Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
File:                     zz9PkkOmHTvtkzzA81M8or4JO9w.mft (raw, json)
Hash identifier:          8v4SiEH6w/V03qwGfmOOihPgmmQ8XSDVXem4Eo1sqSg=
Subject key identifier:   7D:82:DB:F2:6D:9D:06:19:86:5E:08:EC:33:83:C7:B8:B5:1C:0F:6F
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Certificate issuer:       /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial:       022A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
Manifest number:          0229
Signing time:             Thu 31 Jul 2025 04:28:52 +0000
Manifest this update:     Thu 31 Jul 2025 04:28:51 +0000
Manifest next update:     Sat 02 Aug 2025 04:28:51 +0000
Files and hashes:         1: zz9PkkOmHTvtkzzA81M8or4JO9w.crl (hash: fxQwWcUXzF2lH5HHdvZ2mziyXAGxiAci/c5iLiVjtrw=)
                          2: 22722218325311F0BEE5CBA8DAE4EC9C.roa (hash: 7FOq4iC+f8KGAzh35/6t4/kdL+NWHJr1WwivNfCgRGY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 554 (0x22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628D0AF, serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
        Validity
            Not Before: Jul 31 04:28:51 2025 GMT
            Not After : Aug  2 04:28:51 2025 GMT
        Subject: CN=688af104-77f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a0:8a:90:f6:39:3a:54:5f:7f:e9:b1:f4:5c:
                    cf:81:5b:99:37:37:f8:43:8d:0e:f0:a9:7c:bc:2f:
                    be:df:31:3b:84:9c:bd:8f:43:4e:94:12:f3:5f:f1:
                    57:7a:87:d9:0f:ac:97:51:f4:36:9d:69:92:ac:19:
                    1c:a7:42:66:7d:84:84:f0:73:46:bc:f3:51:a8:d2:
                    1d:96:fb:17:97:63:0a:c1:ab:3b:19:73:bd:1a:8b:
                    40:98:3f:57:81:5a:b5:54:ba:8f:fb:10:d5:28:fe:
                    73:6c:aa:b2:ee:be:c5:fa:d4:f8:26:01:f0:cc:6b:
                    a0:b4:00:49:cd:0e:7e:80:b4:5b:3e:11:28:a0:00:
                    d5:4f:1a:62:b5:82:94:8b:04:5f:d6:db:6a:d4:2e:
                    08:c8:0b:30:e9:6d:01:1e:d1:d9:33:aa:1c:c7:27:
                    9e:4c:83:df:54:5c:8d:f9:30:40:c1:56:0a:ec:91:
                    32:8f:eb:aa:4e:e2:c8:dd:8c:43:5b:27:5a:23:bb:
                    7e:52:80:22:82:84:f0:d0:a9:59:e7:97:e3:94:45:
                    67:fc:63:82:4f:cc:a4:3f:38:8a:19:7d:5c:ac:2f:
                    c9:4e:18:11:1b:91:84:7a:89:77:ce:b0:bd:3f:1e:
                    0c:15:2b:8f:a1:30:86:a6:ff:42:2b:0e:1f:6e:e5:
                    70:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:82:DB:F2:6D:9D:06:19:86:5E:08:EC:33:83:C7:B8:B5:1C:0F:6F
            X509v3 Authority Key Identifier:
                keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:cd:55:f6:d2:b1:9f:67:9c:bb:49:89:63:38:00:e4:48:23:
         4f:78:a1:f5:38:de:bc:74:19:48:67:9c:b5:3f:a3:4f:c1:15:
         6a:cb:3f:10:85:0b:60:12:63:6c:7d:32:6d:4d:23:1d:f6:5d:
         4c:14:59:3e:46:ff:33:2a:30:9a:6f:0d:13:01:c4:89:1f:82:
         eb:e3:b7:2f:93:a7:15:95:e5:cf:ff:34:82:34:ee:08:90:04:
         ad:05:07:85:bc:e0:a1:4c:86:1b:69:15:72:42:ed:e3:6d:a9:
         7c:26:b8:4b:78:7b:10:c0:3c:9c:ed:0a:42:a2:9e:0b:7e:9d:
         b6:88:93:68:e0:95:50:ab:fe:43:18:b8:ae:d2:83:27:b5:b3:
         8a:35:fe:19:41:bd:e2:a0:2c:51:85:76:33:8a:19:4f:32:60:
         43:65:a9:3a:32:cf:4c:39:1f:ac:79:a9:5c:98:47:61:41:ed:
         6f:3c:e5:17:ab:ea:36:b6:bb:ec:f6:cf:4f:3d:68:e4:7a:52:
         8b:96:23:26:6b:91:76:7e:d1:10:0f:4e:31:f0:1c:ba:e7:a8:
         a5:da:68:a1:4f:3b:90:4c:bd:f1:6e:04:a9:81:e2:63:eb:22:
         df:e8:26:1b:6e:d1:c4:9f:32:93:ea:b1:17:e1:dd:bf:67:1b:
         89:c0:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 11:13:09 2025 by rpki-client