Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
File:                     ZdKVz1RHjfha1krqkGaLxBFP0z4.mft (raw, json)
Hash identifier:          JhC4/ebl9xru6M2Dv9lOJAQcGm2ljpWhAdMNDIeH0d4=
Subject key identifier:   26:F0:70:A3:E3:F9:AE:44:09:08:FD:E2:B0:7C:F7:FB:83:2D:03:B7
Authority key identifier: 65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E
Certificate issuer:       /CN=F36BE2EDAR/serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
Certificate serial:       03CA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
Manifest number:          03C9
Signing time:             Mon 11 Aug 2025 03:32:32 +0000
Manifest this update:     Mon 11 Aug 2025 03:32:31 +0000
Manifest next update:     Wed 13 Aug 2025 03:32:31 +0000
Files and hashes:         1: ZdKVz1RHjfha1krqkGaLxBFP0z4.crl (hash: U+VlmnOEJzvLKFiflIAiwDW6yl2zH+F+jFIIOgTJ8Kc=)
                          2: B4A262BA97E111EDBE23EF7CF1222468.roa (hash: oz3acEqmAFW6Q64G1pO2mcOXINAlKbbqHe9mAvDeW6I=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                          rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 13 Aug 2025 00:26:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 970 (0x3ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BE2EDAR, serialNumber=65D295CF54478DF85AD64AEA90668BC4114FD33E
        Validity
            Not Before: Aug 11 03:32:31 2025 GMT
            Not After : Aug 13 03:32:31 2025 GMT
        Subject: CN=68996450-3bc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:26:f8:48:98:cb:62:39:3b:95:96:76:07:62:
                    5a:99:a4:ff:53:bc:20:71:6a:8a:8a:08:44:13:e7:
                    87:90:0d:a1:7b:8b:a5:03:f5:da:81:b2:fb:c6:d6:
                    d4:d4:ec:26:60:a5:4e:9a:7a:4b:16:63:80:8d:53:
                    3b:5d:ea:f9:ec:dc:f0:7e:50:a8:42:dd:40:c6:fa:
                    e0:b2:d7:d5:59:68:67:df:14:00:8b:65:f9:80:a1:
                    48:f5:0f:9c:2b:6e:aa:b1:ce:be:19:97:67:ab:a5:
                    a0:8e:31:01:6a:49:d4:78:02:6a:42:59:50:f4:89:
                    74:10:2c:4a:b4:00:95:ba:ae:f8:38:1b:e8:b7:3e:
                    b7:3f:75:3f:98:b8:ea:c4:f7:36:e6:e6:9a:52:b3:
                    10:dd:7b:2e:64:56:35:e3:ce:83:1e:60:80:77:51:
                    9c:54:76:b2:01:3d:fe:b8:c2:c3:e1:27:43:45:b7:
                    c5:b4:62:b4:e5:3b:2e:d1:ce:35:cd:50:bb:59:63:
                    ff:e3:82:c9:f3:b2:a2:ce:0f:b4:a9:99:5e:af:5a:
                    92:ba:e4:e9:01:f2:26:fb:88:ac:cc:ed:50:bb:89:
                    1b:4d:2a:dd:30:16:79:bd:4e:77:e0:9b:a9:5a:46:
                    f8:d5:e7:9b:f3:11:57:5e:d4:95:4e:de:3c:a6:11:
                    27:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:F0:70:A3:E3:F9:AE:44:09:08:FD:E2:B0:7C:F7:FB:83:2D:03:B7
            X509v3 Authority Key Identifier:
                keyid:65:D2:95:CF:54:47:8D:F8:5A:D6:4A:EA:90:66:8B:C4:11:4F:D3:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/ZdKVz1RHjfha1krqkGaLxBFP0z4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BE2ED/19A7824C97DF11EDB95645F3F1222468/ZdKVz1RHjfha1krqkGaLxBFP0z4.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:ca:c1:67:29:66:03:e0:e1:f3:cc:45:7d:54:6a:c3:88:8a:
         a7:7a:d4:8a:4e:a3:1a:b0:b1:60:07:db:6d:cb:56:da:bd:f0:
         ff:3d:58:bc:fd:5b:a7:b6:57:6a:e2:63:25:84:45:aa:02:f5:
         50:44:4e:5a:c0:b1:01:f8:c4:28:48:5e:64:34:5f:e3:c8:b5:
         4a:14:c1:12:87:6d:b6:1a:19:17:75:00:ca:f0:2f:b9:cd:05:
         f7:26:91:10:8e:18:cb:ab:ec:f8:0e:96:48:7d:58:4a:7a:01:
         db:96:f7:04:26:1f:fe:a3:9e:5b:86:3e:ee:1d:a7:6f:1a:1d:
         ce:97:15:ce:f5:5d:f4:e9:67:b2:b9:8a:d4:bf:24:18:1e:c9:
         2d:35:50:c2:af:47:61:9d:6b:87:92:ac:74:61:63:2b:8d:da:
         10:45:6e:4b:24:21:bf:b3:3b:18:c1:38:f1:b0:91:95:eb:e0:
         1a:71:e3:ed:9a:d5:20:40:d2:fa:92:74:a9:72:18:f1:06:fc:
         a2:ef:65:f0:f2:36:9b:38:50:01:82:c3:df:c6:6e:34:68:b1:
         22:e7:08:77:31:7d:8d:b1:23:e1:3e:91:bd:6b:c2:59:dc:17:
         96:eb:6c:9b:6d:8a:7a:96:ef:6a:5c:be:01:0e:dd:af:42:91:
         d0:22:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 08:47:53 2025 by rpki-client