Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft
File:                     VG_z86lS6oeZmUVVaekH4Pt8gZs.mft (raw, json)
Hash identifier:          VYSYG+5U+yFLLCsI0ZwDuVCCTa4QZ3tivY651WYejqU=
Subject key identifier:   CE:AB:70:5F:2A:D9:CC:A4:20:5C:0D:D7:6F:4F:19:98:81:E6:6A:83
Authority key identifier: 54:6F:F3:F3:A9:52:EA:87:99:99:45:55:69:E9:07:E0:FB:7C:81:9B
Certificate issuer:       /CN=F3611ED8AF/serialNumber=546FF3F3A952EA879999455569E907E0FB7C819B
Certificate serial:       023E
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VG_z86lS6oeZmUVVaekH4Pt8gZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft
Manifest number:          023D
Signing time:             Thu 26 Mar 2026 05:22:48 +0000
Manifest this update:     Thu 26 Mar 2026 05:22:47 +0000
Manifest next update:     Sat 28 Mar 2026 05:22:47 +0000
Files and hashes:         1: VG_z86lS6oeZmUVVaekH4Pt8gZs.crl (hash: 15ZwI38CUzMmXCDyRVkAlUookXRZqgOLr4Aeo5rNcAs=)
                          2: 8C71A80E71D911EF95953447762E951A.roa (hash: qQJ1tyFupoDgwet6xtHwuOu1NKoamzpsB9579wpp6Y4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VG_z86lS6oeZmUVVaekH4Pt8gZs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 574 (0x23e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611ED8AF, serialNumber=546FF3F3A952EA879999455569E907E0FB7C819B
        Validity
            Not Before: Mar 26 05:22:47 2026 GMT
            Not After : Mar 28 05:22:47 2026 GMT
        Subject: CN=69c4c2a8-c2ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:16:6e:48:83:22:9e:a5:76:29:e0:a5:91:2b:
                    a7:61:f0:86:71:f0:65:9b:48:3d:c1:ec:fc:b1:80:
                    a3:79:35:ee:8e:f6:59:f6:d9:6d:d3:d0:eb:d5:d1:
                    58:99:b1:8b:59:49:35:87:35:0f:0b:b9:59:4b:48:
                    5d:af:52:05:7f:58:5b:d3:68:df:db:41:25:ba:a3:
                    bc:e2:39:a9:bd:8c:93:8b:7e:d8:e4:eb:41:8a:8d:
                    67:9d:6a:57:d2:15:4a:a7:00:cd:8f:aa:ac:1c:95:
                    dd:6e:f7:b4:7b:1f:38:64:94:b9:06:a2:3a:db:09:
                    49:33:02:5a:57:30:89:52:40:97:11:a2:eb:c1:7c:
                    be:50:5e:bd:39:c5:f7:ee:2a:d2:5a:3f:43:43:dc:
                    52:3a:09:ec:fd:0d:e5:a4:0b:4d:6a:be:51:34:b7:
                    34:16:c2:2e:ee:3a:d2:5f:3e:d7:1a:4f:4f:20:62:
                    a8:0a:06:2a:7f:63:e9:27:b8:c8:9f:cf:8e:17:bb:
                    e2:8b:ac:11:2c:7d:09:ca:c9:eb:e0:17:77:c5:87:
                    57:31:be:62:33:7a:86:c4:12:87:71:0c:bb:2f:05:
                    2e:c9:7c:52:7f:2a:15:29:2e:e0:21:cc:53:46:a2:
                    c9:f1:f7:13:65:49:0e:5b:0b:be:16:4a:c9:71:8e:
                    28:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AB:70:5F:2A:D9:CC:A4:20:5C:0D:D7:6F:4F:19:98:81:E6:6A:83
            X509v3 Authority Key Identifier:
                keyid:54:6F:F3:F3:A9:52:EA:87:99:99:45:55:69:E9:07:E0:FB:7C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VG_z86lS6oeZmUVVaekH4Pt8gZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:e3:74:ee:4f:45:b4:5a:8d:83:93:de:b7:2c:0b:5b:2e:08:
         da:b5:c1:df:90:48:e8:3c:d2:04:25:7c:aa:04:ac:b0:30:46:
         bd:83:df:22:72:e0:cc:df:f8:f5:2c:18:47:bb:08:9e:ea:1c:
         68:1a:0c:4e:86:76:da:1e:1e:38:5a:7c:7b:ef:78:91:7f:37:
         91:04:8d:3d:18:b9:4c:53:39:fd:44:b2:b8:27:03:d2:43:e3:
         65:be:04:cf:69:74:23:31:ac:ff:4f:d8:f4:d5:81:4f:5e:a0:
         70:4a:85:0b:0e:ad:d0:53:c8:8c:62:d8:0c:c8:74:8a:9c:f8:
         ee:45:01:ee:2e:d0:c5:bd:d4:4e:36:44:58:96:e1:0f:01:51:
         ec:b7:cb:fd:70:b0:ef:5c:19:47:38:60:94:10:bd:07:1b:5a:
         e1:01:93:1d:bb:7f:62:73:3b:4f:b2:79:0a:c9:00:38:d0:e9:
         64:4d:6c:1a:1d:ed:a6:fc:9e:ba:18:43:3a:be:a2:14:64:a2:
         c9:3e:b1:27:76:3e:38:28:96:4d:8b:ee:83:56:a5:1b:c8:9c:
         92:9f:fa:45:06:77:29:ba:5d:78:92:30:3a:ca:39:ba:de:39:
         4c:dc:71:bc:0e:11:8b:82:68:0e:dd:90:83:cc:07:28:64:fe:
         18:4b:cc:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:56:35 2026 by rpki-client