Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
File:                     1_pzTirYg6eruOt2mcdBlN3zfqM.mft (raw, json)
Hash identifier:          TcqB2ZgVROHUlO0c52LzpoV4AvLJQWTDn8ASC5jte34=
Subject key identifier:   88:59:FE:A8:62:C8:95:52:19:DE:07:E1:44:18:68:5C:C5:E2:80:34
Authority key identifier: D7:FA:73:4E:2A:D8:83:A7:AB:B8:EB:76:99:C7:41:94:DD:F3:7E:A3
Certificate issuer:       /CN=F36E1EE5AF/serialNumber=D7FA734E2AD883A7ABB8EB7699C74194DDF37EA3
Certificate serial:       0425
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
Manifest number:          0424
Signing time:             Tue 04 Nov 2025 04:29:23 +0000
Manifest this update:     Tue 04 Nov 2025 04:29:22 +0000
Manifest next update:     Thu 06 Nov 2025 04:29:22 +0000
Files and hashes:         1: 1_pzTirYg6eruOt2mcdBlN3zfqM.crl (hash: kKDxRWMVfvmdEfhq6QylfX6r1gUjBZGx1JnMz/YBZmA=)
                          2: 46F2D560934511ED92A7B996F1222468.roa (hash: nGUyvzk/a5+GFzWKOpMkRUu0fAOKcVAtnLG++SWQPm0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
                          rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 06 Nov 2025 04:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36E1EE5AF, serialNumber=D7FA734E2AD883A7ABB8EB7699C74194DDF37EA3
        Validity
            Not Before: Nov  4 04:29:22 2025 GMT
            Not After : Nov  6 04:29:22 2025 GMT
        Subject: CN=69098123-6cf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ae:8b:31:8b:61:54:53:e2:c8:38:2e:86:1b:
                    cd:62:e2:1e:22:fe:dc:8e:51:89:21:2b:28:ac:e4:
                    c2:fe:84:f2:67:d8:c9:38:80:c5:ee:48:3b:6a:6b:
                    c7:db:11:92:70:49:a4:e1:65:20:ba:e2:c6:00:f7:
                    d6:c2:83:07:2e:ae:74:ac:e0:5f:92:6c:f7:23:50:
                    07:37:e1:1e:a3:80:e0:b1:82:4e:1a:26:00:ba:ea:
                    ca:20:ed:8e:ed:59:ea:f3:79:e3:f5:5e:ab:3c:4c:
                    c6:86:d4:14:bb:0f:0e:a1:d3:24:36:c1:89:19:6c:
                    c1:94:64:1e:84:15:1f:99:65:38:df:aa:44:62:8c:
                    fc:47:bf:7a:cd:f4:0a:ce:95:29:32:1d:ab:1c:40:
                    61:f3:93:73:0e:c0:19:c1:71:8b:6e:0b:c6:35:75:
                    07:1b:81:1e:66:3c:d5:dc:4e:7b:d6:d6:56:ed:be:
                    51:89:41:c9:f8:51:8c:cf:35:61:d6:18:e1:a4:e5:
                    79:6d:33:98:0b:ba:75:f9:5b:63:85:9a:75:f3:ab:
                    26:71:9b:67:e7:c9:a3:31:11:96:33:7a:be:21:fe:
                    ef:2a:6b:cd:ec:48:cb:ef:89:0a:83:2e:30:eb:64:
                    39:9b:89:a5:9d:e2:7e:6e:c8:d4:f1:7b:d0:3a:86:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:59:FE:A8:62:C8:95:52:19:DE:07:E1:44:18:68:5C:C5:E2:80:34
            X509v3 Authority Key Identifier:
