Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
File:                     ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft (raw, json)
Hash identifier:          jryWn/TDXGV6MCHz9leequtlKIr3X9XWLAltqGcmUZw=
Subject key identifier:   F7:6A:0D:B8:2B:55:4D:3F:13:9D:E5:F9:73:02:FD:36:AD:19:9A:4E
Authority key identifier: 66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D
Certificate issuer:       /CN=F364A0C9AF/serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
Certificate serial:       02C1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
Manifest number:          02BE
Signing time:             Tue 04 Nov 2025 05:16:39 +0000
Manifest this update:     Tue 04 Nov 2025 05:16:38 +0000
Manifest next update:     Thu 06 Nov 2025 05:16:38 +0000
Files and hashes:         1: ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl (hash: 0TFiRvBzA8XMcBLgIRw3Ti6CfQzOwGUacBagkxmfmJA=)
                          2: 66456C5EA97711EE82772DA2775412E6.roa (hash: nnv2wC9302+3Jy3xrrAKkIS0rIVeajmhrACjCN0mcQM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 05:16:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F364A0C9AF, serialNumber=6641F6B660544ED1501BCC095AA07F9CB0FB5C4D
        Validity
            Not Before: Nov  4 05:16:38 2025 GMT
            Not After : Nov  6 05:16:38 2025 GMT
        Subject: CN=69098c37-2058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1c:4d:e8:43:bf:b0:15:fb:a4:39:dc:aa:d4:
                    e5:38:01:9f:1b:52:6f:ff:fe:c5:56:c7:d6:98:ad:
                    74:26:18:d4:79:05:49:09:6f:31:2d:ba:21:bc:b2:
                    34:73:85:d4:92:8b:07:9a:ce:63:68:7a:15:b7:9f:
                    2f:64:a5:40:5c:c2:44:8a:2d:37:b9:24:36:cb:8f:
                    e7:7b:66:a3:2c:81:cf:3a:11:15:f0:9f:a9:70:ea:
                    9c:ff:a6:ad:97:70:e1:2d:7e:e7:29:91:da:2b:a4:
                    ee:9e:6c:8a:85:f7:1c:ba:1f:ba:1c:6d:87:4b:c6:
                    ef:73:39:eb:28:da:93:bf:0a:ce:a9:74:7a:9a:e6:
                    e0:a7:0e:ba:9c:00:f0:83:f8:d8:7f:7e:36:36:e0:
                    0b:b5:75:ff:38:db:fc:8d:0a:96:c0:95:85:92:e0:
                    7d:ea:07:fc:1c:62:a0:bb:27:9d:7e:24:f8:c7:c1:
                    ae:06:8f:03:4d:28:bc:44:00:97:6d:42:e7:10:79:
                    3c:a4:04:a7:fe:0d:27:0a:88:57:c8:c0:36:bd:1b:
                    04:21:10:cb:d7:4a:1a:63:ee:b9:db:78:51:8a:88:
                    32:08:2d:a5:a0:fe:12:cc:4f:cc:34:13:8c:7d:df:
                    4f:66:31:53:a5:81:78:08:33:c5:31:0e:27:9e:1b:
                    7a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6A:0D:B8:2B:55:4D:3F:13:9D:E5:F9:73:02:FD:36:AD:19:9A:4E
            X509v3 Authority Key Identifier:
                keyid:66:41:F6:B6:60:54:4E:D1:50:1B:CC:09:5A:A0:7F:9C:B0:FB:5C:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F364A0C9/B897144AA66A11EE8A82CE8C775412E6/ZkH2tmBUTtFQG8wJWqB_nLD7XE0.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:88:72:cf:f0:8c:aa:6d:2d:70:51:eb:cb:31:97:91:fd:35:
         bc:1a:1f:6d:6d:85:df:a0:33:98:45:95:4a:c2:8c:3c:b8:61:
         17:e4:ae:57:2e:8f:38:53:96:55:60:9c:70:7a:01:89:8f:9a:
         37:04:c9:cb:98:94:33:a0:96:78:7f:65:7f:73:82:96:54:81:
         c9:65:6e:81:99:a1:28:1e:72:e9:96:e8:c6:83:e1:17:94:c6:
         09:42:5b:36:c4:7b:6a:3b:2e:34:88:a1:3f:1d:d5:2f:f0:fb:
         1d:b4:a6:5a:ae:6b:3f:45:22:17:0f:31:c9:4f:e8:16:55:94:
         99:b6:cc:f3:e4:ef:62:28:a4:2f:99:c7:a9:aa:d7:8f:c0:b6:
         0b:42:92:6b:c7:54:ba:d3:70:08:fe:c0:1e:99:de:20:5a:2e:
         a5:d2:0a:a9:2d:52:c1:a3:0e:77:8d:c3:41:23:c5:e0:12:0c:
         af:76:c1:93:d2:68:de:ea:2d:24:9b:e3:30:a6:0a:01:7e:3a:
         69:1f:41:52:78:d6:d4:e8:b1:97:f2:29:57:fb:6b:27:2d:f0:
         79:5d:53:60:ce:b6:d7:4d:a7:52:68:98:ac:00:50:cf:48:9f:
         2f:05:8b:c4:20:2f:7f:13:1e:93:4d:34:21:22:1e:8d:80:74:
         29:36:69:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:54:50 2025 by rpki-client