Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
File:                     zQg69dJxoPLdqw8VC-sAXzipRrE.mft (raw, json)
Hash identifier:          OPxKoMS3cwBKir6FOLXLSsvILbpPiqGqPC8nb7IOGHM=
Subject key identifier:   6A:EB:99:00:44:9C:E1:4B:B9:43:14:7D:B4:37:EF:FB:76:A2:8B:D2
Authority key identifier: CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1
Certificate issuer:       /CN=F36FF546AF/serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
Certificate serial:       08F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
Manifest number:          08F5
Signing time:             Thu 31 Jul 2025 01:35:52 +0000
Manifest this update:     Thu 31 Jul 2025 01:35:51 +0000
Manifest next update:     Sat 02 Aug 2025 01:35:51 +0000
Files and hashes:         1: zQg69dJxoPLdqw8VC-sAXzipRrE.crl (hash: 8hxCX7Cow0thc0xNxKG+Y98uvv9Q+jdAM6n5N6mWvVw=)
                          2: 1C0D37FA91F011E9AE72377FF8AEA228.roa (hash: 1FCw+Y3uXimIvmrFhMWwVuIRqYo1LXHBTvbNdEsq7eQ=)
                          3: FB654B0091EF11E99DA90E7FF8AEA228.roa (hash: nhD+pe2BQnxbsRGwyft8O4mm+dCir5b5n7iU0KS6i3g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 02 Aug 2025 00:08:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2295 (0x8f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FF546AF, serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
        Validity
            Not Before: Jul 31 01:35:51 2025 GMT
            Not After : Aug  2 01:35:51 2025 GMT
        Subject: CN=688ac878-631c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:50:05:59:e9:99:21:70:b9:2f:27:65:d4:f1:
                    b1:f9:a0:9f:1f:da:3e:6a:b9:35:92:58:19:f3:1f:
                    f7:b6:54:a5:17:b9:5f:a5:2e:eb:28:25:b9:7a:7a:
                    a2:36:2e:f4:fd:d9:c8:2b:7a:48:45:d8:e8:7e:05:
                    e9:ae:e1:87:a3:16:07:be:f2:e7:81:25:a5:8a:f1:
                    fd:60:2c:7c:d0:9c:d1:68:81:05:ee:45:df:a5:f4:
                    f2:21:50:e3:9c:2e:d0:49:2a:27:00:7a:c3:38:a4:
                    0e:07:42:18:20:35:e0:86:53:59:6f:6d:cc:da:c0:
                    0a:e8:81:b1:b2:1d:af:4e:7f:9b:8e:54:f8:25:f9:
                    c6:d3:29:b2:38:0d:e9:23:fe:e3:10:68:06:8d:94:
                    a3:3b:e3:23:fa:d4:f9:45:22:fe:18:d0:94:77:3e:
                    b0:a8:eb:2d:5f:26:a9:4c:5b:c3:a7:d0:d8:aa:97:
                    26:d6:6a:39:0d:4a:b7:8d:fe:ee:3f:2d:9e:e0:bb:
                    74:d6:0d:03:48:00:3a:e2:49:14:8a:67:a4:cb:04:
                    bc:8d:88:93:6a:5f:bc:ba:c2:a1:33:52:97:d4:8f:
                    b6:36:9f:8c:99:ec:10:bd:e5:c5:cc:03:60:c7:24:
                    59:3b:54:b2:f2:f3:d4:c5:d1:e6:d7:68:17:8c:a5:
                    1c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:EB:99:00:44:9C:E1:4B:B9:43:14:7D:B4:37:EF:FB:76:A2:8B:D2
            X509v3 Authority Key Identifier:
                keyid:CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6d:cb:b9:ef:0a:df:26:ee:d5:77:0b:1d:42:c5:65:01:b7:
         77:38:c7:89:33:0e:6f:34:a5:9c:72:51:89:7f:c3:8f:bb:1f:
         e4:14:ba:b9:d4:c7:77:9c:f7:c8:ef:18:a1:1d:7c:3d:e0:05:
         ff:8b:ad:31:05:32:c2:9d:82:48:73:97:d5:a0:65:a7:ad:32:
         51:66:01:08:86:e9:4c:d8:7f:11:6a:d6:48:ef:d9:b1:8a:df:
         79:9d:b8:c9:86:f3:d8:59:c3:8e:d1:81:ce:10:aa:c3:7c:83:
         c2:ad:a8:29:01:34:f2:b0:2f:c1:28:46:2b:df:10:d0:58:c0:
         c7:62:6d:c2:e9:07:56:b7:34:3f:2a:38:19:d9:df:b9:cc:89:
         c8:61:ac:e8:5c:4c:49:3c:2d:44:ac:01:14:60:ca:02:a5:af:
         5c:cc:23:e3:f7:23:22:46:e8:11:a3:4b:8b:05:6f:70:f8:4a:
         a6:57:ee:df:b5:43:e1:fb:0e:06:c4:73:8b:52:67:f9:ce:a4:
         ff:49:f3:68:d4:77:23:59:dd:ae:d4:f6:f8:53:ef:b7:7d:bb:
         5e:f4:2a:0d:02:4e:bd:40:6b:bc:87:16:43:d7:ea:3f:a5:2a:
         4c:ae:48:7c:9b:0a:de:e1:01:d8:80:16:5b:6d:40:72:b9:b8:
         b7:1e:03:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 10:01:21 2025 by rpki-client