                keyid:D7:FA:73:4E:2A:D8:83:A7:AB:B8:EB:76:99:C7:41:94:DD:F3:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/1_pzTirYg6eruOt2mcdBlN3zfqM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36E1EE5/C3A862D6934111ED944CED8CF1222468/1_pzTirYg6eruOt2mcdBlN3zfqM.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:40:22:9e:b5:91:5e:07:0e:f6:2d:5a:28:d1:4a:4e:d6:a0:
         cc:bb:64:7a:c9:f6:de:54:ed:5b:52:21:4a:fe:49:eb:d6:d8:
         62:c4:1c:16:93:f3:23:5d:b8:91:20:99:78:59:82:49:c5:a8:
         77:13:8f:d2:25:df:89:6b:e6:9a:8b:e1:ea:6b:ca:7f:0b:7c:
         ac:21:78:9a:bb:cb:81:26:3a:a0:bd:1b:74:cf:5f:4c:ca:bc:
         ef:0c:b3:43:8d:a3:03:99:71:58:7b:1e:ed:8e:02:8a:fd:88:
         2f:27:27:2e:7c:30:33:97:c2:15:45:a1:16:11:13:5f:a7:42:
         50:2c:fb:f6:29:10:c4:dd:1c:1b:15:19:4e:40:bd:10:58:8f:
         66:08:41:15:0d:b0:6d:de:5b:8d:a3:06:9c:8b:ed:ef:cb:69:
         a8:fc:ef:93:c9:34:95:95:0d:c2:13:71:a6:9c:4a:75:d3:04:
         ea:68:31:77:2a:e8:3a:59:69:18:6f:eb:39:28:0d:8f:81:3a:
         d8:00:c0:5b:01:58:b0:a9:80:0b:17:2a:be:9b:87:95:d4:5b:
         d0:3e:db:c5:93:bc:b5:c9:67:84:34:5e:89:03:3c:95:6c:0b:
         00:4c:d4:08:fa:38:09:d6:a9:a3:15:1b:24:07:8a:a0:01:9c:
         e9:8f:fc:37
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICBCUwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RTFFRTVBRjExMC8GA1UEBRMoRDdGQTczNEUyQUQ4ODNBN0FCQjhFQjc2OTlDNzQx
OTREREYzN0VBMzAeFw0yNTExMDQwNDI5MjJaFw0yNTExMDYwNDI5MjJaMBgxFjAU
BgNVBAMTDTY5MDk4MTIzLTZjZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDrosxi2FUU+LIOC6GG81i4h4i/tyOUYkhKyis5ML+hPJn2Mk4gMXuSDtq
a8fbEZJwSaThZSC64sYA99bCgwcurnSs4F+SbPcjUAc34R6jgOCxgk4aJgC66sog
7Y7tWerzeeP1Xqs8TMaG1BS7Dw6h0yQ2wYkZbMGUZB6EFR+ZZTjfqkRijPxHv3rN
9ArOlSkyHascQGHzk3MOwBnBcYtuC8Y1dQcbgR5mPNXcTnvW1lbtvlGJQcn4UYzP
NWHWGOGk5XltM5gLunX5W2OFmnXzqyZxm2fnyaMxEZYzer4h/u8qa83sSMvviQqD
LjDrZDmbiaWd4n5uyNTxe9A6hvptAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUiFn+
qGLIlVIZ3gfhRBhoXMXigDQwHwYDVR0jBBgwFoAU1/pzTirYg6eruOt2mcdBlN3z
fqMwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkUxRUU1L0MzQTg2MkQ2OTM0MTExRUQ5NDRDRUQ4Q0YxMjIyNDY4LzFfcHpU
aXJZZzZlcnVPdDJtY2RCbE4zemZxTS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljLzFfcHpUaXJZZzZlcnVPdDJtY2RCbE4zemZxTS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RTFFRTUvQzNBODYyRDY5MzQxMTFFRDk0NENFRDhDRjEy
MjI0NjgvMV9welRpcllnNmVydU90Mm1jZEJsTjN6ZnFNLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqQCKetZFeBw72LVoo0UpO1qDMu2R6
yfbeVO1bUiFK/knr1thixBwWk/MjXbiRIJl4WYJJxah3E4/SJd+Ja+aai+Hqa8p/
C3ysIXiau8uBJjqgvRt0z19MyrzvDLNDjaMDmXFYex7tjgKK/YgvJycufDAzl8IV
RaEWERNfp0JQLPv2KRDE3RwbFRlOQL0QWI9mCEEVDbBt3luNowaci+3vy2mo/O+T
yTSVlQ3CE3GmnEp10wTqaDF3Kug6WWkYb+s5KA2PgTrYAMBbAViwqYALFyq+m4eV
1FvQPtvFk7y1yWeENF6JAzyVbAsATNQI+jgJ1qmjFRskB4qgAZzpj/w3
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:53:26 2025 by rpki-client