Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
File:                     zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft (raw, json)
Hash identifier:          Ikm2nY6BQXudyyOKi6By93fwO18Oplmv73As1z1NNMU=
Subject key identifier:   F4:94:A9:0A:6A:3D:01:61:F7:C8:91:0B:8E:5E:41:54:E4:7D:35:17
Authority key identifier: CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01
Certificate issuer:       /CN=F36831A0AF/serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
Certificate serial:       0A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
Manifest number:          07
Signing time:             Thu 18 Sep 2025 05:13:57 +0000
Manifest this update:     Thu 18 Sep 2025 05:13:57 +0000
Manifest next update:     Sat 20 Sep 2025 05:13:57 +0000
Files and hashes:         1: zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl (hash: qg9tho5UZ5qjw9ns9OPM1o3uxhrmMAHhl3UQC/w+IFo=)
                          2: E2260ED092F711F0A755CCC9DAE4EC9C.roa (hash: Db2CiRM4uTKtHBAzQvrLoynjynVhOmVsLHGoU4aqlVA=)
                          3: CAA0A8CA92F611F08941CFC1DAE4EC9C.roa (hash: cZYmCRPcuK5aw4+CfGix0WDAzqJ34AZ7hKPsTZ/sAy4=)
                          4: A2111EC092F711F0BD7EB2C9DAE4EC9C.roa (hash: O/Z3Ckngn3+2t7fcmEz+onvx7IwbPvoP3rUMyC0EVL4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36831A0AF, serialNumber=CCD7EE5F0F7377CF8533E65737ED111F2017B601
        Validity
            Not Before: Sep 18 05:13:57 2025 GMT
            Not After : Sep 20 05:13:57 2025 GMT
        Subject: CN=68cb9515-5f64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:da:0f:ca:54:7a:a7:fd:ec:52:73:4d:16:
                    8f:0e:8c:e4:fd:95:7d:9a:57:f4:df:ee:30:bc:eb:
                    61:49:bc:4a:87:90:9c:f1:b4:76:2f:a9:5e:ec:b9:
                    ba:31:1b:12:74:4b:b1:d4:51:a9:30:ae:68:ca:74:
                    2e:c8:45:45:07:3e:08:c5:37:26:e2:62:8d:69:d1:
                    da:e5:33:4f:fa:56:11:c8:4a:24:f2:e6:93:f7:d9:
                    01:94:89:f5:75:42:d3:e4:ba:71:d0:2a:d8:a4:ee:
                    4d:c9:a6:6b:c8:2f:c2:68:14:7e:77:18:7f:95:3c:
                    c5:db:e1:3b:3d:3d:5a:35:3f:f4:58:42:f8:d5:24:
                    f0:09:b5:77:5b:6a:74:f1:87:ac:ef:c4:17:71:f7:
                    1f:26:c2:84:e2:f0:2c:5e:e6:1d:db:52:26:d1:e1:
                    85:95:8e:61:26:74:e6:b6:4e:aa:db:e0:b1:05:38:
                    af:05:31:e8:db:c8:f3:6c:35:b3:a2:af:ed:de:63:
                    c5:90:c1:bc:36:38:d5:9e:36:ef:4e:72:0c:92:4a:
                    5e:5f:3c:73:56:e0:dd:dc:db:e5:9f:4c:01:54:70:
                    f2:d3:6f:c7:96:6e:b9:1c:23:e5:00:56:d9:5c:d6:
                    0e:27:aa:4d:8a:76:c0:26:de:8e:91:a9:bc:3c:25:
                    06:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:94:A9:0A:6A:3D:01:61:F7:C8:91:0B:8E:5E:41:54:E4:7D:35:17
            X509v3 Authority Key Identifier:
                keyid:CC:D7:EE:5F:0F:73:77:CF:85:33:E6:57:37:ED:11:1F:20:17:B6:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36831A0/2FF15DBC923611F082CA2AE3DAE4EC9C/zNfuXw9zd8-FM-ZXN-0RHyAXtgE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:61:47:ae:ea:75:5c:7e:f1:fe:34:86:91:ea:cc:72:22:b3:
