
Manifest
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
File:                     ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft (raw, json)
Hash identifier:          8Zf5cQAwSN3npWdbjdamSdD1xMOe0L5tTZdqlhODwx4=
Subject key identifier:   5A:8C:33:43:56:22:05:9A:F9:73:CE:9A:1A:1B:CB:35:96:51:BA:07
Authority key identifier: 66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
Certificate issuer:       /CN=F36F0133AF/serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
Certificate serial:       050D
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
Manifest number:          0509
Signing time:             Mon 03 Nov 2025 04:00:34 +0000
Manifest this update:     Mon 03 Nov 2025 04:00:33 +0000
Manifest next update:     Wed 05 Nov 2025 04:00:33 +0000
Files and hashes:         1: ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl (hash: XNuzKotgs2Ws63iqv/5HySVcFLdSVXjU1WycU/AQ7nk=)
                          2: 11DE32301E1411ED808237BFF1222468.roa (hash: NDT1h64rAQtrp6e2jKIP2YrQyHRxP3obuZwk00lVG5U=)
                          3: 96A4F4DEFEB811ECB3B04193F1222468.roa (hash: dXffBOIADnB6vcBqHdBgKn+PoHhJBXX1h5d7ynWjslA=)
                          4: 5B2913E4E58711EC8ACE468AF1222468.roa (hash: DANu8DftskvVS8pcKPFbr/Os5e58xaDS744iEI9GtyU=)
                          5: 30F10DE8E58711EC8063C589F1222468.roa (hash: +rQwU7TQy17yNmDHtTVmWx8w2ycBOC8pNIbjkpo+1q0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 05 Nov 2025 04:00:32 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1293 (0x50d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F0133AF, serialNumber=6630C7840846F2F6909754F1341466CDAFEA2FD4
        Validity
            Not Before: Nov  3 04:00:33 2025 GMT
            Not After : Nov  5 04:00:33 2025 GMT
        Subject: CN=690828e2-5552
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:36:e0:bc:fe:25:44:af:04:b9:ff:83:b8:c7:
                    ec:26:9e:1f:76:61:50:a3:44:ac:5b:4c:83:43:92:
                    4e:85:a8:ac:77:b1:cd:eb:cc:be:2c:f7:ac:b1:6a:
                    8e:df:51:ab:36:49:25:67:ec:d4:33:02:d5:51:9e:
                    3b:0e:d5:6b:11:cb:7e:80:29:d8:d0:57:2d:53:08:
                    ae:80:fb:24:83:1d:2d:c3:ad:fa:1d:05:08:0e:0a:
                    32:e8:e4:f1:64:40:a6:a2:16:b9:4f:21:53:17:5d:
                    53:31:19:d3:00:22:75:3f:90:c0:36:2d:fa:58:60:
                    da:a4:7c:4e:a7:e4:26:3e:bc:63:58:b5:e7:63:c2:
                    a7:d1:0f:7f:4d:23:37:b6:cd:aa:c4:cd:13:e2:74:
                    ec:95:d0:ac:2f:59:fa:3c:bf:9e:dd:a9:c1:15:07:
                    c7:8c:a4:19:d9:fb:93:88:c2:cd:58:81:98:f6:04:
                    8d:b4:7b:69:19:d3:36:54:3e:70:dc:37:b9:3f:7b:
                    4d:b6:19:92:2c:4d:74:d8:de:c3:65:af:5b:15:f5:
                    fe:e5:47:50:84:62:51:d9:e4:7e:0a:cc:f1:e9:f8:
                    81:a8:09:8b:af:fc:9d:e9:d6:f7:0b:cf:9c:9b:65:
                    57:cf:2c:73:94:ac:a3:27:b7:0a:69:c0:53:be:e7:
                    99:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:8C:33:43:56:22:05:9A:F9:73:CE:9A:1A:1B:CB:35:96:51:BA:07
            X509v3 Authority Key Identifier:
                keyid:66:30:C7:84:08:46:F2:F6:90:97:54:F1:34:14:66:CD:AF:EA:2F:D4
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.crl
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.cer
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf
            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F0133/5041A708E58611ECAFC22A87F1222468/ZjDHhAhG8vaQl1TxNBRmza_qL9Q.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
    Signature Algorithm: sha256WithRSAEncryption
         93:30:4b:1d:e4:c1:c2:15:48:45:36:85:01:47:59:92:6b:11:
         2c:d2:1d:e5:6a:d8:67:3b:7c:17:ee:8c:95:1f:84:83:b6:fb:
         b9:1a:bf:6d:67:ed:e2:08:00:f6:2a:26:26:6d:ea:15:fa:cd:
         2e:8e:e1:d0:8a:dc:06:69:82:75:ec:9e:5c:5d:e9:0d:9b:c8:
         58:e0:79:ab:f9:c7:dd:c9:18:17:25:b7:60:ac:ad:29:f7:d9:
         61:95:d4:b6:da:b7:bd:fc:ca:c6:70:ae:04:9a:d8:bd:f2:aa:
         9f:99:ad:a9:78:66:96:be:2c:39:70:ab:e9:2c:1d:52:e5:34:
         06:ee:c6:14:2c:12:5c:db:60:c9:49:be:33:1b:fa:d8:21:9e:
         b8:b0:66:ea:df:3e:0a:fd:66:f6:c3:e6:50:0d:f1:b1:fb:f7:
         31:80:cd:8d:7d:73:4a:19:34:db:af:66:02:e9:96:07:57:09:
         9a:0f:92:8b:57:b0:7d:c0:48:3b:bb:62:81:02:2a:0f:79:40:
         4c:e1:53:0c:57:47:8a:14:be:88:e2:1a:50:e2:03:1f:49:e2:
         57:ad:99:76:98:39:82:8e:ad:92:7a:c6:3c:34:1b:53:15:3e:
         a7:e0:be:b6:03:91:e9:1f:d0:6a:1b:e9:11:9e:49:9a:f6:a3:
         74:82:d7:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 04:04:25 2025 by rpki-client