Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
File:                     Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft (raw, json)
Hash identifier:          dPUO5VYQ70qkCWJo1Feg0xt5UfrqICoGB3dyb6CGkJ4=
Subject key identifier:   CF:9C:CF:FC:CA:3E:3E:8D:59:80:32:F2:E6:4E:9D:8A:48:F8:DE:2B
Authority key identifier: 67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39
Certificate issuer:       /CN=F36B5EE7AR/serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
Certificate serial:       68
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
Manifest number:          67
Signing time:             Tue 04 Nov 2025 06:39:35 +0000
Manifest this update:     Tue 04 Nov 2025 06:39:34 +0000
Manifest next update:     Thu 06 Nov 2025 06:39:34 +0000
Files and hashes:         1: Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl (hash: 5wvsT0j6sNNzKgd1cgH7BcS+cocqI9e55AEyjaS0n1A=)
                          2: 38D8D2366B9211F095FD868ADAE4EC9C.roa (hash: QAj9ZVXFClZ+xgA1S3DzLLKJ/tdZw+gURdKUv7+f/hc=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                          rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 06:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36B5EE7AR, serialNumber=675CBA4B50BD5CE898472D554F17049CBDEC0439
        Validity
            Not Before: Nov  4 06:39:34 2025 GMT
            Not After : Nov  6 06:39:34 2025 GMT
        Subject: CN=69099fa7-644f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b4:99:d2:a0:49:93:0d:f7:98:02:95:c9:3e:
                    20:a9:41:a2:a4:a3:82:c1:6e:47:91:59:d9:68:d7:
                    ab:df:76:95:6f:9b:9c:aa:3e:72:5c:75:6a:f4:c3:
                    bf:5e:d3:cd:13:2b:e4:b1:ec:67:f4:b2:9a:8c:61:
                    33:30:bb:1a:3d:61:b3:9a:9d:73:31:42:4d:18:e5:
                    77:09:8d:21:da:20:37:4e:0a:c5:a0:e1:cc:5d:65:
                    a5:68:69:6b:36:85:55:13:1d:41:2e:0d:cd:c3:3d:
                    61:b1:3d:40:1c:24:b9:c1:20:49:e2:4e:2e:14:24:
                    50:61:56:a4:15:4e:bf:6f:fa:99:45:12:34:90:9c:
                    a8:80:a8:72:05:76:32:dd:c8:6e:05:c1:1c:df:30:
                    c8:3d:26:cc:d4:87:f6:72:01:15:8e:7e:77:45:48:
                    87:b6:76:a0:1f:bd:b1:43:93:6b:92:f3:b1:89:c0:
                    85:75:36:7c:a8:59:26:d6:00:0c:17:df:53:62:cd:
                    cf:c3:4b:96:d8:c8:59:89:f5:6a:aa:b3:fb:cb:12:
                    85:3b:18:cf:a1:8a:7d:c5:0a:48:90:aa:e4:24:ca:
                    89:9e:f4:74:4c:1e:b3:2e:f2:7a:49:54:ac:a2:1a:
                    c8:8e:5f:da:90:24:99:ef:bc:46:c1:79:39:fb:06:
                    29:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9C:CF:FC:CA:3E:3E:8D:59:80:32:F2:E6:4E:9D:8A:48:F8:DE:2B
            X509v3 Authority Key Identifier:
                keyid:67:5C:BA:4B:50:BD:5C:E8:98:47:2D:55:4F:17:04:9C:BD:EC:04:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36B5EE7/01510A006B9111F0AF55F681DAE4EC9C/Z1y6S1C9XOiYRy1VTxcEnL3sBDk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:16:2b:a1:73:5b:dc:4b:a5:9a:33:c0:b7:6b:f7:88:58:7f:
         24:22:b8:88:05:37:f5:8f:80:92:77:10:83:ac:e0:a2:28:3a:
         67:69:8b:e9:fc:5d:b8:56:c8:42:b9:3a:c1:ff:ab:98:27:c0:
         60:0b:f0:32:6a:d0:ec:e2:a9:71:c8:07:fb:ad:9c:36:25:d8:
         16:07:96:50:7c:6b:36:68:35:bf:50:27:86:a3:d6:eb:a0:0b:
         e5:ef:b4:0d:a6:00:0b:81:c1:00:9a:2c:f1:08:1f:3e:5b:03:
         08:ff:cf:2c:b6:e9:56:b0:48:28:6d:1b:a6:02:e9:52:86:df:
         e5:6f:35:3e:d6:bc:24:51:80:df:a0:a3:6f:9f:d1:da:d3:30:
         35:bd:50:aa:5d:2f:0b:a4:98:6f:98:71:48:24:a2:9d:a6:0c:
         83:b1:3c:9e:32:d9:4d:a6:cc:f3:7f:e2:38:7c:0f:32:62:7f:
         d7:b0:c1:59:a9:7b:ac:2b:0a:be:77:98:c9:1c:bd:b4:45:b0:
         2b:51:67:38:a9:e3:5f:a2:24:dd:ad:53:ce:b6:00:d4:6c:79:
         26:1c:92:b0:a0:ef:41:4a:f4:d6:8c:af:dc:c7:f2:20:50:7c:
         85:92:4f:07:2d:eb:8c:47:85:6f:f3:74:d4:c1:b8:cb:1a:87:
         d7:64:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:38:37 2025 by rpki-client