Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
File:                     zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft (raw, json)
Hash identifier:          nXTyFVWZ9vdNsUaZnubYxYd4xkifdey/x9oIez9a29A=
Subject key identifier:   B7:62:E8:E6:FF:DB:07:F8:A7:59:1F:8F:D1:2A:5A:29:68:FE:D2:B7
Authority key identifier: CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04
Certificate issuer:       /CN=F3697E68AF/serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
Certificate serial:       0194
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
Manifest number:          0190
Signing time:             Mon 11 Aug 2025 04:53:30 +0000
Manifest this update:     Mon 11 Aug 2025 04:53:29 +0000
Manifest next update:     Wed 13 Aug 2025 04:53:29 +0000
Files and hashes:         1: zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl (hash: 08V+D19sqPjdU0Wq4AgOlgpfqTADJr4p3YPtGILQzHs=)
                          2: 7A18E53AE3A511EFB1E8E756762E951A.roa (hash: 2LPC2UkkLzMGcbYCbFGtnfKTTqIGsxGXV0s+CLhea/M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 404 (0x194)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3697E68AF, serialNumber=CE1ECDA4F0569670B586E2CD352BD7206FD87804
        Validity
            Not Before: Aug 11 04:53:29 2025 GMT
            Not After : Aug 13 04:53:29 2025 GMT
        Subject: CN=6899774a-ffea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9b:40:4a:fe:f0:b3:d9:37:e0:f8:27:e6:c3:
                    f0:8b:cb:92:b0:d7:ba:0e:77:63:47:00:40:3c:6c:
                    2f:33:ff:12:27:40:c1:f6:8d:88:a2:3d:fb:82:cc:
                    8e:f1:ca:63:74:71:09:54:70:86:59:5a:d9:91:68:
                    66:f2:27:28:76:f4:80:63:6d:81:7c:ae:92:5b:e9:
                    17:d7:f2:04:d6:81:f7:4f:52:e8:5d:11:41:b2:ad:
                    52:ef:3f:0d:7d:bf:03:ee:67:d3:66:7b:7c:f0:b9:
                    8a:92:e6:79:d8:b6:02:50:28:25:28:d0:8d:4f:11:
                    be:00:65:47:d6:97:85:53:88:c0:36:20:ca:49:4e:
                    d3:1f:38:12:e5:8b:c5:22:12:e0:e7:46:b0:6b:c4:
                    a3:36:30:2b:00:b8:8e:9d:c0:b3:35:a6:a2:8e:7b:
                    61:9c:97:c2:44:2d:6a:61:f8:94:d1:07:3c:00:0f:
                    53:b3:da:7a:0c:fc:60:a9:14:81:a7:d5:04:1d:db:
                    74:04:a7:b7:66:6b:1c:2c:69:3f:9e:08:3c:a7:44:
                    b3:2b:9a:a3:e5:b0:02:dd:99:a1:cf:9b:34:a1:91:
                    ac:a9:14:eb:90:75:34:f4:dd:39:39:7f:15:19:f1:
                    7a:14:1b:d0:f7:b9:f8:92:1f:c2:ac:db:5b:65:d7:
                    ae:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:62:E8:E6:FF:DB:07:F8:A7:59:1F:8F:D1:2A:5A:29:68:FE:D2:B7
            X509v3 Authority Key Identifier:
                keyid:CE:1E:CD:A4:F0:56:96:70:B5:86:E2:CD:35:2B:D7:20:6F:D8:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zh7NpPBWlnC1huLNNSvXIG_YeAQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3697E68/5B325B264A6011EF8601828E762E951A/zh7NpPBWlnC1huLNNSvXIG_YeAQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0a:78:f3:0e:ce:b0:3c:58:49:99:39:5c:26:57:51:2d:c9:
         55:31:39:85:95:19:ff:c2:71:39:5a:35:f3:ba:97:b8:63:f3:
         35:fc:e1:e7:76:71:8f:6b:8f:75:71:94:81:6f:a7:29:86:28:
         f8:9a:24:eb:2c:da:37:d9:73:be:b8:32:be:6a:7b:75:b0:37:
         f4:ea:00:7b:a9:e1:d5:ae:65:c8:5c:48:d8:52:0d:17:89:ee:
         89:f6:1c:f5:40:86:b3:6b:c4:e2:3d:41:03:e3:62:c6:4d:88:
         83:94:7f:61:37:a9:41:a4:a2:49:d8:3f:9c:63:99:c1:87:fe:
         b2:f0:8c:26:cf:b0:11:5b:19:c6:fe:63:cb:d4:13:bb:c6:e8:
         fd:fa:8e:b3:51:f8:c2:0b:08:37:b3:7e:0c:a1:52:34:c2:e6:
         1c:9f:56:03:5f:dd:00:57:a1:9d:cc:e2:34:91:1c:65:08:af:
         50:fa:bc:ce:18:13:b2:6b:3f:5d:eb:89:a0:99:22:f0:c8:6c:
         e3:f9:4d:9a:cf:96:8d:ff:c6:94:8d:84:30:86:95:d3:09:67:
         0f:98:9f:ba:51:88:d6:72:52:2d:31:12:a9:ed:5b:c0:a0:f5:
         89:ff:6a:dc:24:f5:a1:f7:78:99:83:0e:a1:6d:36:5c:0c:41:
         41:22:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:34:39 2025 by rpki-client