Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File:                     CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier:          Plz+VskaiLKPlytoVcZ3paJtdcc2UgmPGu5Pc4yxRes=
Subject key identifier:   BE:4D:0B:D3:4C:A4:72:9E:AA:3D:96:EB:74:A3:80:12:8F:E9:D6:15
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer:       /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial:       0508
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number:          0507
Signing time:             Fri 17 Apr 2026 03:04:31 +0000
Manifest this update:     Fri 17 Apr 2026 03:04:30 +0000
Manifest next update:     Sun 19 Apr 2026 03:04:30 +0000
Files and hashes:         1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: uCp/Sojblt/E4yfXzRBPwNfHqJ6I6oY+bx0Es3JOon4=)
                          2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1288 (0x508)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA64DAF, serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
        Validity
            Not Before: Apr 17 03:04:30 2026 GMT
            Not After : Apr 19 03:04:30 2026 GMT
        Subject: CN=69e1a33f-5cd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fe:23:6a:4d:b5:24:6f:27:06:ca:f2:6a:dc:
                    13:ac:78:26:e3:05:e4:d1:89:ba:2b:cd:09:ca:4d:
                    ef:9d:0e:56:dc:4a:51:89:51:44:57:80:78:fb:3f:
                    c3:36:40:7c:6d:22:9d:b2:ae:e7:4b:23:c2:20:5a:
                    75:68:f6:31:74:94:6b:b5:e4:7d:c8:52:30:54:a0:
                    f4:6e:10:07:97:c8:7f:9e:10:23:cf:d2:e4:8e:ca:
                    60:a4:95:a5:d0:d7:eb:e2:59:9b:37:e1:f9:b3:46:
                    ea:95:6b:fe:a1:26:7d:48:92:ad:dd:6b:b0:ff:85:
                    23:50:f5:3d:9b:2f:ca:e4:41:8a:51:bf:ee:fe:c2:
                    76:c5:a9:e4:33:8d:38:f8:af:8c:3a:b9:3a:9e:9d:
                    57:bf:46:e8:f0:af:16:15:cd:6f:4c:df:fa:be:19:
                    11:ca:ca:12:40:21:d2:44:cd:d9:8c:87:bd:ad:ed:
                    df:f6:a7:46:44:f5:a8:aa:72:4a:15:76:ec:20:60:
                    c2:8c:c4:04:2a:c5:7d:e8:ce:e5:80:15:cc:15:d6:
                    54:26:49:dd:e7:3b:b9:2a:27:95:3b:cf:23:7f:ae:
                    47:b0:4a:73:88:a1:d0:41:09:48:6a:93:f5:ad:91:
                    98:0c:4b:0e:c6:b2:86:e6:b9:aa:12:2e:68:ae:f5:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:4D:0B:D3:4C:A4:72:9E:AA:3D:96:EB:74:A3:80:12:8F:E9:D6:15
            X509v3 Authority Key Identifier:
                keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:bd:6b:14:bb:44:a5:98:00:c2:04:10:f7:2c:3b:4d:41:bb:
         2a:ab:0b:72:08:c7:1c:51:07:0f:bd:9e:3f:63:66:03:b6:f2:
         6e:4c:17:ee:3a:cf:78:e2:88:bc:f6:d1:3b:54:b9:e9:40:ba:
         a9:26:e8:6b:3c:6f:f5:d7:58:e1:ca:9a:17:e0:87:d8:75:7b:
         47:0d:78:fd:5d:b8:34:26:84:e2:68:cd:1a:d7:f1:b7:2d:5d:
         4f:5c:56:26:cf:1d:95:e0:3a:01:1c:4f:68:b5:88:e5:07:45:
         ee:89:04:d6:84:44:be:98:c5:65:c8:60:9d:2b:7c:53:9f:bd:
         b4:c1:a4:e8:40:47:66:40:c2:d1:98:fa:b1:d1:6f:9c:d7:bb:
         c5:7a:67:da:fe:78:0a:25:c9:fc:dd:a4:ac:a0:19:aa:bd:0b:
         54:53:40:5e:5d:4b:d0:a5:8c:5a:e8:90:25:16:db:2c:00:c8:
         a7:fb:09:27:38:c5:74:fa:b9:e0:27:ef:1a:63:21:ff:60:2b:
         9d:b0:98:85:9d:c3:65:8b:b3:1d:22:4b:8b:fb:cf:b6:90:97:
         70:d0:ff:98:ab:13:1f:49:dd:9e:d0:a1:91:03:b2:7d:4a:23:
         75:86:54:ba:c2:2c:06:cf:ec:fb:f1:e8:0b:72:80:94:8b:b0:
         8d:45:0b:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:47:13 2026 by rpki-client