Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          A4YaDD7Jh0yflb490KQwK1IwG3dPtfM9vvBMqBOuzZU=
Subject key identifier:   C3:7D:84:A4:86:34:84:D6:48:46:C5:4D:11:77:B7:CE:30:65:E7:6D
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       03EE
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          03ED
Signing time:             Tue 16 Sep 2025 03:13:05 +0000
Manifest this update:     Tue 16 Sep 2025 03:13:04 +0000
Manifest next update:     Thu 18 Sep 2025 03:13:04 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: 0MrYhyTNMzo0RTipGgDAsV+0/34QnXeaYQ3+MKJ3ahY=)
                          2: B4A262BA97E111EDBE23EF7CF1222468.roa (hash: oz3acEqmAFW6Q64G1pO2mcOXINAlKbbqHe9mAvDeW6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 18 Sep 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1006 (0x3ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: Sep 16 03:13:04 2025 GMT
            Not After : Sep 18 03:13:04 2025 GMT
        Subject: CN=68c8d5c1-8058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:8b:df:c6:42:d0:8b:a5:97:75:a6:cf:dd:4a:
                    00:53:59:65:67:84:e6:8c:03:3f:c7:85:64:e0:b5:
                    17:23:56:f1:4d:96:42:64:f9:9e:b9:09:35:92:da:
                    6f:6d:11:c0:a7:61:25:cd:d6:da:5f:fd:00:28:36:
                    c9:cc:4d:94:08:e7:87:5c:e2:e5:38:f9:aa:5b:d3:
                    d5:3e:ea:94:18:88:66:53:27:48:dc:c5:d3:43:37:
                    1d:66:83:de:96:13:00:bc:66:c3:52:a4:a2:92:34:
                    26:2a:0d:a5:85:ee:8f:5f:7e:69:24:40:8b:4d:cc:
                    47:f8:af:19:42:2e:3f:ee:1c:e4:ce:b6:4e:6f:4e:
                    60:8c:20:1c:3e:42:79:1c:c6:ec:f3:44:48:a8:cb:
                    fb:b4:3a:39:c0:44:7a:d9:bf:fb:41:2c:de:d8:bf:
                    28:74:7d:f3:4b:5e:5a:9e:54:d4:30:97:2d:38:2e:
                    4d:d2:97:1f:e8:c1:78:ed:88:e3:d0:b9:4e:49:ed:
                    a7:a2:d3:2b:c3:04:1d:55:80:38:c8:39:77:07:6d:
                    99:33:5c:34:80:1d:12:12:0b:ed:ca:a1:55:16:7b:
                    35:7a:1e:31:91:e7:9f:46:ad:c3:df:c2:1d:f1:61:
                    55:d5:04:8c:08:ca:fd:5c:6c:6e:ba:31:d3:8f:8a:
                    7a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:7D:84:A4:86:34:84:D6:48:46:C5:4D:11:77:B7:CE:30:65:E7:6D
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:bd:b2:0a:5e:8e:ab:19:0f:f6:ea:fa:09:61:8c:cd:81:32:
         ee:92:0c:ab:f2:8a:2d:67:1d:b1:66:8b:47:f0:71:28:0e:59:
         3d:b8:e3:ac:45:07:47:df:c9:81:05:49:51:4f:34:42:fa:5d:
         23:20:01:82:31:87:4e:0d:0d:6a:60:55:58:81:6c:06:06:d2:
         03:fb:94:e3:73:1b:b5:dc:66:a8:69:47:d3:f4:d2:c2:1d:09:
         84:6f:d7:08:02:7a:88:ea:95:82:7e:2a:79:1b:69:68:7f:98:
         ea:a8:24:92:86:e8:73:39:b3:6e:74:81:73:7e:12:f4:15:3f:
         17:b3:80:25:56:9b:eb:8b:2a:62:8e:cc:5b:e3:62:6b:6c:80:
         17:44:30:a3:75:ac:ea:e8:ac:8d:7e:0b:51:81:c3:5a:96:1a:
         11:20:63:08:58:a4:0b:cb:af:5d:15:60:0a:3a:78:4a:8a:bd:
         75:d3:4c:a5:6d:5c:e9:42:0e:2a:bb:d5:95:13:9e:6c:81:f3:
         d4:40:89:cb:6a:97:1f:9e:74:4c:33:71:c4:2c:ee:79:38:c2:
         32:eb:53:b8:09:0e:c5:62:71:74:3a:b1:20:b8:e9:1f:4e:15:
         bd:24:42:ff:a3:ca:4c:53:34:48:2a:b9:20:86:27:a7:05:7b:
         23:c8:35:3e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA+4wDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
QkUyRURBUjExMC8GA1UEBRMoNjVEMjk1Q0Y1NDQ3OERGODVBRDY0QUVBOTA2NjhC
QzQxMTRGRDMzRTAeFw0yNTA5MTYwMzEzMDRaFw0yNTA5MTgwMzEzMDRaMBgxFjAU
BgNVBAMTDTY4YzhkNWMxLTgwNTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDui9/GQtCLpZd1ps/dSgBTWWVnhOaMAz/HhWTgtRcjVvFNlkJk+Z65CTWS
2m9tEcCnYSXN1tpf/QAoNsnMTZQI54dc4uU4+apb09U+6pQYiGZTJ0jcxdNDNx1m
g96WEwC8ZsNSpKKSNCYqDaWF7o9ffmkkQItNzEf4rxlCLj/uHOTOtk5vTmCMIBw+
QnkcxuzzREioy/u0OjnARHrZv/tBLN7Yvyh0ffNLXlqeVNQwly04Lk3Slx/owXjt
iOPQuU5J7aei0yvDBB1VgDjIOXcHbZkzXDSAHRISC+3KoVUWezV6HjGR559GrcPf
wh3xYVXVBIwIyv1cbG66MdOPinrZAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUw32E
pIY0hNZIRsVNEXe3zjBl520wHwYDVR0jBBgwFoAUZdKVz1RHjfha1krqkGaLxBFP
0z4wDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkJFMkVELzE5QTc4MjRDOTdERjExRURCOTU2NDVGM0YxMjIyNDY4L1pkS1Z6
MVJIamZoYTFrcnFrR2FMeEJGUDB6NC5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1pkS1Z6MVJIamZoYTFrcnFrR2FMeEJGUDB6NC5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2QkUyRUQvMTlBNzgyNEM5N0RGMTFFREI5NTY0NUYzRjEyMjI0
NjgvWmRLVnoxUkhqZmhhMWtycWtHYUx4QkZQMHo0Lm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkvbIKXo6rGQ/26voJYYzNgTLukgyr8oot
Zx2xZotH8HEoDlk9uOOsRQdH38mBBUlRTzRC+l0jIAGCMYdODQ1qYFVYgWwGBtID
+5Tjcxu13GaoaUfT9NLCHQmEb9cIAnqI6pWCfip5G2lof5jqqCSShuhzObNudIFz
fhL0FT8Xs4AlVpvriypijsxb42JrbIAXRDCjdazq6KyNfgtRgcNalhoRIGMIWKQL
y69dFWAKOnhKir1100ylbVzpQg4qu9WVE55sgfPUQInLapcfnnRMM3HELO55OMIy
61O4CQ7FYnF0OrEguOkfThW9JEL/o8pMUzRIKrkghienBXsjyDU+
-----END CERTIFICATE-----
Generated at Tue Sep 16 17:58:27 2025 by rpki-client