Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
File:                     zz9PkkOmHTvtkzzA81M8or4JO9w.mft (raw, json)
Hash identifier:          H5HZgZYsyCPGtNhmuV074Kt1DsSBswwu/hX6uwAS6Sc=
Subject key identifier:   24:77:5D:10:64:BF:10:31:82:5D:CA:FF:ED:55:45:3F:E8:77:A0:B0
Authority key identifier: CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC
Certificate issuer:       /CN=F36628D0AF/serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
Certificate serial:       0266
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
Manifest number:          025F
Signing time:             Wed 17 Sep 2025 04:04:58 +0000
Manifest this update:     Wed 17 Sep 2025 04:04:57 +0000
Manifest next update:     Fri 19 Sep 2025 04:04:57 +0000
Files and hashes:         1: zz9PkkOmHTvtkzzA81M8or4JO9w.crl (hash: jwiB+UIGOsJP8RPTuquk0wWVYOpWW0Y1kbjR37q7oQ0=)
                          2: FC64D1D48EE011F0B3A4FFD5DAE4EC9C.roa (hash: zY17Hz4jbMGQpgxbaFtO0TqzRfRypKeMCm7nEpXL5dE=)
                          3: 2C041FAC923411F0874B46D6DAE4EC9C.roa (hash: tpKq8PaEgXxqsGmsi4xOkcd5uGMB++pELB/BO/L5apA=)
                          4: 1D9C2C128EE111F0A05232D6DAE4EC9C.roa (hash: 7/mPJegDzNGobxEPvcoOh9hmADeWp/7DZNVsknf5CfY=)
                          5: BDE21C828EE011F09E89A7D5DAE4EC9C.roa (hash: cEX5P0LZESnFW9UZ+j/fDOgJ1NZiXq4fEZ5TJVNJvnU=)
                          6: 22722218325311F0BEE5CBA8DAE4EC9C.roa (hash: 7FOq4iC+f8KGAzh35/6t4/kdL+NWHJr1WwivNfCgRGY=)
                          7: 06029CE8923411F0959B1BD6DAE4EC9C.roa (hash: KM6FaZ3N+6xYLUdr8UC2IJ+8T0cxiZ1kpB+SMdMA704=)
                          8: DE17D8988EE011F09D4FC2D5DAE4EC9C.roa (hash: Zz8H6d1f6QpmD+EtnMHU3iTAeKWNSu5vjH3b+kGHQZI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 04:04:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 614 (0x266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36628D0AF, serialNumber=CF3F4F9243A61D3BED933CC0F3533CA2BE093BDC
        Validity
            Not Before: Sep 17 04:04:57 2025 GMT
            Not After : Sep 19 04:04:57 2025 GMT
        Subject: CN=68ca336a-655d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:12:90:a1:f2:bf:9e:6a:25:64:55:70:4a:5e:
                    2a:40:dd:45:70:af:fa:d3:ff:38:9f:14:09:fd:06:
                    1f:24:37:7d:34:03:a8:53:0d:45:9d:94:82:27:b2:
                    92:2e:ec:c7:f2:77:bd:45:c2:f1:e6:f8:1e:76:4c:
                    68:85:a3:77:10:f2:11:9e:08:56:9f:cf:dd:d7:5a:
                    9f:a0:86:1c:d6:38:9e:38:81:68:c3:ec:fd:07:7a:
                    53:71:02:89:d9:d6:76:28:b2:6f:86:26:0c:b7:ee:
                    e7:4e:86:32:74:1d:1d:6b:59:b3:f2:c3:f1:82:70:
                    e3:da:8a:d1:80:6b:63:b5:89:df:5e:40:97:f5:ec:
                    8f:8e:24:6e:06:1f:94:73:d1:66:63:20:33:94:95:
                    f5:f6:47:2b:af:cc:1e:b2:b0:52:c8:43:31:56:f3:
                    75:82:b3:95:f2:65:ca:4f:b1:5d:77:96:33:74:df:
                    74:fc:4a:34:0f:36:26:59:14:82:78:66:cf:24:25:
                    9f:48:92:11:12:72:32:12:d7:44:ba:cd:ad:d4:3b:
                    3a:55:4e:5c:5c:7a:05:d7:97:04:08:1d:44:1c:7a:
                    74:14:cb:9d:2a:54:71:18:63:f6:f0:78:2a:ff:2f:
                    53:75:64:72:35:51:e0:08:9a:7f:54:29:5f:e8:70:
                    ed:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:77:5D:10:64:BF:10:31:82:5D:CA:FF:ED:55:45:3F:E8:77:A0:B0
            X509v3 Authority Key Identifier:
                keyid:CF:3F:4F:92:43:A6:1D:3B:ED:93:3C:C0:F3:53:3C:A2:BE:09:3B:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zz9PkkOmHTvtkzzA81M8or4JO9w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36628D0/4F501028C73411EEB4A18965775412E6/zz9PkkOmHTvtkzzA81M8or4JO9w.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e2:d8:91:14:54:03:32:24:8a:db:61:13:bb:42:79:43:5e:
         7c:da:63:63:ad:b0:61:c7:8d:33:c0:c6:db:ff:55:f8:8d:f3:
         0d:d8:26:75:5a:ef:95:3a:cd:05:4f:90:13:6e:93:d4:7d:c4:
         83:6e:3e:e5:49:6c:1d:65:a8:48:e0:a3:4c:b6:c4:c8:29:00:
         fc:d0:8f:b3:70:bd:53:26:8a:82:9a:37:a9:3b:0f:95:a0:01:
         3a:0f:cb:d9:fa:79:50:2a:f5:be:84:23:89:ee:69:7c:67:8f:
         e0:4e:22:90:01:9c:d6:ec:be:8b:8b:94:99:43:7e:76:bf:ec:
         d9:f7:49:96:22:dc:38:6a:02:cb:8f:dc:97:a8:f7:5d:f6:ed:
         10:be:70:f8:63:46:91:5a:1e:b5:0e:a1:82:16:c3:c7:5c:fe:
         a7:bc:1b:ec:46:de:8a:dd:13:c3:e2:54:19:40:4b:3b:5a:84:
         9e:97:2a:48:bd:47:f9:89:48:46:23:81:e1:ce:7f:82:0c:d7:
         8d:14:fd:90:16:82:2e:f5:6b:8b:7b:4a:a0:e8:cd:8b:6b:d5:
         94:f7:8c:01:52:3b:1c:71:29:43:01:43:c9:84:19:e8:31:08:
         15:81:51:ba:d5:ef:dc:e1:09:5c:41:07:7e:52:31:74:ca:75:
         d8:6f:fe:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:34:47 2025 by rpki-client