Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
File:                     ZsmzRf1S4DCcordufO0LUGyNAZs.mft (raw, json)
Hash identifier:          dcly03xSrGDAGbyfe+gV/1rHpcfo0qnBj5T8AloM168=
Subject key identifier:   72:01:E0:E2:F3:A0:06:53:E0:CC:2E:98:BF:A2:40:9A:32:CF:05:3D
Authority key identifier: 66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B
Certificate issuer:       /CN=F36A2F84AF/serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
Certificate serial:       0642
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
Manifest number:          0642
Signing time:             Wed 05 Nov 2025 02:24:33 +0000
Manifest this update:     Wed 05 Nov 2025 02:24:32 +0000
Manifest next update:     Fri 07 Nov 2025 02:24:32 +0000
Files and hashes:         1: ZsmzRf1S4DCcordufO0LUGyNAZs.crl (hash: hezeUNsHUaL506FOZ83bza4xqK3DlEaWNYi2/R//jY0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1602 (0x642)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36A2F84AF, serialNumber=66C9B345FD52E0309CA2B76E7CED0B506C8D019B
        Validity
            Not Before: Nov  5 02:24:32 2025 GMT
            Not After : Nov  7 02:24:32 2025 GMT
        Subject: CN=690ab561-c2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:79:fe:78:96:fa:68:cd:bb:e5:09:05:a9:d5:
                    61:b3:06:f6:d1:2f:af:ce:ff:58:a6:8a:ff:c8:8a:
                    80:74:4d:d2:04:a5:bf:3f:2f:74:59:63:c1:d2:a3:
                    e2:9c:a6:5c:43:29:26:6f:f7:e3:ae:5f:21:6a:54:
                    cb:e0:8d:4b:1d:c7:58:2d:f6:64:b6:d9:1a:db:54:
                    49:06:25:d8:47:ee:c8:ae:ee:9c:5e:7e:a7:2f:b1:
                    76:59:bd:a7:d9:74:21:8d:9b:41:b2:a0:44:0d:d1:
                    9f:18:28:ae:38:8a:ce:72:2e:a3:5a:78:8a:f8:1a:
                    00:5c:a2:6d:66:40:57:37:60:56:df:78:21:01:92:
                    4a:e8:c4:67:fb:8e:0d:98:f6:67:c1:40:3c:48:d2:
                    a0:68:b5:6e:a0:99:9f:92:c1:58:db:00:d5:1f:a6:
                    a1:c5:3f:ba:40:46:dc:e1:16:44:c8:dc:1e:98:ef:
                    72:fc:e0:de:4a:b7:eb:61:93:d8:e5:35:ab:2e:18:
                    72:a4:70:81:6f:ab:d0:3a:2d:ce:dd:97:42:f8:cc:
                    cb:01:03:10:6f:b5:10:2c:44:c6:d7:ba:56:00:40:
                    5e:21:77:80:6c:78:13:83:61:5b:2f:53:f3:69:10:
                    5b:8e:bb:0f:33:21:35:3a:bd:3f:8f:35:59:f7:a7:
                    7f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:01:E0:E2:F3:A0:06:53:E0:CC:2E:98:BF:A2:40:9A:32:CF:05:3D
            X509v3 Authority Key Identifier:
                keyid:66:C9:B3:45:FD:52:E0:30:9C:A2:B7:6E:7C:ED:0B:50:6C:8D:01:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/ZsmzRf1S4DCcordufO0LUGyNAZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36A2F84/87001708EEAF11EB9A7E3E2AD8A014CE/ZsmzRf1S4DCcordufO0LUGyNAZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:4a:c7:0d:a5:eb:04:26:60:7b:a1:d1:d7:48:a7:2c:87:fb:
         b2:f3:80:32:c9:11:8c:2b:2e:f0:0f:8d:9d:17:30:1d:76:39:
         7c:d0:bd:bd:9f:77:7a:7b:c0:2b:e9:0e:b3:e8:5d:1a:bc:42:
         41:79:03:68:23:03:ca:c8:95:92:f0:2c:0e:bb:87:1b:ef:4c:
         9b:ad:13:47:7b:6d:4e:94:78:d1:52:f3:91:5d:69:24:9a:81:
         e5:86:d6:17:c3:0a:da:8b:a2:44:17:7d:7f:65:1b:fa:ca:ee:
         b9:5f:7e:8f:4e:de:66:07:42:73:ae:21:61:e9:43:fc:6c:38:
         c8:52:87:b0:98:b1:d3:69:50:72:12:51:81:20:d9:75:e8:ad:
         47:3b:6c:6e:fb:82:04:3f:4e:71:a8:e9:e4:c4:d6:ac:e8:e9:
         9f:54:94:ad:71:4f:af:5d:69:98:de:a8:85:9e:31:5d:67:4a:
         a1:09:d8:d2:ae:e2:83:3d:74:73:61:e8:57:7f:a1:ca:b1:52:
         20:53:85:03:a6:7a:68:b1:a6:3e:73:9a:bc:49:63:89:22:31:
         87:a4:d3:20:81:34:a1:48:37:57:55:89:d2:4e:95:ec:61:db:
         5b:4b:ee:0f:7d:b6:15:48:88:de:41:3a:92:e4:6c:e8:db:d6:
         8f:10:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:20:19 2025 by rpki-client