Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
File:                     zQg69dJxoPLdqw8VC-sAXzipRrE.mft (raw, json)
Hash identifier:          JANPVPgXQrNgssBI+CMLK0nUYwwpewt4ubY2QsSuphs=
Subject key identifier:   28:E8:E4:C1:F1:07:CC:A4:75:A1:6B:44:5C:ED:64:08:FF:CA:63:E3
Authority key identifier: CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1
Certificate issuer:       /CN=F36FF546AF/serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
Certificate serial:       0959
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
Manifest number:          0957
Signing time:             Wed 05 Nov 2025 01:30:14 +0000
Manifest this update:     Wed 05 Nov 2025 01:30:13 +0000
Manifest next update:     Fri 07 Nov 2025 01:30:13 +0000
Files and hashes:         1: zQg69dJxoPLdqw8VC-sAXzipRrE.crl (hash: mike2ZLANJ9WDbL6kpqWQP0iX1V+7pjuUDmwWwVf3No=)
                          2: 1C0D37FA91F011E9AE72377FF8AEA228.roa (hash: 1FCw+Y3uXimIvmrFhMWwVuIRqYo1LXHBTvbNdEsq7eQ=)
                          3: FB654B0091EF11E99DA90E7FF8AEA228.roa (hash: nhD+pe2BQnxbsRGwyft8O4mm+dCir5b5n7iU0KS6i3g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
                          rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2393 (0x959)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36FF546AF, serialNumber=CD083AF5D271A0F2DDAB0F150BEB005F38A946B1
        Validity
            Not Before: Nov  5 01:30:13 2025 GMT
            Not After : Nov  7 01:30:13 2025 GMT
        Subject: CN=690aa8a6-561f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ea:2d:cc:b1:eb:11:cc:55:60:68:8f:c5:9a:
                    d8:64:55:1c:2f:0c:4c:f9:f4:89:69:e5:05:c1:59:
                    ab:d9:e6:58:d8:db:58:0a:57:f9:f9:e7:0f:d6:ea:
                    b3:09:b0:ae:b1:af:11:85:af:08:7d:6a:f1:76:56:
                    ba:5c:ce:e0:ae:89:62:dc:07:00:b0:3a:84:f6:d7:
                    98:15:32:cd:b1:a4:e6:f6:27:d6:e9:b1:0f:54:19:
                    72:a5:96:5f:1d:e0:c6:26:c3:d7:c4:46:af:ac:81:
                    a8:38:e0:5b:c4:4f:ac:f2:9b:da:ea:af:ca:5d:5d:
                    cd:a7:1f:6a:25:2a:46:6f:a5:4b:35:4f:8a:ee:ad:
                    51:e8:3e:b7:54:25:4a:bf:0a:fa:a8:03:2f:29:1b:
                    eb:5d:da:df:f5:e8:d0:f3:63:1b:88:27:dd:a6:05:
                    14:0a:1a:f4:2b:31:99:83:5e:b4:03:12:5f:8d:d4:
                    db:7b:aa:3c:d9:72:67:1b:62:a4:6b:7c:50:05:12:
                    2c:d2:c5:a0:5e:e0:78:7d:5c:84:a3:e9:c1:f6:38:
                    9e:a0:b3:1f:b0:13:d3:7f:d6:74:d6:e8:09:dc:43:
                    65:f2:fb:4c:89:80:78:78:72:80:14:1a:62:9b:7a:
                    30:3c:be:9f:e6:d5:7c:a4:2f:c5:53:8d:77:3a:4e:
                    75:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E8:E4:C1:F1:07:CC:A4:75:A1:6B:44:5C:ED:64:08:FF:CA:63:E3
            X509v3 Authority Key Identifier:
