Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
File:                     Vgq77plEvBY3TSi-TCYHISxchBo.mft (raw, json)
Hash identifier:          7R9ZwxR6LQpHQcCtswpkn/iGcQ8w5LvgUsmjibS1r+I=
Subject key identifier:   60:82:3F:7C:EF:B1:16:E9:D4:8B:8F:57:4A:6B:5E:26:04:61:3E:5E
Authority key identifier: 56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A
Certificate issuer:       /CN=F3624E32AR/serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
Certificate serial:       0399
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
Manifest number:          0398
Signing time:             Mon 20 Oct 2025 03:31:29 +0000
Manifest this update:     Mon 20 Oct 2025 03:31:28 +0000
Manifest next update:     Wed 22 Oct 2025 03:31:28 +0000
Files and hashes:         1: Vgq77plEvBY3TSi-TCYHISxchBo.crl (hash: eL9fJUDrbai9X3p7GwbsUIRqbl9dkv9ixVoeNWzUp3g=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
                          rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 22 Oct 2025 00:26:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 921 (0x399)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AR, serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
        Validity
            Not Before: Oct 20 03:31:28 2025 GMT
            Not After : Oct 22 03:31:28 2025 GMT
        Subject: CN=68f5ad11-ec4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ab:00:24:0e:a5:68:1a:49:00:05:33:c5:90:
                    2f:d0:74:38:91:af:1e:0b:cf:b2:7d:5f:fa:3d:ae:
                    78:e7:3c:09:9e:42:dd:ef:29:59:4e:13:73:c8:d7:
                    a7:54:b7:d7:0e:39:77:fb:1d:f4:60:a8:cf:eb:df:
                    3d:3a:b4:d5:1f:88:0c:ae:cb:e4:6b:49:55:42:06:
                    71:85:39:a7:63:0c:89:24:86:ae:8b:dd:e7:b7:f8:
                    50:fa:f6:8c:c3:06:72:13:93:91:93:c4:3c:a3:ae:
                    52:2f:dd:0f:e4:63:83:0b:bb:1f:a2:96:48:d2:09:
                    dc:66:ee:e1:82:12:28:63:ac:41:74:c3:69:e7:6e:
                    b7:90:2a:55:69:06:1f:76:ed:90:d4:65:4d:3b:5d:
                    ca:8b:4a:55:c5:8d:73:9c:42:c6:c2:50:da:4b:9d:
                    29:c3:55:91:6f:f4:21:80:1a:43:be:ba:b8:1f:c3:
                    6d:d0:e3:f9:51:0b:96:64:18:06:54:3d:cd:fd:79:
                    74:64:c7:07:26:31:88:36:b8:2f:87:56:92:ff:df:
                    a8:49:a5:31:c9:45:2f:74:4b:86:ea:a3:08:0b:9d:
                    1c:da:91:aa:02:a0:4a:2d:b8:9a:b9:6b:6e:49:66:
                    47:72:40:48:44:e8:e0:6e:a5:45:32:83:65:5e:49:
                    31:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:82:3F:7C:EF:B1:16:E9:D4:8B:8F:57:4A:6B:5E:26:04:61:3E:5E
