Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          GgQx4lKZHWn7HDAos/97qqnOpM/Gg3x5CDpwnClqTZc=
Subject key identifier:   FF:66:8B:D4:91:03:21:C8:7D:32:20:11:38:75:2C:0B:C0:3A:BD:EA
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       03BF
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          03BE
Signing time:             Thu 31 Jul 2025 03:31:03 +0000
Manifest this update:     Thu 31 Jul 2025 03:31:02 +0000
Manifest next update:     Sat 02 Aug 2025 03:31:02 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: YsDQW5rTxUBMACye+5OdVGhiWrmXmfU3Ns42U9n1zKE=)
                          2: B4A262BA97E111EDBE23EF7CF1222468.roa (hash: oz3acEqmAFW6Q64G1pO2mcOXINAlKbbqHe9mAvDeW6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:26:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 959 (0x3bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: Jul 31 03:31:02 2025 GMT
            Not After : Aug  2 03:31:02 2025 GMT
        Subject: CN=688ae377-8733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5d:c4:ac:4c:67:ad:32:52:5d:52:08:a8:a9:
                    dc:57:04:2d:20:43:b6:66:1c:47:26:94:35:ef:a1:
                    f9:83:aa:4f:be:f2:04:28:b6:af:cf:e7:43:12:31:
                    37:b6:1b:de:b0:33:2b:51:a5:f6:13:ad:24:14:49:
                    15:2f:8b:26:b0:27:c8:96:88:1e:3f:cf:e2:ec:9d:
                    b0:ae:cc:7e:8e:f9:e8:3c:5f:29:0e:71:d5:d5:ac:
                    d5:e4:70:5d:99:48:88:bf:db:9f:e5:ea:aa:30:20:
                    9a:e7:f9:ee:cc:64:54:d0:2d:8f:88:36:b4:2a:59:
                    c7:9c:1d:62:f7:82:f6:9f:82:48:00:ba:92:75:e6:
                    ab:28:7f:9e:77:ee:b0:e5:42:66:9c:de:c0:f0:62:
                    b4:32:eb:d7:ab:e8:b8:bf:1e:7d:c5:ad:0b:c4:f5:
                    8e:0d:da:31:37:e5:86:60:f7:99:c3:dc:92:a1:fe:
                    5e:84:e9:1c:29:63:f4:31:cd:a2:88:cd:76:f5:04:
                    9e:70:09:21:4a:e6:77:52:6a:cf:3c:5f:b0:6e:80:
                    a4:b4:e9:b9:8a:fb:ba:fd:b8:46:cc:52:98:a9:56:
                    be:b9:33:4a:7f:db:d8:b9:bc:c0:0f:9c:68:8f:50:
                    02:5d:68:a4:de:5a:90:af:45:38:bc:c4:5f:5d:9b:
                    e7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:66:8B:D4:91:03:21:C8:7D:32:20:11:38:75:2C:0B:C0:3A:BD:EA
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:58:62:8d:ac:83:f5:e4:92:89:6d:02:99:16:c1:9d:a3:0c:
         0c:72:77:7c:b8:8e:1a:d7:d6:29:d5:36:33:82:fb:fe:26:3e:
         38:4e:c6:11:8a:b1:36:2b:b4:85:14:35:00:03:fc:5a:91:53:
         cf:24:46:6e:c4:b3:0d:4e:cb:3c:cd:7c:c3:c1:4e:e9:22:53:
         a4:e6:70:ca:75:9d:15:e6:70:3d:f6:a4:e2:eb:7c:c6:d7:33:
         35:6c:fa:63:9a:66:24:eb:19:10:88:38:d7:ae:3a:b1:35:76:
         db:e5:63:e7:2a:0f:68:98:38:87:49:1d:53:50:71:87:04:22:
         ba:63:06:7a:68:df:be:12:5e:a9:a0:4f:f7:ca:ce:2f:eb:d0:
         f0:50:fb:28:ad:77:50:e1:09:69:f3:0e:a5:b3:4a:da:ce:b5:
         dd:27:46:7d:79:64:d0:22:c3:d0:45:82:02:e4:dc:41:bc:e4:
         27:c9:df:d3:be:e0:ed:9f:61:b7:8f:02:c1:05:1b:de:1f:c7:
         98:83:98:e1:12:44:ad:91:79:ad:51:b4:1b:9e:e7:aa:83:e7:
         ae:b8:c7:6c:d5:ac:9e:db:32:ee:df:8e:f9:0c:a3:56:2c:1c:
         b1:60:59:23:ac:05:f3:bb:4f:4e:c4:b6:84:fa:70:d8:57:68:
         6a:9d:7a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 13:13:53 2025 by rpki-client