Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
File:                     zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft (raw, json)
Hash identifier:          U4b2XqXyYWY+iqgFq0Ea1iaq7PHvUNSyqmst037K0VE=
Subject key identifier:   8F:33:CB:F7:7B:30:4A:D7:3C:C3:06:DB:84:06:FA:66:BB:3C:B5:8E
Authority key identifier: CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D
Certificate issuer:       /CN=F369BF27AR/serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
Certificate serial:       093E
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
Manifest number:          0932
Signing time:             Tue 16 Sep 2025 01:29:39 +0000
Manifest this update:     Tue 16 Sep 2025 01:29:39 +0000
Manifest next update:     Thu 18 Sep 2025 01:29:38 +0000
Files and hashes:         1: zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl (hash: AWTWMXLj4/60BtBKTyqYEs0FKAg4WavJJEJqnzeyh7Q=)
                          2: C28DA6C44D5F11F089D77C8ADAE4EC9C.roa (hash: dABQoz9AGXGyoNBAetMSbs1U62SRqLiX8c5R1HY93gg=)
                          3: 1AD0D08C4D5F11F08E482186DAE4EC9C.roa (hash: OhoSn83syBewwYcLzVXxyO/+vTXDKKmwuhAAzmLRplo=)
                          4: E2B1CB3E4D5E11F0AC9C0484DAE4EC9C.roa (hash: yv5AfJmE56S5ts/c2onzn6ricd3K2oEmGaCJUOJTiXA=)
                          5: 7F9AB1CC98F711E9BABB4B76F8AEA228.roa (hash: jzZ3XEm/0+bQmIh4jXGZex7PIgjtpornzaVmedGVKeA=)
                          6: 4601A8304D5F11F0AA717286DAE4EC9C.roa (hash: O60MwYsiZd+UlKceOJ85IOxK7Q1+As/RwsVdr1Ykpjc=)
                          7: 937EE7024D6011F09A38078FDAE4EC9C.roa (hash: pbBP0ntQdVgVm+KFXqo/FvwDRupvw0CtUQRgWotDjnY=)
                          8: 318EA42098F711E9A08C1176F8AEA228.roa (hash: w0LdOEkkXXKRsW1PLK4DZkJUwY2G0SIkANImRgbjTcI=)
                          9: 3A1D58C44D6011F093A9B58CDAE4EC9C.roa (hash: R1suNQZf1mKtdv/mgrGQzmzP42VGw/+PJeTA6yPQF0w=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
                          rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2366 (0x93e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F369BF27AR, serialNumber=CD07D7C89ECE4C0F9D04A1B153BBC710DF016B2D
        Validity
            Not Before: Sep 16 01:29:39 2025 GMT
            Not After : Sep 18 01:29:38 2025 GMT
        Subject: CN=68c8bd83-09c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:ee:06:b1:9a:ba:c0:f0:09:f9:b8:a3:5a:
                    56:c7:31:50:e3:8d:ee:59:52:3a:ac:15:1a:28:4b:
                    53:36:01:97:48:c8:ef:ca:65:af:66:c1:db:f5:4a:
                    39:54:86:9a:bb:da:94:b7:b4:39:7d:80:d5:8a:06:
                    3c:0e:c0:06:c8:06:63:bc:88:b8:eb:43:57:40:ee:
                    15:74:d6:ab:79:95:15:8d:38:95:a6:cf:91:eb:7f:
                    60:1d:79:5b:3e:9f:64:ed:78:44:0d:61:03:27:0e:
                    7b:12:06:2a:29:2f:5c:8a:4a:10:71:ec:48:30:fe:
                    17:4b:7a:e4:39:29:cf:a5:9e:82:9c:6f:87:db:4e:
                    59:85:7b:4b:92:82:ed:d4:fa:c7:e7:15:73:2c:d5:
                    69:56:ce:44:94:89:53:8f:05:ff:61:50:0f:dd:7c:
                    14:36:d4:31:89:a6:7b:f7:45:b4:33:0d:5e:8e:82:
                    ca:00:90:29:f0:1b:55:9d:39:2c:2f:39:1b:a1:09:
                    26:47:11:2f:cc:8e:a5:9f:bc:31:9a:79:c0:3f:5c:
                    5c:b1:7b:78:13:4f:e2:61:9d:16:71:15:f4:01:be:
                    52:af:25:91:03:b2:ee:dc:f5:00:a1:33:fd:75:03:
                    02:b8:43:64:c1:d7:10:75:65:bc:70:d2:47:e0:95:
                    27:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:33:CB:F7:7B:30:4A:D7:3C:C3:06:DB:84:06:FA:66:BB:3C:B5:8E
            X509v3 Authority Key Identifier:
                keyid:CD:07:D7:C8:9E:CE:4C:0F:9D:04:A1:B1:53:BB:C7:10:DF:01:6B:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F369BF27/5800DCF491EA11E9BA56927AF8AEA228/zQfXyJ7OTA-dBKGxU7vHEN8Bay0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:9a:46:2f:ca:dc:14:1f:01:c8:b5:dd:d4:55:b9:34:88:a9:
         14:aa:f6:13:2a:a8:26:8a:44:a7:8b:aa:ad:51:0f:20:67:9d:
         96:3a:76:e0:7d:59:7f:e6:aa:cf:a3:15:13:8e:9d:a4:91:c7:
         67:fc:e8:e0:f3:d4:13:de:bd:8d:bc:03:51:ac:af:27:8e:b8:
         d0:38:2f:25:ae:e0:35:7f:ae:53:b2:52:24:93:6a:ee:b7:07:
         b5:8c:7a:ce:d3:f2:72:e8:b5:96:9f:a0:30:8c:92:f7:fd:0f:
         90:73:c4:c7:9a:63:8f:77:c5:1b:07:06:90:a3:df:cc:3e:a1:
         ae:b0:4d:d0:d1:75:b0:79:c8:ae:e4:cc:68:77:93:3a:3b:a7:
         ae:16:92:32:40:1f:2e:cc:15:34:02:cb:6b:a8:70:e6:f0:a9:
         de:4d:e4:58:ee:2b:63:42:b9:0c:4c:58:59:9b:dc:22:97:81:
         a1:c5:e1:ec:1d:ff:e7:4d:6d:5d:b0:57:65:01:37:9c:3a:5d:
         4d:72:92:ae:75:73:90:95:6e:40:42:91:c7:ca:d9:e0:1b:cd:
         ce:c8:71:3d:d1:05:56:eb:20:15:61:32:dc:98:5b:ce:ea:fc:
         bc:63:68:6d:a7:cf:62:2d:c1:a1:3e:fa:75:59:b3:9f:fe:2c:
         ce:cd:da:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:56:54 2025 by rpki-client