Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
File:                     zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft (raw, json)
Hash identifier:          NS7TrCr0wBEYn6ufg397CfS4uIz8+hJSrPEybn2wd9k=
Subject key identifier:   5F:EF:B4:48:40:16:B8:7A:EC:33:6D:5F:F2:38:6A:5E:3E:53:51:BC
Authority key identifier: CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A
Certificate issuer:       /CN=F368BC41AF/serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
Certificate serial:       0210
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
Manifest number:          0209
Signing time:             Tue 04 Nov 2025 05:37:16 +0000
Manifest this update:     Tue 04 Nov 2025 05:37:15 +0000
Manifest next update:     Thu 06 Nov 2025 05:37:15 +0000
Files and hashes:         1: zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl (hash: 15rb6AEMl2QvazbaPOqWCkbRhmnNvxgmwkltQfUwFUQ=)
                          2: CD4AEF6C84E711F082A7A4C7DAE4EC9C.roa (hash: TD1wlhKZOrZP/F+QwOCwitVpVwlglIWA3dyIYL4ym/c=)
                          3: F3466CD22EEE11EFAB930A67762E951A.roa (hash: +dYtbycLkkem/RCdq5G5Tibdi9nPBFznIh17vDpR0yI=)
                          4: AA5E7D162EEE11EFB786B466762E951A.roa (hash: 7ctEzn08E4DJ3uFce48dpoQ1eMqIiYfX70Em/++n2wI=)
                          5: C10CD8A62EED11EFBB91475E762E951A.roa (hash: +GopixwYFgxwApDEisDd+3N08mZ9XQbjdM+uCxLPgTY=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 05:37:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 528 (0x210)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368BC41AF, serialNumber=CE147CA405945ACF5CDFE15E4FA5D2BDEA48D90A
        Validity
            Not Before: Nov  4 05:37:15 2025 GMT
            Not After : Nov  6 05:37:15 2025 GMT
        Subject: CN=6909910c-7d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:be:12:e1:9c:1b:fb:99:52:35:af:4f:dd:ec:
                    ad:53:a8:4b:48:74:2c:22:15:4d:86:bc:cc:e4:fc:
                    41:2f:d7:64:17:31:d4:7e:b2:1f:6d:db:28:25:de:
                    46:a6:46:e5:f6:25:c2:7f:ae:17:be:25:85:91:e7:
                    fa:7b:a8:e4:ff:73:03:df:59:b4:df:49:db:83:b1:
                    51:3a:12:ef:3e:bf:b2:3c:a5:41:c9:c4:60:59:6b:
                    bd:a4:61:61:fa:82:7f:69:77:78:a4:d7:e6:f3:80:
                    23:54:bc:1c:aa:f5:7a:54:f8:56:05:69:58:a2:24:
                    e2:6f:99:68:c4:49:ff:db:42:12:41:a2:ec:f3:87:
                    38:bc:6b:83:03:2a:42:93:be:00:2a:71:83:f0:da:
                    b1:db:0c:7d:a3:c4:d8:18:a3:b0:f3:e7:d1:6d:8a:
                    fa:d3:61:50:68:84:12:f4:71:35:14:50:ad:4c:d1:
                    2d:00:88:3c:0f:5d:06:54:f2:2a:1d:ec:63:6a:c4:
                    8b:b4:87:72:28:4c:6e:83:7d:93:52:b3:2e:87:28:
                    39:85:d2:cc:26:cb:1b:fa:45:ea:43:1e:41:9b:10:
                    29:5d:d6:0f:5a:8b:0c:8f:e5:9a:2c:04:69:cd:48:
                    3d:79:31:5c:38:60:ee:7e:9a:f2:08:ae:c0:1f:06:
                    df:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EF:B4:48:40:16:B8:7A:EC:33:6D:5F:F2:38:6A:5E:3E:53:51:BC
