Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
File:                     CzGZramPk056KV0rqhPAxHetjyU.mft (raw, json)
Hash identifier:          00whSyhoHWppiOnZbx2LHtIwJ6Oy/GMKaipXtW+ciIE=
Subject key identifier:   C7:72:05:13:03:71:08:C4:6D:0F:6B:4C:2C:07:E0:24:D6:0C:84:9A
Authority key identifier: 0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25
Certificate issuer:       /CN=F36BA64DAF/serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
Certificate serial:       0462
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
Manifest number:          0461
Signing time:             Wed 05 Nov 2025 03:18:54 +0000
Manifest this update:     Wed 05 Nov 2025 03:18:53 +0000
Manifest next update:     Fri 07 Nov 2025 03:18:53 +0000
Files and hashes:         1: CzGZramPk056KV0rqhPAxHetjyU.crl (hash: h2NMR7d4DW6lj3HY7mxTX63z33wayBU6inDE6Iivklc=)
                          2: 5A992ACC659811ED9CE9B7C8F1222468.roa (hash: NjQvSWJBVOMZRY/QCKY/uG+2g+UAexC0q1YfjK9ZI0s=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1122 (0x462)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BA64DAF, serialNumber=0B3199ADA98F934E7A295D2BAA13C0C477AD8F25
        Validity
            Not Before: Nov  5 03:18:53 2025 GMT
            Not After : Nov  7 03:18:53 2025 GMT
        Subject: CN=690ac21e-ce3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e2:f2:bf:49:bf:ef:e3:92:21:46:5b:dd:76:
                    98:f8:f6:28:67:1d:89:89:ec:06:a2:c0:46:2e:b7:
                    60:d5:98:45:20:a9:05:85:e8:e5:bb:56:b4:77:54:
                    47:a4:72:27:a7:8c:37:d7:bd:33:13:9c:96:ed:bb:
                    ac:76:56:9b:02:5e:c7:e8:3d:12:ca:e2:04:d2:1d:
                    62:22:cd:d9:9e:2f:b6:53:10:5a:da:67:b8:14:6c:
                    01:8f:d5:8f:ae:db:51:42:7a:68:e9:1a:90:75:c5:
                    94:37:85:05:0d:63:da:3a:80:1f:d6:d2:59:0d:86:
                    f3:3c:ca:82:4d:6a:86:0b:1d:79:b0:44:a0:18:df:
                    1a:5d:56:f8:69:18:32:d6:25:e8:5a:41:08:3f:db:
                    be:a7:8b:fc:70:b1:6a:06:c5:d2:7f:66:cd:06:8c:
                    c7:2f:1c:a6:7e:1e:71:4a:70:04:13:e3:d1:95:7f:
                    e8:d3:88:5c:be:82:96:ab:9e:60:60:2f:bc:4e:42:
                    af:f8:6d:67:7b:a6:91:0c:e7:13:f3:6f:e0:82:1c:
                    73:3e:d1:c1:22:86:6e:d1:37:3c:30:86:9a:14:a1:
                    e0:6c:d0:1b:3b:90:64:4d:04:d4:de:5c:7e:05:d9:
                    2b:6a:ec:36:e4:dd:f1:1f:08:87:d4:c8:16:23:e5:
                    d5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:72:05:13:03:71:08:C4:6D:0F:6B:4C:2C:07:E0:24:D6:0C:84:9A
            X509v3 Authority Key Identifier:
                keyid:0B:31:99:AD:A9:8F:93:4E:7A:29:5D:2B:AA:13:C0:C4:77:AD:8F:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/CzGZramPk056KV0rqhPAxHetjyU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BA64D/93D2720E659711ED9A7CB8C6F1222468/CzGZramPk056KV0rqhPAxHetjyU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:9a:c6:8a:b3:68:61:eb:7e:16:81:63:49:06:2e:10:e8:0a:
         df:0b:5b:0f:4d:93:91:e5:b4:6e:d3:3d:70:3f:d0:c3:8f:74:
         ab:43:69:1f:75:42:fd:69:84:e6:ec:cd:3e:e9:26:82:4c:85:
         46:51:ac:65:ff:0e:53:3b:96:6a:7f:eb:c8:c1:41:65:f9:e8:
         c1:d2:31:d8:d4:31:86:95:41:ec:34:ad:9a:7c:62:46:13:3f:
         df:47:a2:5d:ef:25:bf:c6:a8:82:fe:d2:2b:ab:52:9a:fc:b0:
         18:1e:0e:1f:ff:68:fe:65:9b:a8:6e:c6:c1:d2:62:ea:78:99:
         b4:d5:36:02:90:e5:2e:b6:1b:f6:7c:11:0a:f4:5d:e4:95:d9:
         2a:2e:7c:f4:69:c9:97:86:c3:d2:2d:9d:fe:1c:82:ee:78:f1:
         78:c0:f1:e2:4b:f6:d0:46:21:4e:53:22:23:4b:3e:89:15:0b:
         65:b3:0b:d2:72:35:c5:01:7b:b7:4a:dc:4a:8c:5a:86:fe:37:
         a6:7a:8a:da:21:bb:f1:ff:54:a5:5c:11:fb:65:d6:b4:0c:a0:
         7b:8f:99:fe:66:81:38:49:13:a4:da:90:71:86:a6:67:c5:d1:
         42:a5:d8:d3:de:b2:6f:e5:70:26:f1:84:4d:33:9a:c9:82:2c:
         4c:03:39:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:40:24 2025 by rpki-client