Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
File:                     ZsmzRf1S4DCcordufO0LUGyNAZs.mft (raw, json)
Hash identifier:          kGORAqiKC3u1KUWgRgdGjDlyh0PdHpxRc0suiyv0Kb8=
Subject key identifier:   9D:FF:5B:C8:48:68:97:00:BE:63:C0:93:4A:74:E0:A7:EC:2C:89:9E
Authority key identifier: 66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B
Certificate issuer:       /CN=F36A2F84AF/serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
Certificate serial:       0611
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
Manifest number:          0611
Signing time:             Thu 18 Sep 2025 02:18:16 +0000
Manifest this update:     Thu 18 Sep 2025 02:18:15 +0000
Manifest next update:     Sat 20 Sep 2025 02:18:15 +0000
Files and hashes:         1: ZsmzRf1S4DCcordufO0LUGyNAZs.crl (hash: eWDg+wg1Wg+qQ/gio96X3rYVpKy68EfGW+RuUAdztqU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 20 Sep 2025 00:06:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1553 (0x611)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AF, serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
        Validity
            Not Before: Sep 18 02:18:15 2025 GMT
            Not After : Sep 20 02:18:15 2025 GMT
        Subject: CN=68cb6be8-d099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:6e:e1:1b:83:17:9e:1c:f8:fa:da:f1:a4:d8:
                    b9:9d:4d:e8:7d:68:46:ed:7c:13:e0:39:3d:63:96:
                    84:dc:fb:6b:dd:65:01:81:67:82:f1:ae:bb:96:79:
                    44:75:9b:c4:5e:28:80:ed:76:72:d4:6b:65:de:27:
                    99:f7:20:12:1c:b2:74:e7:59:60:58:07:6f:ce:61:
                    72:32:19:56:b2:70:52:8f:27:0a:35:ba:9c:89:c8:
                    89:70:d7:9a:5b:ab:02:01:29:d8:57:bc:d1:5d:11:
                    74:6f:0b:40:92:b0:29:f6:51:c0:fe:01:79:53:29:
                    e3:8b:af:56:f1:14:e6:3b:04:9b:a5:75:e4:14:ac:
                    d5:22:44:af:50:6c:b0:fc:5b:79:28:22:aa:0e:6d:
                    1c:d0:52:ca:34:43:07:f5:24:f3:b3:0b:2d:cb:d5:
                    b3:cf:c1:9a:63:74:5c:e6:cf:ba:94:04:d8:17:47:
                    f9:92:0b:8e:e3:02:6b:2a:2e:ce:f5:b6:c9:ba:25:
                    8e:7f:59:15:d0:f7:78:e2:fb:86:a6:54:c6:0a:95:
                    97:13:cd:4c:50:51:18:c8:67:9a:9a:7b:e0:29:ba:
                    54:0f:c5:6d:bd:e2:cb:96:a7:70:6c:4b:f1:a2:eb:
                    b0:1e:f8:4c:0f:2c:ce:c7:96:af:c0:a2:8d:f3:50:
                    fd:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:FF:5B:C8:48:68:97:00:BE:63:C0:93:4A:74:E0:A7:EC:2C:89:9E
            X509v3 Authority Key Identifier:
                keyid:66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:5d:0b:c5:0d:ec:98:d4:d6:6a:f5:55:7b:1b:67:d1:d0:8c:
         78:a9:f8:1f:91:ff:a6:b6:bd:a1:41:97:0c:4e:b6:bb:34:b4:
         b8:5a:37:58:03:d7:71:16:c0:18:f6:05:d5:a5:01:7c:34:63:
         af:01:c8:7f:82:9c:74:a9:62:29:c0:d7:09:00:4b:75:c1:49:
         7d:84:0f:98:de:22:71:30:02:d3:15:c9:cd:55:49:90:b2:c0:
         ed:ee:2c:e4:80:72:de:17:78:c1:76:26:c0:fb:8a:4a:48:17:
         55:d1:8d:87:ef:54:c8:88:6a:33:5f:09:bb:8d:40:89:bd:a8:
         a2:89:d9:5a:0a:fc:f3:2c:b9:5c:a1:f8:3d:fb:e2:3b:18:16:
         ed:97:69:a8:54:f7:56:2e:1e:c6:d6:56:6e:0a:cc:a7:96:28:
         aa:07:49:37:05:94:2a:7a:62:7c:d8:02:c1:68:a8:d4:0f:97:
         a0:1c:b2:d7:a5:e8:20:23:52:05:1b:0d:fe:46:1c:e8:b8:fa:
         8c:d6:b4:91:63:77:9e:53:04:dc:52:cc:01:d3:fc:a5:cf:53:
         fb:25:9b:71:e8:55:e1:d9:3c:ff:bb:9a:9c:5b:f6:a2:9b:33:
         a3:f7:c8:6c:bb:b5:5e:1f:64:b0:0e:32:09:58:4e:45:ea:6e:
         4f:f8:87:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 23:38:25 2025 by rpki-client