Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
File:                     zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft (raw, json)
Hash identifier:          7X2UmDCxIwUccQwc61qTGMaLvbsdjzC82C6G+B4eCTI=
Subject key identifier:   98:41:65:9A:A5:D9:E1:E8:C7:11:D9:D9:78:39:02:9B:01:A5:CB:FC
Authority key identifier: CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4
Certificate issuer:       /CN=F36C3DC5AF/serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
Certificate serial:       0705
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
Manifest number:          0704
Signing time:             Wed 17 Sep 2025 01:57:32 +0000
Manifest this update:     Wed 17 Sep 2025 01:57:32 +0000
Manifest next update:     Fri 19 Sep 2025 01:57:32 +0000
Files and hashes:         1: zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl (hash: k8x3Gso2ev46KhAjFVjv1dtBOwMiYbmKlTka4RI3gmQ=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 01:57:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1797 (0x705)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36C3DC5AF, serialNumber=CC2CDE04D3D4361E8444E2AE5E42F0EDF622DCE4
        Validity
            Not Before: Sep 17 01:57:32 2025 GMT
            Not After : Sep 19 01:57:32 2025 GMT
        Subject: CN=68ca158c-f734
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:7c:c3:43:6d:65:c3:6b:e2:0f:f0:e6:f7:f4:
                    13:43:ec:3d:6a:21:b0:bd:70:4c:59:f3:58:c0:87:
                    54:6a:07:f3:17:5d:a6:3f:24:75:a0:78:03:27:5d:
                    23:55:62:d1:ca:14:14:cb:6b:f7:ed:fc:7d:34:50:
                    bd:90:77:4e:6e:a9:36:2a:18:64:48:e4:87:23:43:
                    fa:66:5f:ac:5e:86:49:63:7b:42:44:9a:a2:e1:42:
                    66:51:91:e6:6a:d3:67:e2:a5:32:94:35:c8:bc:f5:
                    a0:74:f2:60:28:c2:82:24:00:49:64:6c:a5:a7:f8:
                    12:cb:9b:26:58:a7:ed:7d:36:9d:05:4f:5f:fc:e0:
                    cd:fd:7e:bd:6e:a4:f1:5d:da:88:0e:ac:d0:3d:01:
                    cc:56:96:4b:ea:5a:65:12:ea:d6:32:9e:e7:40:76:
                    75:44:ac:61:53:b2:59:da:75:38:6a:77:cb:54:8e:
                    c1:0f:1f:65:ba:86:b8:22:83:89:58:93:a4:e0:46:
                    74:c7:b1:0f:b7:ef:6e:83:b4:e4:ab:25:19:4a:f7:
                    f5:8d:97:ae:e8:d3:b5:00:1a:4a:ed:b6:fc:73:1b:
                    a0:24:90:44:90:b1:b8:9c:b0:6c:4d:4d:bf:36:29:
                    33:f9:ab:80:bc:24:51:45:d0:d6:e6:c7:a8:df:ea:
                    0b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:41:65:9A:A5:D9:E1:E8:C7:11:D9:D9:78:39:02:9B:01:A5:CB:FC
            X509v3 Authority Key Identifier:
                keyid:CC:2C:DE:04:D3:D4:36:1E:84:44:E2:AE:5E:42:F0:ED:F6:22:DC:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zCzeBNPUNh6EROKuXkLw7fYi3OQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C3DC5/711CB0F6355D11EBB53E0546F8AEA228/zCzeBNPUNh6EROKuXkLw7fYi3OQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f2:af:13:75:82:55:dd:fd:b7:7e:20:72:6c:fb:d1:3a:b0:
         f8:df:92:49:9d:ac:29:66:d6:f2:66:ae:a9:de:15:79:c9:1b:
         7f:93:36:71:ba:0f:a2:4a:31:98:9d:ec:3a:73:3e:45:04:44:
         4d:60:cc:6f:a8:64:57:e9:76:04:f3:c6:6a:60:82:cf:24:e0:
         71:51:73:37:d3:0e:65:b4:b2:48:bd:af:9b:b6:a7:9a:e1:34:
         b6:94:78:95:07:82:fc:fc:bc:83:a7:f8:c4:42:62:53:d3:d0:
         47:e2:81:10:56:17:9d:f6:92:d0:03:87:6f:97:55:8a:11:95:
         95:48:e8:bc:80:ec:46:f7:91:12:03:fa:17:1b:3b:00:20:11:
         9f:af:8d:87:3b:23:ed:b3:89:d2:40:b3:18:05:57:9f:8b:35:
         d5:85:fb:91:cf:c2:e6:19:e4:d4:c0:c0:a4:fa:86:f1:04:aa:
         fc:e8:3b:72:ec:a7:60:04:69:43:29:37:66:21:79:66:e5:22:
         bb:6d:ad:4a:de:26:b6:aa:a0:20:03:b7:56:73:32:5a:ec:da:
         63:d5:8b:c4:a4:22:22:65:9d:f3:04:93:4f:52:7d:f2:97:b8:
         84:2e:35:fa:df:c5:cc:4b:59:c2:96:03:70:6e:68:d2:4c:a7:
         95:02:dd:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:34:10 2025 by rpki-client