Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
File:                     vuhQJeKvFdQRCrom9RsNdAV9rss.mft (raw, json)
Hash identifier:          QgUMT7z733zKyd/JSRLG4TbOyUrnnrXUiXQPGS1xEOo=
Subject key identifier:   A6:07:50:D6:31:3C:0D:7A:3D:BE:C6:85:09:3E:A0:C5:85:09:37:41
Authority key identifier: BE:E8:50:25:E2:AF:15:D4:11:0A:BA:26:F5:1B:0D:74:05:7D:AE:CB
Certificate issuer:       /CN=F3617D8EAF/serialNumber=BEE85025E2AF15D4110ABA26F51B0D74057DAECB
Certificate serial:       03AC
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
Manifest number:          03AB
Signing time:             Sun 19 Oct 2025 03:28:24 +0000
Manifest this update:     Sun 19 Oct 2025 03:28:23 +0000
Manifest next update:     Tue 21 Oct 2025 03:28:23 +0000
Files and hashes:         1: vuhQJeKvFdQRCrom9RsNdAV9rss.crl (hash: D5d2yHN6LBcix1tOC8Q2llxbSB93Gyb23O/Xz3J7ssA=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 21 Oct 2025 00:06:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 940 (0x3ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3617D8EAF, serialNumber=BEE85025E2AF15D4110ABA26F51B0D74057DAECB
        Validity
            Not Before: Oct 19 03:28:23 2025 GMT
            Not After : Oct 21 03:28:23 2025 GMT
        Subject: CN=68f45ad8-aa7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:40:57:da:e5:2c:03:69:b7:b6:36:a5:ee:02:
                    35:32:3a:f9:db:19:31:13:73:1d:97:5f:ae:e5:27:
                    2f:63:90:66:b3:a3:dc:1c:75:f7:17:69:86:f9:f6:
                    83:b2:9e:d8:ec:8a:79:5b:10:02:2c:b9:3f:1e:56:
                    65:1f:d2:dc:0b:07:3b:26:40:b3:6a:4d:44:cc:e6:
                    f0:d6:2d:7e:8e:7d:f9:20:2c:ca:a1:47:11:7f:a3:
                    7f:1d:dc:b6:7f:cf:4a:4a:29:e7:54:41:b7:e2:35:
                    6a:61:c2:a3:0f:4b:3f:45:e9:f7:e1:e4:95:d0:61:
                    5c:a9:7d:da:e2:2d:9b:b6:11:bb:66:85:af:4f:a8:
                    d0:5c:fb:53:3e:27:e3:6b:ee:03:7c:76:c8:46:a1:
                    1a:db:a6:fd:4e:4c:7c:25:f5:5c:5b:03:ee:cc:29:
                    c4:6c:1f:fb:f9:e3:5e:5b:1b:83:c9:82:79:0e:cd:
                    5b:45:16:94:f7:82:72:5b:6b:14:30:e6:b1:c5:56:
                    77:56:c6:8e:eb:4d:61:df:1d:6c:7d:ba:c3:76:03:
                    76:e2:97:1e:22:df:ea:a0:41:66:98:be:ee:dc:59:
                    7c:2f:41:1a:0d:61:2d:04:86:a7:5b:25:a6:ec:fc:
                    6d:16:17:9e:64:76:d7:b9:9c:8d:d0:9d:05:ba:37:
                    73:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:07:50:D6:31:3C:0D:7A:3D:BE:C6:85:09:3E:A0:C5:85:09:37:41
            X509v3 Authority Key Identifier:
                keyid:BE:E8:50:25:E2:AF:15:D4:11:0A:BA:26:F5:1B:0D:74:05:7D:AE:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vuhQJeKvFdQRCrom9RsNdAV9rss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3617D8E/C5385F48DF5E11EDA77B9BAA2F6D8C1D/vuhQJeKvFdQRCrom9RsNdAV9rss.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:cd:92:9b:6c:0e:36:ba:f3:a1:70:3e:8c:e5:73:11:0f:93:
         be:83:22:59:54:a2:52:e1:8b:69:39:f7:a1:e7:df:15:ac:2a:
         90:54:ca:e2:9c:5e:d2:45:b0:b4:7a:a1:fc:1f:00:f0:fd:a3:
         7f:e4:92:2b:81:73:21:80:59:71:80:58:e0:ae:63:90:d6:b5:
         8e:83:aa:3d:7e:84:38:67:fa:9f:c8:d5:2a:80:ef:07:a1:80:
         8b:8c:fe:78:50:0d:ba:fd:f3:69:2b:ec:c4:bc:4e:20:4a:be:
         82:3e:af:c0:82:72:4d:b1:cd:c1:a8:17:8d:36:b3:23:c1:a6:
         77:77:03:4d:58:ca:b2:41:9b:32:a0:49:ab:98:33:45:ae:41:
         69:ff:fd:97:3e:5a:93:71:6d:9a:98:69:11:fd:40:e3:3a:a9:
         e7:c3:fa:94:fc:98:04:78:4d:cc:b1:95:98:34:d6:f0:dd:b0:
         9f:5b:b8:ef:1a:d8:af:db:39:4f:bc:cf:85:ab:bc:c1:0d:07:
         71:6c:4e:07:80:7f:5f:93:ce:c5:c3:3d:dc:84:21:63:ca:0d:
         13:11:0b:5b:28:49:27:e8:23:7f:ef:4c:ad:7b:42:4c:f8:0c:
         02:64:44:e6:66:77:14:c9:a5:94:e8:e4:67:aa:0a:3f:6f:5f:
         f2:d4:5d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:26:42 2025 by rpki-client