Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
File:                     UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft (raw, json)
Hash identifier:          ilMyVNWvKr9WEaP0u21qKcbXEIRXvuvKJJzQgYNlJNM=
Subject key identifier:   67:12:38:66:A9:3B:CB:01:A3:D9:C0:A5:90:22:E5:CE:57:A9:FE:1E
Authority key identifier: 53:36:D9:13:1D:82:8C:81:67:1C:26:C7:83:86:90:BB:9F:CC:C9:8F
Certificate issuer:       /CN=F36B09DCAF/serialNumber=5336D9131D828C81671C26C7838690BB9FCCC98F
Certificate serial:       03B8
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
Manifest number:          03B7
Signing time:             Wed 17 Sep 2025 03:19:24 +0000
Manifest this update:     Wed 17 Sep 2025 03:19:23 +0000
Manifest next update:     Fri 19 Sep 2025 03:19:23 +0000
Files and hashes:         1: UzbZEx2CjIFnHCbHg4aQu5_MyY8.crl (hash: h+8ijVB7SaZYBKOs3UV6jO+jzGWhzpzkf49a2Iols74=)
                          2: E8BD056CBE7611EDA48E6C9AF1222468.roa (hash: 3G5RKkTxRd00ttqtYAIBvcE2h9XaoJ7ML38raK/0k9M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
                          rsync://rpki.afrinic.net/repository/afrinic/UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 03:19:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 952 (0x3b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B09DCAF, serialNumber=5336D9131D828C81671C26C7838690BB9FCCC98F
        Validity
            Not Before: Sep 17 03:19:23 2025 GMT
            Not After : Sep 19 03:19:23 2025 GMT
        Subject: CN=68ca28bc-fe0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:e8:d1:95:29:04:42:d3:58:9a:66:9b:2c:94:
                    e1:c8:6c:4d:b9:19:9b:33:40:e0:db:95:43:09:a2:
                    44:93:2a:ae:67:b9:47:97:8e:60:ec:01:48:5f:e5:
                    34:2f:60:85:1c:79:c4:90:24:cd:54:06:96:f4:c0:
                    8f:cb:09:cb:01:36:3a:c2:92:e4:8a:78:6b:db:ef:
                    f0:2b:54:7e:38:92:a2:27:a2:4c:82:56:4d:42:c5:
                    8a:a1:40:c4:d6:ee:e4:43:dc:6d:b0:17:62:94:4a:
                    90:28:cc:a6:2f:46:0f:38:f5:da:71:a7:a8:db:d3:
                    e8:c3:1a:8f:4a:06:4f:cf:d7:64:d8:34:42:3f:20:
                    94:27:56:4f:b2:ca:a2:47:e9:06:45:57:e2:58:bd:
                    30:34:6d:79:c0:9e:f8:04:cd:0e:43:a5:bc:db:3a:
                    05:ba:3d:89:12:24:8b:ec:ab:df:47:e7:59:01:18:
                    52:aa:bf:dc:13:c2:8a:1d:8f:85:28:7b:c3:5d:23:
                    85:77:91:7f:71:f4:1a:c2:ab:d8:05:92:82:a6:b9:
                    f5:be:cb:28:cc:6e:01:81:8d:12:8c:54:4a:5d:a6:
                    7e:21:f3:bc:e6:a5:26:bb:64:5c:1c:05:4c:7d:09:
                    7d:14:51:30:28:11:2d:3b:c7:81:b1:91:cb:6b:2d:
                    57:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:12:38:66:A9:3B:CB:01:A3:D9:C0:A5:90:22:E5:CE:57:A9:FE:1E
            X509v3 Authority Key Identifier:
                keyid:53:36:D9:13:1D:82:8C:81:67:1C:26:C7:83:86:90:BB:9F:CC:C9:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/UzbZEx2CjIFnHCbHg4aQu5_MyY8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B09DC/37BEF19EBE7611EDB6B06898F1222468/UzbZEx2CjIFnHCbHg4aQu5_MyY8.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:08:8e:03:9d:0f:48:77:20:a1:30:a4:44:14:e2:c1:01:63:
         bb:ed:83:28:ed:5e:67:8d:25:6c:89:1f:e9:67:2e:cb:ad:73:
         df:f4:d2:bf:40:8f:df:2c:3d:72:c0:c2:ea:66:e0:d9:b0:05:
         9e:3b:63:a1:8f:1e:8c:d4:1f:31:0c:d3:f5:a3:f2:46:6a:59:
         f5:67:d7:0a:2d:f9:5a:09:eb:c1:20:be:49:3e:83:9d:b6:d8:
         27:a6:f2:cc:70:1f:d8:26:f0:18:5f:8b:59:e9:f6:7e:f9:af:
         0c:ae:cc:2f:5b:e7:37:e6:10:1e:e2:50:46:5b:ce:ad:ee:7c:
         a2:59:17:f6:8d:fe:54:33:89:46:51:e1:60:74:52:b3:94:68:
         f8:19:6f:95:89:3e:91:e3:50:8f:fc:cb:72:4c:b4:81:cc:e0:
         93:34:89:3e:3a:0a:77:2f:55:fe:7d:ac:1f:57:78:3c:57:b5:
         e9:5b:2d:10:c0:b4:09:4c:58:90:7b:b7:45:96:5b:99:71:e9:
         b8:c4:c4:66:ed:1e:4f:34:1c:ce:a2:99:e4:f4:3a:60:af:d3:
         8d:c2:2e:2b:9b:b4:de:e6:dc:e7:79:4a:96:56:c8:ee:f4:77:
         90:45:bc:ee:db:a8:a7:87:dc:3c:7e:be:0e:8b:c9:16:2d:17:
         85:2c:a5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:32:28 2025 by rpki-client