Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
File:                     zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft (raw, json)
Hash identifier:          rVTr3TryR05Ud0GgioIGFQwj6uYLdUDH/4JHbeXeJjM=
Subject key identifier:   56:C8:B1:36:44:4F:4B:91:2D:B4:05:C0:49:7E:C9:E9:2C:78:AB:9D
Authority key identifier: CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A
Certificate issuer:       /CN=F3698125AR/serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
Certificate serial:       0293
Authority info access:    rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
Manifest number:          0291
Signing time:             Mon 11 Aug 2025 04:16:45 +0000
Manifest this update:     Mon 11 Aug 2025 04:16:44 +0000
Manifest next update:     Wed 13 Aug 2025 04:16:44 +0000
Files and hashes:         1: zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl (hash: eSLK85GHZvJUH7B/XTyGgN7e/+aMToVkMMJejAb7UQs=)
                          2: 637017A4270D11EF83B8A0DA7CDC24C2.roa (hash: KcWpAlTox8uHxgsa4XXL2SuGUP0/4ifMRuSUqNE8VdQ=)
                          3: D2BCB8AC24CD11EFBA1E711B7DDC24C2.roa (hash: pk6a4ptH8vZ8/DDIS6o5NsLyUfZR0uUROi741ipkTm8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
                          rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3698125AR, serialNumber=CEDF6EC23B3A0E9FC8C99B14734ADAE7A1D8994A
        Validity
            Not Before: Aug 11 04:16:44 2025 GMT
            Not After : Aug 13 04:16:44 2025 GMT
        Subject: CN=68996ead-1de3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:b2:ec:7f:c6:95:0a:6d:34:cb:83:9f:bd:
                    59:f4:96:45:38:2e:73:3b:a0:20:ce:fb:5b:1a:42:
                    e8:18:1e:97:72:62:1b:73:7f:4a:4f:e6:8f:7a:9e:
                    e6:c6:61:0e:71:7a:44:7c:cd:2b:15:b7:2b:0d:40:
                    d3:52:19:91:bd:19:db:67:5e:a7:0b:26:48:ff:8a:
                    08:75:68:53:84:b0:ac:b3:1d:39:ef:3e:6d:eb:3c:
                    21:0e:49:d8:69:12:98:e4:43:ff:c8:15:75:88:78:
                    8b:3a:7b:b8:87:8d:e9:11:7c:7a:64:c2:55:a0:82:
                    28:1b:1c:38:8c:b5:46:de:a1:c1:c9:98:28:7d:14:
                    25:29:55:fa:4e:61:0a:5e:d4:7a:e6:9f:cb:d6:65:
                    66:72:c0:67:52:76:87:e2:89:2b:80:d7:ca:e5:c3:
                    62:bf:44:8f:18:2b:22:04:50:be:25:35:5a:ce:08:
                    59:5f:10:81:6f:e8:f8:bf:d9:f9:5f:61:67:69:9e:
                    03:32:d1:fb:8c:c5:06:16:83:92:41:6f:21:47:a3:
                    f6:0e:e3:cb:c2:d7:36:48:8e:01:70:05:b6:8e:64:
                    ca:80:82:2f:66:79:91:47:05:1b:7d:9b:89:b9:82:
                    c1:ae:da:6b:b4:ef:d4:86:3d:f6:df:d7:f6:36:6f:
                    fa:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C8:B1:36:44:4F:4B:91:2D:B4:05:C0:49:7E:C9:E9:2C:78:AB:9D
            X509v3 Authority Key Identifier:
                keyid:CE:DF:6E:C2:3B:3A:0E:9F:C8:C9:9B:14:73:4A:DA:E7:A1:D8:99:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/zt9uwjs6Dp_IyZsUc0ra56HYmUo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3698125/BEF71C94838411EE8E2697354AD9E6FC/zt9uwjs6Dp_IyZsUc0ra56HYmUo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:c8:71:6b:9c:3e:8e:d0:9a:9d:e1:f6:bc:6a:5b:fc:b9:
         6f:61:a9:89:87:ff:e3:cb:05:ed:c9:f7:ea:5b:d5:b7:34:56:
         59:74:b0:f4:96:ec:2b:e8:49:95:a3:34:f6:e6:c8:e9:42:7a:
         cf:81:a2:dd:10:3d:72:7d:bd:27:76:63:55:f6:92:32:01:72:
         be:e6:76:e4:77:c8:47:bc:3f:a3:e9:e2:e7:d8:65:a3:c7:b5:
         0d:41:0b:ae:04:e9:cc:ac:e7:cf:30:db:65:05:70:64:a1:3b:
         50:46:04:17:32:31:7c:92:85:e6:f6:6a:82:78:ca:f2:af:41:
         26:4f:74:f4:15:ee:2b:98:c6:60:74:59:ed:5c:92:23:f8:42:
         a0:40:be:9b:d3:c6:29:ad:93:7a:40:c5:26:d2:13:78:86:6b:
         30:f0:75:69:84:30:fb:56:2a:18:95:7d:68:f7:19:36:e8:1e:
         b0:b3:fb:d5:72:c9:74:fd:4f:43:21:d1:4e:17:e1:68:4a:d4:
         6c:ae:0a:0e:db:68:6b:24:50:63:56:43:35:fb:4f:c6:ad:20:
         71:f1:4f:71:00:0b:67:5a:38:79:34:bd:13:5e:20:ac:8a:5d:
         ba:90:94:a7:f8:e3:e9:e2:53:08:15:45:df:cd:57:a5:51:46:
         85:23:22:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:00 2025 by rpki-client