Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
File:                     5zU0-ODMucOEExGNd_3qToCP6jE.mft (raw, json)
Hash identifier:          NZqhTcrMVlQ0BwCnf3UI1H4pzd053y1tzBXD9X/pWCY=
Subject key identifier:   8C:3F:22:06:9B:16:9C:1F:FE:99:35:6C:B4:AD:BA:8C:4C:BB:A4:9A
Authority key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
Certificate issuer:       /CN=F36F6034AR/serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
Certificate serial:       07AD
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
Manifest number:          07AC
Signing time:             Sun 27 Jul 2025 01:55:01 +0000
Manifest this update:     Sun 27 Jul 2025 01:55:00 +0000
Manifest next update:     Tue 29 Jul 2025 01:55:00 +0000
Files and hashes:         1: 5zU0-ODMucOEExGNd_3qToCP6jE.crl (hash: iLMTMwrdDE3NjRJ8vNRSGl/8xCNg4UPbgSMX+pkvNtI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                          rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 29 Jul 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1965 (0x7ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AR, serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
        Validity
            Not Before: Jul 27 01:55:00 2025 GMT
            Not After : Jul 29 01:55:00 2025 GMT
        Subject: CN=688586f5-f142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c0:5c:3a:31:f2:de:7d:d8:a9:ec:24:1c:14:
                    79:06:01:f0:07:9a:1c:66:18:3a:b5:7a:b7:b6:25:
                    a7:10:54:98:81:40:d0:1c:b1:7d:dd:90:f3:dc:bc:
                    0f:b3:08:9d:a5:28:44:4b:4a:94:2f:58:64:fc:f3:
                    a5:bf:25:b5:ae:97:08:f7:57:9f:9b:41:de:09:80:
                    23:e8:e7:be:b1:77:57:7c:2a:7f:d1:22:73:b8:9f:
                    3e:e5:05:50:19:69:a1:58:90:9a:49:cd:27:49:c5:
                    a7:df:04:39:02:92:57:25:12:5f:85:19:a5:00:6e:
                    60:08:4a:99:8b:62:9c:ae:75:a4:f2:08:d9:52:c7:
                    4e:6d:15:67:9f:9a:82:de:6f:ce:c9:a4:54:bc:82:
                    05:05:df:ee:6c:04:2b:f3:e3:c1:89:72:39:18:ee:
                    0d:8b:22:38:23:4e:18:7b:13:df:46:51:5c:cf:a4:
                    97:28:cb:63:d3:f6:0a:5b:c9:6b:32:31:f6:88:fc:
                    13:62:a4:bf:49:99:30:37:9c:8a:0a:e7:2f:78:ce:
                    48:88:5e:1a:b0:db:5b:b1:5b:dc:26:bc:03:f8:44:
                    25:40:ff:5b:4a:aa:4f:20:3b:e6:06:90:11:c9:59:
                    b9:63:72:42:16:72:42:f3:2b:b3:ba:4e:90:92:9a:
                    7a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:3F:22:06:9B:16:9C:1F:FE:99:35:6C:B4:AD:BA:8C:4C:BB:A4:9A
            X509v3 Authority Key Identifier:
                keyid:E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:28:1e:00:80:ab:6d:35:f2:f3:c4:d4:cb:af:9a:06:87:04:
         4e:2b:82:0b:c6:0b:7b:ac:78:7d:f7:16:e2:c1:29:84:81:80:
         41:8b:d6:0a:cb:9e:a2:44:a6:c9:c8:46:7c:27:72:bc:72:a8:
         d6:9f:04:46:37:e3:28:c2:09:e8:86:06:10:5d:aa:5c:c8:cf:
         ef:29:a9:21:8c:b9:86:30:07:33:cc:02:0e:54:8c:08:7c:21:
         fb:3a:f8:96:5c:be:ce:c8:2b:dc:25:5e:d4:73:c2:c6:b9:b2:
         4e:d4:d0:49:c7:21:e1:a7:fd:61:a8:cf:96:63:d7:ac:72:ff:
         8d:fd:26:bf:5c:0d:00:3c:de:6e:ec:d3:8d:7c:72:f3:fd:75:
         9f:2c:ff:c2:c0:49:93:6a:9d:41:58:9a:8b:c8:77:c4:2e:31:
         e6:03:af:15:f8:6b:20:bb:63:b5:48:89:7d:5f:05:35:fb:e1:
         38:84:40:36:a8:88:54:da:ed:c8:3f:cd:ed:33:6a:88:26:aa:
         c5:88:85:2b:71:34:47:01:f3:c7:c9:ed:60:8e:88:9c:16:71:
         ac:e9:b4:6d:ee:7a:10:0c:24:35:64:66:71:3f:0f:9d:03:b4:
         ca:61:04:2f:24:72:62:f4:a1:e2:df:d4:c3:12:1b:86:6d:0c:
         aa:e4:43:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:00:26 2025 by rpki-client