Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File:                     CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier:          i3xv6yz7nHQ8ijkRlEw20P+bo10JhH0y3eTRSeqofro=
Subject key identifier:   2B:D8:4C:EA:B7:FA:64:08:9A:FD:06:BF:B8:62:89:B2:2E:85:E6:F7
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer:       /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial:       059F
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number:          059D
Signing time:             Fri 11 Sep 2026 03:05:18 +0000
Manifest this update:     Fri 11 Sep 2026 03:05:17 +0000
Manifest next update:     Sun 13 Sep 2026 03:05:17 +0000
Files and hashes:         1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: VtA7JNGYjsHF5yjTees9piA5O0gFOYPxR5BL2ENnanM=)
                          2: BCF6CD8A898111F1BA6CBBF2CE1D38B0.roa (hash: tfhB01yuWYafBc5IT4B93AgcftDBa2JWDdbVJth+WqE=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 13 Sep 2026 03:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1439 (0x59f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA64DAF, serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
        Validity
            Not Before: Sep 11 03:05:17 2026 GMT
            Not After : Sep 13 03:05:17 2026 GMT
        Subject: CN=6aa36fee-6ca0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e2:88:fa:ad:1b:f0:56:82:29:3c:c4:b4:05:
                    10:88:76:9b:e7:5e:15:6e:66:75:52:cd:90:08:ce:
                    36:f6:1d:56:1d:92:22:b6:fa:62:04:70:27:5f:cc:
                    89:4d:35:df:d9:a1:45:83:a7:65:34:d8:77:76:e7:
                    f6:30:06:4e:d9:e5:9b:7e:5e:d8:8d:28:43:36:95:
                    fe:f6:07:70:95:84:44:74:64:b7:b8:ca:52:d2:54:
                    2e:4d:26:ba:52:e5:e7:9e:e6:0c:43:cc:a4:17:ef:
                    da:23:ae:e3:60:67:fa:30:c1:9e:f6:7b:cc:62:cb:
                    da:98:fd:c6:8d:2d:5f:e1:3e:6c:5f:12:fc:3a:31:
                    ae:ee:0c:9f:cf:9f:8c:f7:25:98:f7:9c:74:2b:30:
                    dc:ed:1f:d4:2a:ba:b9:e6:b8:9c:c4:6f:13:d3:85:
                    e2:fa:a5:9d:88:db:f3:d5:e3:10:28:d5:27:fe:21:
                    fd:e5:46:89:08:17:ac:82:be:50:dd:83:b6:df:00:
                    20:9f:4f:c4:26:cf:4e:3e:17:ab:85:23:c0:15:d6:
                    ea:60:bd:01:02:48:25:f3:d7:dc:c4:6f:87:be:41:
                    1b:db:11:2c:c1:96:c2:96:80:e9:cb:9f:a2:e4:f1:
                    cf:06:bd:80:25:ca:c3:2a:11:07:8f:e2:dc:17:0c:
                    fb:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:D8:4C:EA:B7:FA:64:08:9A:FD:06:BF:B8:62:89:B2:2E:85:E6:F7
            X509v3 Authority Key Identifier:
                keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:a7:d3:a7:65:13:45:e0:e3:ca:70:f6:af:21:5a:ba:00:c3:
         c0:af:e2:1d:af:87:7c:2e:37:b1:9a:97:62:7f:73:fe:7d:3e:
         b6:f4:0d:d3:3a:f5:1e:f6:7c:9f:30:e8:34:af:2f:d9:ca:9c:
         47:49:13:5b:73:81:32:03:26:47:50:23:94:01:46:c1:cf:9c:
         e6:3a:93:af:68:d7:c2:8a:ba:04:ae:79:98:85:56:e9:b4:e6:
         ec:f5:94:82:0d:cc:7e:05:c3:1d:07:8c:1d:a8:e6:a5:1f:f7:
         9d:1a:2a:4f:14:91:71:80:74:5c:d1:6c:93:7b:b0:f7:05:c0:
         a8:19:a5:8c:79:36:43:20:6c:d1:9e:c8:46:f1:d5:1c:d2:dc:
         5d:2c:f9:7d:ca:b6:d5:1c:38:99:b4:76:ca:b8:6f:1f:8b:ee:
         25:9b:cb:41:52:26:4b:4c:84:c4:65:21:1b:ed:df:49:d0:95:
         b2:f7:4a:5a:c3:3c:a6:ca:8d:e1:7f:61:fc:dc:1c:bd:6f:d0:
         31:42:06:eb:0d:d3:e5:68:e5:40:af:81:86:fe:ae:23:dd:f1:
         a2:d5:df:3c:ff:54:c1:5c:7e:6c:a2:05:e9:76:f9:56:0f:83:
         a9:4d:54:d9:2d:9a:e5:e4:cf:9e:2b:a5:37:a8:00:ca:64:89:
         d9:75:e1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----