Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          sgUUtCMoGkQEVvMjgrcZLLxGyhv5jSvf0SEe51b/4Zs=
Subject key identifier:   B9:D5:8D:BB:43:60:10:CE:93:34:3A:58:09:C0:7A:E5:9C:E3:6B:80
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       0390
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          038F
Signing time:             Sun 15 Jun 2025 03:27:59 +0000
Manifest this update:     Sun 15 Jun 2025 03:27:58 +0000
Manifest next update:     Tue 17 Jun 2025 03:27:58 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: 7tvEy50XWbW/3AxtJOFsgUh2EAKLoXGVIJMLslZf/PU=)
                          2: B4A262BA97E111EDBE23EF7CF1222468.roa (hash: oz3acEqmAFW6Q64G1pO2mcOXINAlKbbqHe9mAvDeW6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 17 Jun 2025 00:26:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 912 (0x390)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: Jun 15 03:27:58 2025 GMT
            Not After : Jun 17 03:27:58 2025 GMT
        Subject: CN=684e3dbf-23c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6d:02:3d:91:f8:7b:57:ca:82:10:37:ed:2b:
                    58:84:99:05:4c:92:f4:2f:92:5b:fa:f8:8d:43:65:
                    d8:a6:cc:dd:ea:ae:40:8c:bb:8c:df:25:53:fe:f1:
                    18:bd:31:a4:56:f5:48:09:82:0c:c6:66:99:20:0d:
                    6a:79:46:93:74:73:8d:58:18:98:ed:7d:1f:ab:0e:
                    1a:61:d5:50:fe:bc:e8:b4:75:67:db:18:b2:5a:22:
                    46:ff:5a:ef:e4:9b:20:87:cd:ea:64:5d:c1:1e:52:
                    a2:1a:8d:66:23:fe:3c:02:0a:0c:d7:42:61:fd:1d:
                    3e:54:92:ae:cb:2d:7d:68:d9:50:4f:1d:37:cd:69:
                    ea:23:19:d8:0c:79:0e:04:bb:67:c8:2c:1f:c7:9b:
                    64:6b:7a:57:90:cf:bb:ae:d1:61:44:4b:2a:e1:7b:
                    f6:18:21:a7:4b:44:24:4b:57:e6:dd:5f:74:6b:65:
                    ff:81:88:41:ca:23:c6:7d:1b:0b:d7:ed:08:a9:5e:
                    0b:75:c8:e4:8e:a3:6d:f1:d7:e9:52:11:3b:05:87:
                    43:f8:e7:cf:08:f1:62:ed:dd:72:19:33:44:5c:62:
                    41:1c:73:ea:3e:42:d2:f5:17:06:64:cc:d4:cb:5d:
                    15:40:b4:fe:66:f9:54:bb:e2:26:ea:cc:0c:0c:a0:
                    49:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D5:8D:BB:43:60:10:CE:93:34:3A:58:09:C0:7A:E5:9C:E3:6B:80
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:24:85:30:01:5b:ff:71:1b:03:3f:56:e3:a4:cc:8a:d0:7d:
         01:3f:74:9e:16:95:47:9f:db:aa:b6:12:3a:06:de:69:bd:12:
         af:f6:f7:07:03:ac:5e:98:59:2a:55:5a:39:14:0e:95:7a:07:
         33:59:c9:84:bb:49:30:e0:03:14:a7:01:c9:68:f3:2b:f6:9a:
         af:32:0b:8e:c8:cb:15:bc:d5:51:21:ab:46:5c:ec:4b:56:9a:
         3d:74:f9:76:3d:3a:a2:b1:95:74:94:15:87:ff:6c:41:04:ee:
         bb:c0:0c:00:8f:ab:54:2f:7e:4c:90:34:fc:cf:8e:57:dc:a8:
         0f:6c:58:c9:0d:3e:1a:c5:c3:22:8a:e2:ab:9e:5f:a3:d1:d7:
         01:23:e4:72:e1:e2:7d:73:8d:16:a2:64:17:de:6e:f5:f0:d7:
         66:ad:b5:3a:fe:0d:35:2a:b2:c1:33:a9:31:3e:bf:08:73:6d:
         68:8e:cf:12:e9:da:ad:99:1f:6d:3b:50:4e:01:cd:c5:4a:5f:
         56:41:37:f4:36:3a:d2:98:d2:0e:c3:30:0b:ab:cd:3b:dd:ec:
         a4:d0:04:1c:5f:52:b4:18:4c:de:c9:3e:6a:4f:c5:b6:88:cc:
         72:e0:7b:d1:a8:b2:ca:47:9c:c5:c2:5a:e9:95:75:c1:1d:4f:
         90:15:62:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:39:37 2025 by rpki-client