                keyid:CD:08:3A:F5:D2:71:A0:F2:DD:AB:0F:15:0B:EB:00:5F:38:A9:46:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/zQg69dJxoPLdqw8VC-sAXzipRrE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36FF546/872A395091ED11E9976B227DF8AEA228/zQg69dJxoPLdqw8VC-sAXzipRrE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d3:16:db:e7:3b:d7:a2:84:a4:fe:49:53:b0:df:ff:17:61:
         cf:90:ee:22:da:66:32:05:32:7f:9a:4b:2b:e1:86:ea:98:96:
         e2:60:44:95:2b:95:ce:94:bd:ab:ff:b7:79:95:1a:13:ca:47:
         ad:af:e9:71:5b:7a:df:15:8a:9e:8c:f9:10:f3:11:33:07:c9:
         ab:65:48:66:c7:84:f0:e9:f1:69:60:15:a6:29:e5:97:24:4b:
         0a:b4:fa:b2:41:1f:1d:26:e9:6a:4e:c0:8c:2b:97:e6:9e:84:
         f6:a3:a3:ba:8d:33:15:c3:8d:96:4a:3c:ac:e8:b2:0f:51:27:
         a9:25:5f:de:75:a1:1f:cd:ba:71:b1:55:b0:de:62:c6:a2:95:
         43:78:4f:46:ac:28:c5:88:16:4d:d8:b2:b2:10:ef:2b:04:86:
         e3:f2:71:80:da:0a:00:9e:c2:60:f1:c3:9b:81:0c:06:94:e4:
         13:dd:e4:38:59:6f:db:72:dd:eb:58:39:48:5b:83:1d:5a:b3:
         0d:38:f5:a1:fd:63:a1:6f:c6:1e:5e:f6:22:9c:76:83:a8:f7:
         bd:b7:40:c0:72:82:3d:e2:18:78:64:36:7e:c7:ea:f9:cc:ac:
         f6:ad:6e:49:f9:91:e6:3d:44:be:3e:0b:aa:d4:fb:67:71:09:
         76:89:a5:02
-----BEGIN CERTIFICATE-----
MIIFljCCBH6gAwIBAgICCVkwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
RkY1NDZBRjExMC8GA1UEBRMoQ0QwODNBRjVEMjcxQTBGMkREQUIwRjE1MEJFQjAw
NUYzOEE5NDZCMTAeFw0yNTExMDUwMTMwMTNaFw0yNTExMDcwMTMwMTNaMBgxFjAU
BgNVBAMTDTY5MGFhOGE2LTU2MWYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQC66i3MsesRzFVgaI/FmthkVRwvDEz59Ilp5QXBWavZ5ljY21gKV/n55w/W
6rMJsK6xrxGFrwh9avF2VrpczuCuiWLcBwCwOoT215gVMs2xpOb2J9bpsQ9UGXKl
ll8d4MYmw9fERq+sgag44FvET6zym9rqr8pdXc2nH2olKkZvpUs1T4rurVHoPrdU
JUq/CvqoAy8pG+td2t/16NDzYxuIJ92mBRQKGvQrMZmDXrQDEl+N1Nt7qjzZcmcb
YqRrfFAFEizSxaBe4Hh9XISj6cH2OJ6gsx+wE9N/1nTW6AncQ2Xy+0yJgHh4coAU
GmKbejA8vp/m1XykL8VTjXc6TnVXAgMBAAGjggK4MIICtDAdBgNVHQ4EFgQUKOjk
wfEHzKR1oWtEXO1kCP/KY+MwHwYDVR0jBBgwFoAUzQg69dJxoPLdqw8VC+sAXzip
RrEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNkZGNTQ2Lzg3MkEzOTUwOTFFRDExRTk5NzZCMjI3REY4QUVBMjI4L3pRZzY5
ZEp4b1BMZHF3OFZDLXNBWHppcFJyRS5jcmwwZwYIKwYBBQUHAQEEWzBZMFcGCCsG
AQUFBzAChktyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hZnJp
bmljL3pRZzY5ZEp4b1BMZHF3OFZDLXNBWHppcFJyRS5jZXIwTwYDVR0gAQH/BEUw
QzBBBggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5p
Yy5uZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEF
BQcwC4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVy
X3JlcG9zaXRvcnkvRjM2RkY1NDYvODcyQTM5NTA5MUVEMTFFOTk3NkIyMjdERjhB
RUEyMjgvelFnNjlkSnhvUExkcXc4VkMtc0FYemlwUnJFLm1mdDA1BggrBgEFBQcw
DYYpaHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYI
KwYBBQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAL0xbb5zvXooSk/klTsN//F2HPkO4i
2mYyBTJ/mksr4YbqmJbiYESVK5XOlL2r/7d5lRoTyketr+lxW3rfFYqejPkQ8xEz
B8mrZUhmx4Tw6fFpYBWmKeWXJEsKtPqyQR8dJulqTsCMK5fmnoT2o6O6jTMVw42W
Sjys6LIPUSepJV/edaEfzbpxsVWw3mLGopVDeE9GrCjFiBZN2LKyEO8rBIbj8nGA
2goAnsJg8cObgQwGlOQT3eQ4WW/bct3rWDlIW4MdWrMNOPWh/WOhb8YeXvYinHaD
qPe9t0DAcoI94hh4ZDZ+x+r5zKz2rW5J+ZHmPUS+Pguq1PtncQl2iaUC
-----END CERTIFICATE-----
Generated at Wed Nov 5 14:43:20 2025 by rpki-client