         4e:06:14:91:24:9a:fc:44:0a:f8:c9:06:b8:4e:88:e2:75:40:
         0b:71:4b:f2:5b:e9:9d:02:f4:d1:ef:ab:b2:a9:9c:32:04:ce:
         f8:d8:4c:d8:12:a4:db:b9:b9:d9:70:87:6f:70:41:7c:12:bf:
         db:0f:71:15:12:77:68:a6:8a:b2:70:bf:9a:23:7c:fe:32:c6:
         c1:e7:e2:0b:58:3d:57:55:2c:a9:94:c5:16:8a:d0:8d:2a:a8:
         93:fa:89:ed:ab:3e:5e:dd:21:e8:0b:81:56:40:a6:70:3d:5a:
         0f:a0:1c:8d:13:80:67:c4:47:57:84:00:fa:3e:a5:27:32:29:
         f7:e7:37:87:c5:b2:87:6a:c6:8f:04:d2:05:ad:e4:9d:bb:27:
         ea:2b:75:bc:20:42:7b:08:a9:0d:f0:1d:e1:ca:bc:6d:cb:41:
         fd:be:f5:30:37:24:65:65:dc:0a:31:3f:f8:44:d6:99:eb:56:
         e9:2e:c7:07:15:2a:95:a5:cf:3b:fc:5e:60:5c:9b:69:ac:ff:
         37:58:f6:fb:09:9d:85:98:f8:93:4e:79:ab:11:30:a8:28:4a:
         3d:99:09:92:1d:90:a5:91:b8:25:af:c8:94:9c:2e:95:9c:e7:
         4c:73:c0:4c
-----BEGIN CERTIFICATE-----
MIIFlTCCBH2gAwIBAgIBCjANBgkqhkiG9w0BAQsFADBIMRMwEQYDVQQDEwpGMzY4
MzFBMEFGMTEwLwYDVQQFEyhDQ0Q3RUU1RjBGNzM3N0NGODUzM0U2NTczN0VEMTEx
RjIwMTdCNjAxMB4XDTI1MDkxODA1MTM1N1oXDTI1MDkyMDA1MTM1N1owGDEWMBQG
A1UEAxMNNjhjYjk1MTUtNWY2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL+52g/KVHqn/exSc00Wjw6M5P2VfZpX9N/uMLzrYUm8SoeQnPG0di+pXuy5
ujEbEnRLsdRRqTCuaMp0LshFRQc+CMU3JuJijWnR2uUzT/pWEchKJPLmk/fZAZSJ
9XVC0+S6cdAq2KTuTcmma8gvwmgUfncYf5U8xdvhOz09WjU/9FhC+NUk8Am1d1tq
dPGHrO/EF3H3HybChOLwLF7mHdtSJtHhhZWOYSZ05rZOqtvgsQU4rwUx6NvI82w1
s6Kv7d5jxZDBvDY41Z42705yDJJKXl88c1bg3dzb5Z9MAVRw8tNvx5ZuuRwj5QBW
2VzWDieqTYp2wCbejpGpvDwlBuECAwEAAaOCArgwggK0MB0GA1UdDgQWBBT0lKkK
aj0BYffIkQuOXkFU5H01FzAfBgNVHSMEGDAWgBTM1+5fD3N3z4Uz5lc37REfIBe2
ATAOBgNVHQ8BAf8EBAMCB4AwgZUGA1UdHwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6
Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3JlcG9zaXRvcnkv
RjM2ODMxQTAvMkZGMTVEQkM5MjM2MTFGMDgyQ0EyQUUzREFFNEVDOUMvek5mdVh3
OXpkOC1GTS1aWE4tMFJIeUFYdGdFLmNybDBnBggrBgEFBQcBAQRbMFkwVwYIKwYB
BQUHMAKGS3JzeW5jOi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L2Fmcmlu
aWMvek5mdVh3OXpkOC1GTS1aWE4tMFJIeUFYdGdFLmNlcjBPBgNVHSABAf8ERTBD
MEEGCCsGAQUFBw4CMDUwMwYIKwYBBQUHAgEWJ2h0dHBzOi8vcnBraS5hZnJpbmlj
Lm5ldC9wb2xpY3kvQ1BTLnBkZjCB1QYIKwYBBQUHAQsEgcgwgcUwgYsGCCsGAQUF
BzALhn9yc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJf
cmVwb3NpdG9yeS9GMzY4MzFBMC8yRkYxNURCQzkyMzYxMUYwODJDQTJBRTNEQUU0
RUM5Qy96TmZ1WHc5emQ4LUZNLVpYTi0wUkh5QVh0Z0UubWZ0MDUGCCsGAQUFBzAN
hilodHRwczovL3JyZHAuYWZyaW5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggr
BgEFBQcBCAEB/wQGMASgAgUAMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE
AgACBQAwDQYJKoZIhvcNAQELBQADggEBACphR67qdVx+8f40hpHqzHIis04GFJEk
mvxECvjJBrhOiOJ1QAtxS/Jb6Z0C9NHvq7KpnDIEzvjYTNgSpNu5udlwh29wQXwS
v9sPcRUSd2imirJwv5ojfP4yxsHn4gtYPVdVLKmUxRaK0I0qqJP6ie2rPl7dIegL
gVZApnA9Wg+gHI0TgGfER1eEAPo+pScyKffnN4fFsodqxo8E0gWt5J27J+ordbwg
QnsIqQ3wHeHKvG3LQf2+9TA3JGVl3AoxP/hE1pnrVukuxwcVKpWlzzv8XmBcm2ms
/zdY9vsJnYWY+JNOeasRMKgoSj2ZCZIdkKWRuCWvyJScLpWc50xzwEw=
-----END CERTIFICATE-----
Generated at Thu Sep 18 12:05:19 2025 by rpki-client