h5M09iM0FUYm1say5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2MTE0QUEvODZENkU1N0VCRThGMTFFRTgzMkY0NDkxNzc1
NDEyRTYvelZJeXRqeHFneW1ReUdjSHkzT2IzQVRibWxrLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAhnKETtLwStXk1VFcKnEPVjTtzym8w
A/zo3uPzdGgsqHtW5z1wN6jenoZCFNRE/b4VmprsA6GMUPNeh+0yUp9j90lrzMoc
DI4sV0aLnyZ4XZW0o89Cc+xONWPTtZpMoZ118ady49BJ8AW0wBZQdjhRSzwpBLPF
OLD+da18l1mX+NT5XVSyJqBiqbRTTHlOZfzLmCbcER36dLBrZb85dhoDqhGKZml8
scV/D6Z/ugYB9d0ji0X59VSY9MvKZKEryAM6vktYnrS8sTTgRhKOoSZ0sm3nrwQk
380pmdjatPOznOn+763GU2UErYmK9M01xV2MwHelL67A6zmf9iZPu3PE
-----END CERTIFICATE-----
Generated at Wed Jun 4 12:17:36 2025 by rpki-client