            X509v3 Authority Key Identifier:
                keyid:CE:14:7C:A4:05:94:5A:CF:5C:DF:E1:5E:4F:A5:D2:BD:EA:48:D9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zhR8pAWUWs9c3-FeT6XSvepI2Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368BC41/C230B48C2EE811EF8028E5BA762E951A/zhR8pAWUWs9c3-FeT6XSvepI2Qo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:7a:b2:13:1f:71:4d:72:23:c7:24:22:fe:e5:46:46:d8:
         58:8f:bf:51:ff:4d:e8:6c:ae:27:17:21:91:a2:ea:1a:97:a3:
         b3:4e:82:bf:20:35:a9:c0:4c:43:6e:70:fb:e0:37:d9:e8:80:
         83:fe:47:b0:99:7f:c0:15:f2:8e:fb:f0:57:60:f7:10:95:b0:
         5d:26:d4:6c:53:6b:92:c3:20:fc:28:5e:7f:30:72:56:da:a9:
         f9:1e:bc:8b:65:b5:9a:01:af:6c:e6:32:9b:d3:ad:a6:b2:e7:
         1c:69:2f:65:93:f4:dc:5a:05:6f:38:fe:cc:94:95:64:68:8d:
         fd:a5:a8:4b:3c:72:00:ef:3e:1e:54:d1:17:b2:fe:96:5e:bf:
         0b:d3:67:7e:ee:b8:2b:ec:89:82:e8:42:c9:e5:f2:47:b7:2d:
         97:38:9c:b4:33:9b:6f:a0:1a:70:73:3a:92:a6:7d:73:5d:7f:
         94:d1:d0:43:2d:90:11:39:6f:f2:04:39:0e:09:59:fe:95:c1:
         f2:f5:c9:ba:1e:ba:97:ef:81:91:63:98:94:6e:09:c3:fe:f3:
         f9:53:1d:3e:0e:23:93:dc:e3:42:c6:2d:15:d5:b5:83:74:f9:
         74:76:ea:00:ed:cf:97:3e:ab:bc:19:ff:da:d1:8c:e6:a6:a6:
         a5:c1:d3:99
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICAhAwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
OEJDNDFBRjExMC8GA1UEBRMoQ0UxNDdDQTQwNTk0NUFDRjVDREZFMTVFNEZBNUQy
QkRFQTQ4RDkwQTAeFw0yNTExMDQwNTM3MTVaFw0yNTExMDYwNTM3MTVaMBgxFjAU
BgNVBAMTDTY5MDk5MTBjLTdkMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDkvhLhnBv7mVI1r0/d7K1TqEtIdCwiFU2GvMzk/EEv12QXMdR+sh9t2ygl
3kamRuX2JcJ/rhe+JYWR5/p7qOT/cwPfWbTfSduDsVE6Eu8+v7I8pUHJxGBZa72k
YWH6gn9pd3ik1+bzgCNUvByq9XpU+FYFaViiJOJvmWjESf/bQhJBouzzhzi8a4MD
KkKTvgAqcYPw2rHbDH2jxNgYo7Dz59FtivrTYVBohBL0cTUUUK1M0S0AiDwPXQZU
8iod7GNqxIu0h3IoTG6DfZNSsy6HKDmF0swmyxv6RepDHkGbECld1g9aiwyP5Zos
BGnNSD15MVw4YO5+mvIIrsAfBt+RAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUX++0
SEAWuHrsM21f8jhqXj5TUbwwHwYDVR0jBBgwFoAUzhR8pAWUWs9c3+FeT6XSvepI
2QowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjhCQzQxL0MyMzBCNDhDMkVFODExRUY4MDI4RTVCQTc2MkU5NTFBL3poUjhw
QVdVV3M5YzMtRmVUNlhTdmVwSTJRby5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3poUjhwQVdVV3M5YzMtRmVUNlhTdmVwSTJRby5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2OEJDNDEvQzIzMEI0OEMyRUU4MTFFRjgwMjhFNUJBNzYy
RTk1MUEvemhSOHBBV1VXczljMy1GZVQ2WFN2ZXBJMlFvLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAtoHqyEx9xTXIjxyQi/uVGRthYj79R
/03obK4nFyGRouoal6OzToK/IDWpwExDbnD74DfZ6ICD/kewmX/AFfKO+/BXYPcQ
lbBdJtRsU2uSwyD8KF5/MHJW2qn5HryLZbWaAa9s5jKb062msuccaS9lk/TcWgVv
OP7MlJVkaI39pahLPHIA7z4eVNEXsv6WXr8L02d+7rgr7ImC6ELJ5fJHty2XOJy0
M5tvoBpwczqSpn1zXX+U0dBDLZAROW/yBDkOCVn+lcHy9cm6HrqX74GRY5iUbgnD
/vP5Ux0+DiOT3ONCxi0V1bWDdPl0duoA7c+XPqu8Gf/a0YzmpqalwdOZ
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:43:31 2025 by rpki-client