Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          UZ5h3ZoZfIeNs1WEuvdIJEt/NKlznQ2yAImxeUrSEeY=
Subject key identifier:   2B:B4:1D:45:72:1B:2D:F0:80:A8:EC:8C:C7:7A:D8:31:8E:94:B2:2A
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       038A
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          0389
Signing time:             Mon 09 Jun 2025 03:27:15 +0000
Manifest this update:     Mon 09 Jun 2025 03:27:15 +0000
Manifest next update:     Wed 11 Jun 2025 03:27:15 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: 8Y5KVsH3WCknTRNLWlJq92ef8ufLIh7eLAdkY1Br/68=)
                          2: B4A262BA97E111EDBE23EF7CF1222468.roa (hash: oz3acEqmAFW6Q64G1pO2mcOXINAlKbbqHe9mAvDeW6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 11 Jun 2025 00:26:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 906 (0x38a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: Jun  9 03:27:15 2025 GMT
            Not After : Jun 11 03:27:15 2025 GMT
        Subject: CN=68465493-6fc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:03:50:c0:9f:3e:f3:fa:2c:70:dc:f8:8c:
                    22:cd:b7:ff:bc:d3:89:32:7e:bd:d5:56:58:5f:50:
                    96:e7:03:30:3e:f4:31:1f:1d:79:ee:82:c9:5d:02:
                    86:7a:09:02:0a:83:6c:4a:ea:1c:57:45:e9:d8:44:
                    20:f5:ef:cd:9b:54:71:6c:8e:e0:c1:a0:f7:e4:0f:
                    1f:7d:30:80:7e:6f:74:57:82:4c:bd:b3:fe:a1:00:
                    d3:c2:2d:f0:63:74:2d:81:36:28:75:99:a3:2d:b8:
                    8d:a1:2e:42:7b:91:84:0a:d6:3a:22:52:e7:31:86:
                    dc:73:e9:47:12:6c:61:d7:91:37:4f:42:98:02:b8:
                    9e:94:f3:5d:00:3a:f0:8a:27:87:89:2d:9c:6c:a0:
                    2b:fe:24:9c:3a:d9:9f:70:e8:10:2f:4c:b0:7f:cc:
                    d5:ea:26:8c:e0:da:7e:44:25:22:10:06:3d:d4:ed:
                    00:ae:b1:a4:e5:c6:1d:a3:ed:46:09:f0:3e:2a:18:
                    bd:93:d8:b8:76:6e:62:f6:5c:24:94:34:b8:cf:a9:
                    7f:d2:01:af:b5:e5:ee:7c:ad:64:55:e6:4d:4e:c9:
                    3c:b1:fd:04:2e:43:12:f7:e8:af:a1:b3:92:19:65:
                    c6:22:37:d2:d7:0c:45:66:9d:67:a6:3c:24:53:cf:
                    22:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B4:1D:45:72:1B:2D:F0:80:A8:EC:8C:C7:7A:D8:31:8E:94:B2:2A
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:82:51:01:0a:de:6a:55:5b:06:28:7b:64:03:ec:1c:26:17:
         c6:6c:f2:35:6f:d5:51:61:ed:6f:d6:55:ba:dd:2f:7f:f1:2b:
         6d:14:97:06:fd:b6:fe:21:83:5f:e6:4c:24:6b:c6:72:ee:12:
         b5:18:0c:3a:e1:6e:9a:e8:e6:15:ed:fa:e6:bb:fa:6c:17:a1:
         5a:ca:c0:51:ab:d8:55:91:b0:ed:77:04:ac:d6:b6:23:e0:cd:
         b0:bf:d4:56:65:31:69:a7:e4:b8:01:42:34:b1:ca:73:11:c4:
         ce:8f:86:65:b1:d0:a9:a8:53:08:6c:a5:9d:8a:96:3f:e8:d8:
         dd:1e:2f:56:0b:95:5f:a1:7d:6b:5b:1a:26:ab:7f:d5:45:03:
         bc:c7:45:0a:a3:83:f2:05:b2:f8:61:50:4f:ab:76:15:9e:24:
         ea:43:0d:48:70:98:15:06:fa:d9:84:f7:34:72:b4:5f:09:a7:
         55:7e:c8:01:a0:7b:2d:1c:81:be:32:e9:07:fe:cf:72:d3:ff:
         16:e8:0d:14:5e:94:b9:3c:55:36:b9:83:ff:0f:b4:c5:2f:67:
         f5:92:d6:3f:74:81:3d:9c:63:00:33:cc:94:da:b6:39:36:bf:
         23:4f:bb:67:e0:c3:84:5b:d2:b8:2b:1e:06:8f:9a:6f:f2:c5:
         40:57:9e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:28:01 2025 by rpki-client