Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
File:                     gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft (raw, json)
Hash identifier:          6h+dO/jrWf9Ld+LaCd/t/JLLgw8OZPSB15El8lE1AO4=
Subject key identifier:   79:F6:37:90:C2:4E:7B:7E:39:0C:C4:BF:8E:0B:A6:0A:67:A2:1E:D8
Authority key identifier: 81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10
Certificate issuer:       /CN=F36BE2EDRI/serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
Certificate serial:       0417
Authority info access:    rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
Manifest number:          0415
Signing time:             Sat 25 Oct 2025 03:15:58 +0000
Manifest this update:     Sat 25 Oct 2025 03:15:57 +0000
Manifest next update:     Mon 27 Oct 2025 03:15:57 +0000
Files and hashes:         1: gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl (hash: hHwalqv2ar2GW7lmfK5URXjbB/NW0zXNI9Jxnc+aVVM=)
                          2: B808257A97E111ED9E450A7DF1222468.roa (hash: cAtOc/GhRwVJqkbF1v2sZelm06tLlTbFvHsrx/k9FKo=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
                          rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.crl
                          rsync://rpki.afrinic.net/repository/ripe/f3rBgIl5g-Kek3wKGHgDwHJ1VUU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/ripe-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 27 Oct 2025 03:15:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1047 (0x417)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDRI, serialNumber=81067BA09AC67344F02CD4E64B6BF5E4CD73B810
        Validity
            Not Before: Oct 25 03:15:57 2025 GMT
            Not After : Oct 27 03:15:57 2025 GMT
        Subject: CN=68fc40ee-3e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:49:de:f1:8c:32:9d:cb:10:96:6b:0c:41:ce:
                    38:53:9e:21:be:20:36:31:16:bb:7f:76:89:ca:26:
                    5b:15:c9:08:12:c3:53:84:da:17:1b:cc:0b:cb:54:
                    6b:aa:52:36:0a:87:99:da:40:49:80:fc:2b:06:6f:
                    58:ee:1f:b4:2d:76:a1:8b:dc:80:07:33:6a:ea:e4:
                    5f:58:d0:1a:83:5c:5d:17:46:1a:bb:db:a5:1d:da:
                    21:cb:a5:79:7c:07:a3:de:37:cb:30:c8:4e:0f:e8:
                    43:4a:ca:9a:8c:77:62:bc:3a:02:e8:8c:6d:99:3a:
                    48:96:dd:77:f4:d7:2d:69:f9:ee:1c:41:b5:b9:3c:
                    b1:94:66:7b:30:7e:c8:36:83:8a:38:48:58:f1:eb:
                    d3:9d:b0:03:d0:d8:51:88:80:82:05:10:6a:b2:4f:
                    cc:fc:1d:bd:a7:c5:81:c1:b3:38:b7:5f:e3:e0:7b:
                    d5:ba:a4:a9:4e:97:ba:9c:52:2c:7a:5c:3c:f8:4a:
                    ae:1f:d1:d1:10:35:e8:82:4d:99:d1:3a:9d:87:76:
                    62:ce:25:20:5a:76:38:07:42:ed:7f:a0:e8:17:2d:
                    8d:15:ec:d1:93:3c:ad:7c:e6:bd:f9:cf:0e:b8:ef:
                    6f:42:e0:0a:8c:53:f4:35:a0:74:d5:8c:40:26:d7:
                    7c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:F6:37:90:C2:4E:7B:7E:39:0C:C4:BF:8E:0B:A6:0A:67:A2:1E:D8
