Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
File:                     ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft (raw, json)
Hash identifier:          8qha+bIRAiSDwvRLHWC2IJBCJzzApjghzR1D2Mu2GoE=
Subject key identifier:   19:1A:74:19:FD:E3:E6:CD:C9:9D:B9:16:08:72:16:80:CE:0B:EA:A3
Authority key identifier: 64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52
Certificate issuer:       /CN=F36185D8AF/serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
Certificate serial:       0176
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
Manifest number:          0175
Signing time:             Wed 13 Aug 2025 04:48:53 +0000
Manifest this update:     Wed 13 Aug 2025 04:48:52 +0000
Manifest next update:     Fri 15 Aug 2025 04:48:52 +0000
Files and hashes:         1: ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl (hash: qRvd00Wa7soQKoxzA2IBfO0OFHxR8HdortZlfM4HYe8=)
                          2: 17AC05D05BD811EF91C62F65762E951A.roa (hash: pGO0PAidVvZBgK+RWqWHGbvgRG1IKwi6oTcbF8OQHYY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 15 Aug 2025 00:06:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 374 (0x176)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36185D8AF, serialNumber=64D4BC3EAD919AE8A467329510B5204185335C52
        Validity
            Not Before: Aug 13 04:48:52 2025 GMT
            Not After : Aug 15 04:48:52 2025 GMT
        Subject: CN=689c1935-6cd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7a:1a:e1:48:9c:27:22:90:30:44:92:13:eb:
                    c6:51:a4:27:e7:a6:db:5c:cc:f2:7c:e5:1e:7f:f0:
                    ac:be:7a:3a:63:2d:9a:e0:67:76:6a:5f:8c:5b:76:
                    e6:6b:0c:e1:9c:e6:d7:61:34:dc:2d:9f:7f:2d:77:
                    bb:c8:da:25:5c:17:4d:f9:15:a6:16:c3:8c:a9:3f:
                    16:cc:62:34:4f:e0:98:95:10:20:9b:ba:58:ef:05:
                    76:7c:88:7b:9c:fd:bd:79:02:1c:52:67:e7:ea:85:
                    b0:5c:e9:82:c8:62:84:3f:78:72:01:c0:e7:a9:a2:
                    e6:0e:ee:03:2f:dc:7a:b2:f7:11:ba:5d:13:6f:4a:
                    a6:c3:71:ac:3f:5a:4d:0d:00:7a:7e:33:77:7e:f7:
                    c4:9a:3e:d9:81:14:3f:6f:76:16:12:0e:8d:03:99:
                    68:ce:5b:a9:56:ee:c7:7b:01:95:4c:6f:2c:0b:20:
                    cf:25:86:92:9f:ed:29:81:7a:7c:b9:60:b9:9b:eb:
                    69:08:ae:ee:84:04:10:f0:26:b8:5d:8b:16:4b:0e:
                    cd:63:9c:36:2a:3a:94:38:7a:f2:e5:ce:c3:27:05:
                    e0:5c:ed:53:91:df:de:76:d8:d1:ba:a4:0a:07:ba:
                    60:7c:70:12:92:64:0c:a8:43:a0:31:11:11:f9:c5:
                    ea:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:1A:74:19:FD:E3:E6:CD:C9:9D:B9:16:08:72:16:80:CE:0B:EA:A3
            X509v3 Authority Key Identifier:
                keyid:64:D4:BC:3E:AD:91:9A:E8:A4:67:32:95:10:B5:20:41:85:33:5C:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZNS8Pq2RmuikZzKVELUgQYUzXFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36185D8/1C1348B45BD711EFAF2C3D5E762E951A/ZNS8Pq2RmuikZzKVELUgQYUzXFI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:bd:d6:05:02:50:0f:20:8f:4f:25:fa:31:d5:80:0f:13:8e:
         8f:e8:f8:95:97:6b:29:ad:64:fb:89:ab:7d:57:f5:ca:40:0d:
         b9:17:d8:a4:4a:dc:a4:74:e4:20:f4:e8:81:28:6a:a6:90:c7:
         f6:d4:fb:77:7a:e2:78:fc:a3:df:cf:6f:2d:85:ff:e8:85:a5:
         ef:2a:5b:6c:39:d0:d5:bb:89:32:67:0e:82:ea:dd:db:bf:34:
         26:25:b3:cc:3b:7d:31:ba:50:29:1f:d6:1a:db:66:36:77:66:
         35:7c:5f:17:51:bb:34:b5:94:f3:67:ef:e3:05:01:26:d0:98:
         bd:39:ce:4b:00:e2:e2:0d:b0:75:5e:d4:33:6d:8f:28:6b:78:
         61:6f:ac:41:39:c9:cc:cc:f1:fa:d3:f3:49:39:15:36:af:80:
         9e:25:73:4d:99:88:33:3f:da:73:96:41:8a:23:35:33:80:0e:
         99:40:c6:8a:f5:5a:0d:e0:db:bb:d8:9d:0f:d4:5f:c0:be:ed:
         15:3e:89:7a:99:cc:7a:23:57:6d:82:89:f3:8f:42:66:1b:f3:
         e7:18:f5:f8:7c:74:6f:6a:cf:34:c4:9e:2e:cf:94:22:d7:3f:
         60:31:db:d7:93:c4:44:5e:b5:8d:d7:03:32:1b:91:6d:ec:30:
         7f:37:c7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 07:37:01 2025 by rpki-client