Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
File:                     5zU0-ODMucOEExGNd_3qToCP6jE.mft (raw, json)
Hash identifier:          yXjJAvwJldx9FWLrvX6Wjg3ahRVVCcAxDMPikiZO4l4=
Subject key identifier:   C5:99:ED:16:E2:19:67:34:A3:73:60:F8:34:49:F5:BB:18:33:89:35
Authority key identifier: E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31
Certificate issuer:       /CN=F36F6034AR/serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
Certificate serial:       0817
Authority info access:    rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
Manifest number:          0816
Signing time:             Wed 05 Nov 2025 01:48:29 +0000
Manifest this update:     Wed 05 Nov 2025 01:48:28 +0000
Manifest next update:     Fri 07 Nov 2025 01:48:28 +0000
Files and hashes:         1: 5zU0-ODMucOEExGNd_3qToCP6jE.crl (hash: X5G9PtjfWqeTQK0E03vRjmE7yztROVSIWtwiiYQZG9A=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                          rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2071 (0x817)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F6034AR, serialNumber=E73534F8E0CCB9C38413118D77FDEA4E808FEA31
        Validity
            Not Before: Nov  5 01:48:28 2025 GMT
            Not After : Nov  7 01:48:28 2025 GMT
        Subject: CN=690aaced-bfdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bf:ea:1a:33:3c:20:a7:8d:13:04:54:79:fd:
                    b9:57:73:52:7b:32:a1:7e:ab:0c:d1:24:2f:a6:d3:
                    ed:6c:85:2f:17:0d:fe:95:5f:84:5e:22:56:7a:7f:
                    c9:8f:fd:ab:a3:88:95:49:1f:f9:f4:55:40:e3:9b:
                    a6:f8:a8:b3:4f:bb:67:f4:68:af:c1:6d:8f:57:13:
                    d9:33:56:e4:fe:c6:9d:67:5b:fe:b7:c6:ee:f3:cb:
                    d8:8f:7c:d3:19:2f:c1:d2:6e:10:a9:c0:ea:e0:6d:
                    23:52:ea:7a:fe:51:19:60:ac:9b:6f:2e:a5:19:79:
                    37:5e:fa:e8:f1:da:8f:db:67:2d:d9:87:0b:f5:4a:
                    90:48:74:f5:68:00:17:38:51:3a:46:f6:53:7f:a0:
                    2e:f6:95:33:a1:94:68:c4:00:d3:56:7e:a8:4f:b3:
                    80:b8:ad:88:c6:bf:11:84:e8:5e:00:7a:0b:74:aa:
                    1e:5d:dc:04:b5:d8:b2:26:2f:d7:99:da:89:6e:7f:
                    52:74:84:7d:f7:04:c5:39:17:1b:de:24:d7:fe:b6:
                    5c:8a:24:2e:53:23:1a:36:27:45:2a:9a:4b:4d:06:
                    d3:d7:6a:6e:14:d3:da:5d:bb:f6:39:92:92:99:43:
                    6d:7a:a5:b8:6d:3f:3d:53:1b:f8:3a:a2:bb:05:0f:
                    48:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:99:ED:16:E2:19:67:34:A3:73:60:F8:34:49:F5:BB:18:33:89:35
            X509v3 Authority Key Identifier:
                keyid:E7:35:34:F8:E0:CC:B9:C3:84:13:11:8D:77:FD:EA:4E:80:8F:EA:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/5zU0-ODMucOEExGNd_3qToCP6jE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F6034/EA17670490FC11EA8C4F5B6EF8AEA228/5zU0-ODMucOEExGNd_3qToCP6jE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:52:5b:d4:6b:83:ad:f7:27:1d:e8:0e:44:5a:bf:ea:80:a8:
         4b:5d:83:6d:5d:43:a0:0f:36:7d:61:f2:cb:9a:12:93:cc:f9:
         11:b7:2b:84:fe:c6:3d:27:b2:63:04:7c:5b:01:d3:bd:e4:6c:
         9e:db:bb:0a:54:ac:42:8e:a2:ab:bd:04:b8:91:88:00:51:ba:
         77:b1:45:02:f9:cd:54:b1:54:63:8c:c9:2a:01:eb:68:3d:bb:
         41:68:23:07:5e:0f:0a:0b:64:f3:5b:de:ee:89:42:ee:71:f5:
         1a:83:49:b9:19:44:c5:67:19:80:4e:4f:f4:94:50:f6:30:82:
         3f:d4:0c:03:dd:b7:46:44:00:70:df:59:12:5f:b0:93:55:08:
         de:04:05:7c:07:5e:05:78:c2:e8:13:10:7b:81:e0:45:bf:dd:
         2f:09:d1:58:fa:f7:e3:8d:df:74:cd:99:59:ce:ce:15:bd:10:
         30:2e:0a:c8:de:52:2e:41:8b:7e:54:06:cc:a6:ca:98:5f:91:
         80:2d:ea:75:14:70:55:8a:33:63:e6:e7:15:00:cb:e1:8b:d0:
         a3:30:39:f5:43:94:54:02:72:8d:a7:c1:3f:3d:d7:d9:22:bc:
         87:34:cc:ae:e8:90:15:aa:4c:52:e8:82:3d:47:be:13:6a:a2:
         ce:fc:98:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:46:52 2025 by rpki-client