            X509v3 Authority Key Identifier:
                keyid:81:06:7B:A0:9A:C6:73:44:F0:2C:D4:E6:4B:6B:F5:E4:CD:73:B8:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/ripe/gQZ7oJrGc0TwLNTmS2v15M1zuBA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/06324CD897DF11EDA719F9F2F1222468/gQZ7oJrGc0TwLNTmS2v15M1zuBA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:c6:ca:11:66:cf:a8:7e:d9:d3:dd:c8:9f:9a:1a:e6:07:74:
         5e:84:42:9d:89:a3:d4:e7:86:e5:bd:d8:d7:2d:29:7a:83:93:
         40:0d:ef:75:5a:76:33:65:25:d1:d2:07:89:07:78:16:b9:0c:
         a7:0a:93:57:70:b8:30:6c:6b:66:cc:61:a4:a1:11:7e:40:94:
         00:05:61:4c:97:15:0d:1f:25:b5:b3:35:ee:78:c6:38:19:a8:
         45:89:29:46:e9:e1:4f:b0:81:6a:21:b6:ce:9d:72:67:6c:74:
         d6:60:a9:ab:0e:1f:60:71:78:c7:f6:2a:1b:c1:20:ed:82:e3:
         4e:4a:96:58:db:5e:57:20:8d:35:2e:bf:3e:cc:fa:b5:69:8c:
         c7:7e:00:c9:bc:ac:49:65:28:5e:16:a7:df:93:01:51:a6:db:
         90:91:03:1c:09:17:49:fb:d3:b8:fc:de:cf:dc:6a:76:35:73:
         c6:3a:28:75:5f:4a:b7:37:c8:a3:4f:73:6a:71:5f:40:db:91:
         3a:9c:ec:39:0f:7d:f8:05:b7:9e:d3:d8:73:26:27:19:53:65:
         45:2f:c6:44:83:81:e0:06:a9:d8:be:ba:26:a7:64:9f:18:85:
         11:00:24:56:c0:5e:1b:9e:25:d9:6d:9e:9e:3c:a4:ad:bb:48:
         06:60:26:37
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICBBcwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkUyRURSSTExMC8GA1UEBRMoODEwNjdCQTA5QUM2NzM0NEYwMkNENEU2NEI2QkY1
RTRDRDczQjgxMDAeFw0yNTEwMjUwMzE1NTdaFw0yNTEwMjcwMzE1NTdaMBgxFjAU
BgNVBAMTDTY4ZmM0MGVlLTNlMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCiSd7xjDKdyxCWawxBzjhTniG+IDYxFrt/donKJlsVyQgSw1OE2hcbzAvL
VGuqUjYKh5naQEmA/CsGb1juH7QtdqGL3IAHM2rq5F9Y0BqDXF0XRhq726Ud2iHL
pXl8B6PeN8swyE4P6ENKypqMd2K8OgLojG2ZOkiW3Xf01y1p+e4cQbW5PLGUZnsw
fsg2g4o4SFjx69OdsAPQ2FGIgIIFEGqyT8z8Hb2nxYHBszi3X+Pge9W6pKlOl7qc
Uix6XDz4Sq4f0dEQNeiCTZnROp2HdmLOJSBadjgHQu1/oOgXLY0V7NGTPK185r35
zw64729C4AqMU/Q1oHTVjEAm13x1AgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUefY3
kMJOe345DMS/jgumCmeiHtgwHwYDVR0jBBgwFoAUgQZ7oJrGc0TwLNTmS2v15M1z
uBAwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJFMkVELzA2MzI0Q0Q4OTdERjExRURBNzE5RjlGMkYxMjIyNDY4L2dRWjdv
SnJHYzBUd0xOVG1TMnYxNU0xenVCQS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9yaXBl
L2dRWjdvSnJHYzBUd0xOVG1TMnYxNU0xenVCQS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QkUyRUQvMDYzMjRDRDg5N0RGMTFFREE3MTlGOUYyRjEyMjI0
NjgvZ1FaN29KckdjMFR3TE5UbVMydjE1TTF6dUJBLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAUxsoRZs+oftnT3cifmhrmB3RehEKdiaPU
54blvdjXLSl6g5NADe91WnYzZSXR0geJB3gWuQynCpNXcLgwbGtmzGGkoRF+QJQA
BWFMlxUNHyW1szXueMY4GahFiSlG6eFPsIFqIbbOnXJnbHTWYKmrDh9gcXjH9iob
wSDtguNOSpZY215XII01Lr8+zPq1aYzHfgDJvKxJZSheFqffkwFRptuQkQMcCRdJ
+9O4/N7P3Gp2NXPGOih1X0q3N8ijT3NqcV9A25E6nOw5D334Bbee09hzJicZU2VF
L8ZEg4HgBqnYvromp2SfGIURACRWwF4bniXZbZ6ePKStu0gGYCY3
-----END CERTIFICATE-----
Generated at Sun Oct 26 04:32:22 2025 by rpki-client