Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
File:                     0cZXgBrfziVpTfuxqVxs2kR-O7o.mft (raw, json)
Hash identifier:          pnvnnTlY+9INfILOX8+iB7tUXseh1PAlhyInPAx7SZU=
Subject key identifier:   22:32:A6:FD:3E:06:6A:EA:7B:2D:74:4F:25:86:04:74:8A:4E:4D:2B
Authority key identifier: D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA
Certificate issuer:       /CN=F3656387AF/serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
Certificate serial:       0544
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
Manifest number:          0542
Signing time:             Wed 17 Sep 2025 02:38:08 +0000
Manifest this update:     Wed 17 Sep 2025 02:38:08 +0000
Manifest next update:     Fri 19 Sep 2025 02:38:08 +0000
Files and hashes:         1: 0cZXgBrfziVpTfuxqVxs2kR-O7o.crl (hash: RxBF3JXioz1rbykxeh1HKQ3WsXaW1XjlZOL1g7lmGBc=)
                          2: 5929BAD6881811EF9F8726B0762E951A.roa (hash: gqseLBT3raRF8qI8a39+TId/5s+ZYprcLYdDUSRWjC4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                          rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 02:38:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348 (0x544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3656387AF, serialNumber=D1C657801ADFCE25694DFBB1A95C6CDA447E3BBA
        Validity
            Not Before: Sep 17 02:38:08 2025 GMT
            Not After : Sep 19 02:38:08 2025 GMT
        Subject: CN=68ca1f10-9ff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:db:73:28:e7:65:c9:d1:c8:c9:00:cb:c3:f4:
                    6d:59:37:b3:53:50:34:e2:1d:ec:ca:de:67:ee:37:
                    0f:df:e9:b5:e0:a5:60:00:f8:a7:74:3a:e7:de:09:
                    7a:b4:63:bd:ea:67:1d:d2:98:c8:1b:48:6e:b2:3c:
                    2a:ad:99:f2:fe:3c:b7:7e:14:f3:f3:95:c4:8c:e1:
                    65:a7:2e:3f:de:06:b2:c0:de:a1:18:b0:15:7a:0d:
                    ba:b7:bb:ac:dd:22:e5:e0:67:3e:77:55:10:ed:d7:
                    d4:07:94:62:c4:a9:3b:df:82:f4:05:81:e0:3a:a5:
                    c1:30:5d:f7:76:7f:77:67:fd:02:16:88:41:0e:6e:
                    e7:8d:f5:18:4c:91:42:4f:08:3f:82:55:6d:f1:0e:
                    55:06:80:41:34:62:bf:63:3b:5c:49:e8:9e:34:89:
                    d9:f8:d0:83:22:78:95:99:10:af:0f:57:23:41:17:
                    33:e1:25:79:0f:ba:5e:f3:a0:63:43:5f:7b:2b:40:
                    c9:f2:7c:4e:f3:98:83:e0:8c:5c:c1:11:55:56:ac:
                    0d:72:07:6c:78:96:42:08:3a:9f:24:d8:9f:a5:4b:
                    c1:4c:13:e4:b7:c5:04:69:c6:6c:ec:51:df:30:9b:
                    37:5d:5b:a7:54:31:e4:d8:fc:14:b8:9d:c3:de:30:
                    b5:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:32:A6:FD:3E:06:6A:EA:7B:2D:74:4F:25:86:04:74:8A:4E:4D:2B
            X509v3 Authority Key Identifier:
                keyid:D1:C6:57:80:1A:DF:CE:25:69:4D:FB:B1:A9:5C:6C:DA:44:7E:3B:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/0cZXgBrfziVpTfuxqVxs2kR-O7o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3656387/C78EEF9090CD11EC8B7B29A05A40D577/0cZXgBrfziVpTfuxqVxs2kR-O7o.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:61:c3:8a:af:a9:f9:60:21:9d:d3:a9:b7:e7:2b:e2:3e:6d:
         a7:e4:1d:85:a9:b1:e1:ca:e4:ae:4c:cf:3e:f9:47:84:35:bb:
         84:25:df:4f:35:03:88:0e:de:b3:33:9e:f0:93:b2:76:1d:c8:
         30:14:26:15:2e:93:a1:72:2f:66:40:b8:90:fa:40:34:8c:0f:
         2f:39:92:e8:a9:9e:f8:6e:bf:34:0a:30:a7:f4:8f:db:53:d1:
         2f:d8:0a:c2:19:75:1a:7a:86:0e:fc:25:c2:27:68:c2:b0:af:
         cc:35:a9:12:0c:ed:73:74:57:b2:0f:e8:0e:03:5a:d9:19:f2:
         18:ab:69:ab:2d:b7:b5:88:24:ed:46:85:52:3f:36:a3:35:41:
         3c:cd:60:5e:48:39:cf:7b:fb:6f:f5:13:28:79:89:af:5a:26:
         44:0b:aa:82:dc:9d:7f:2b:a3:85:0c:57:50:c0:e9:d0:00:d8:
         58:3e:06:e3:e1:7b:f0:d9:6b:6f:0a:5f:53:33:15:0f:30:9a:
         c2:f2:ed:24:f9:5e:18:c6:55:a2:90:88:8b:c7:cb:79:57:47:
         c0:f5:97:b4:b9:06:66:3e:aa:8c:5a:c6:12:aa:01:cc:c1:e9:
         e1:09:e8:6f:ea:34:ec:72:73:11:da:a5:a9:09:54:0b:4a:45:
         2a:41:3b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 02:21:35 2025 by rpki-client