            X509v3 Authority Key Identifier:
                keyid:56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:6c:9c:ca:a3:64:56:7a:7f:e6:d0:36:32:c6:88:69:5e:2a:
         91:a3:07:46:a9:2f:1b:ff:cf:e2:79:03:1a:22:d8:f8:61:c3:
         0c:ee:2d:d8:38:2e:b2:76:41:78:f0:ee:2f:5c:41:30:70:90:
         74:22:c8:ea:d5:53:5f:00:2e:bd:bf:9c:c3:42:b5:e1:25:7b:
         42:f6:75:e4:7a:a2:cd:a4:1d:0c:c7:55:36:cf:6a:48:46:d5:
         07:fd:1f:73:56:bd:51:31:32:cc:3a:ab:9c:82:cb:12:4c:e2:
         b7:40:52:c6:71:fd:eb:41:29:a2:c9:cc:c9:09:3e:d0:2b:59:
         f3:f3:bc:ca:0f:cf:37:52:11:4f:20:e1:a3:12:0a:81:24:24:
         e2:2c:e5:84:17:02:9e:09:14:92:e9:f4:cf:bc:8b:86:3c:5c:
         28:85:51:28:70:21:46:13:f8:7e:37:ee:80:d7:e6:31:41:68:
         98:e8:a0:c5:d1:c4:7d:78:9d:25:33:1b:26:e9:9f:cd:fe:d5:
         4e:02:ad:6a:43:33:c3:ac:71:94:e1:6e:34:2e:ec:26:43:e1:
         5f:87:6c:46:69:09:37:2c:e3:f5:25:65:95:ed:4e:bd:43:c3:
         8b:30:17:9e:e5:80:af:e8:1b:0c:72:73:e9:03:5d:83:6a:ed:
         c4:a4:be:4e
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA5kwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
MjRFMzJBUjExMC8GA1UEBRMoNTYwQUJCRUU5OTQ0QkMxNjM3NEQyOEJFNEMyNjA3
MjEyQzVDODQxQTAeFw0yNTEwMjAwMzMxMjhaFw0yNTEwMjIwMzMxMjhaMBgxFjAU
BgNVBAMTDTY4ZjVhZDExLWVjNGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDfqwAkDqVoGkkABTPFkC/QdDiRrx4Lz7J9X/o9rnjnPAmeQt3vKVlOE3PI
16dUt9cOOXf7HfRgqM/r3z06tNUfiAyuy+RrSVVCBnGFOadjDIkkhq6L3ee3+FD6
9ozDBnITk5GTxDyjrlIv3Q/kY4MLux+ilkjSCdxm7uGCEihjrEF0w2nnbreQKlVp
Bh927ZDUZU07XcqLSlXFjXOcQsbCUNpLnSnDVZFv9CGAGkO+urgfw23Q4/lRC5Zk
GAZUPc39eXRkxwcmMYg2uC+HVpL/36hJpTHJRS90S4bqowgLnRzakaoCoEotuJq5
a25JZkdyQEhE6OBupUUyg2VeSTFTAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUYII/
fO+xFunUi49XSmteJgRhPl4wHwYDVR0jBBgwFoAUVgq77plEvBY3TSi+TCYHISxc
hBowDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjI0RTMyL0YxMzQwRTRFRUU3MjExRURCQTUzMjcxNjRBRDlFNkZDL1ZncTc3
cGxFdkJZM1RTaS1UQ1lISVN4Y2hCby5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1ZncTc3cGxFdkJZM1RTaS1UQ1lISVN4Y2hCby5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2MjRFMzIvRjEzNDBFNEVFRTcyMTFFREJBNTMyNzE2NEFEOUU2
RkMvVmdxNzdwbEV2QlkzVFNpLVRDWUhJU3hjaEJvLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCYbJzKo2RWen/m0DYyxohpXiqRowdGqS8b
/8/ieQMaItj4YcMM7i3YOC6ydkF48O4vXEEwcJB0Isjq1VNfAC69v5zDQrXhJXtC
9nXkeqLNpB0Mx1U2z2pIRtUH/R9zVr1RMTLMOqucgssSTOK3QFLGcf3rQSmiyczJ
CT7QK1nz87zKD883UhFPIOGjEgqBJCTiLOWEFwKeCRSS6fTPvIuGPFwohVEocCFG
E/h+N+6A1+YxQWiY6KDF0cR9eJ0lMxsm6Z/N/tVOAq1qQzPDrHGU4W40LuwmQ+Ff
h2xGaQk3LOP1JWWV7U69Q8OLMBee5YCv6BsMcnPpA12Dau3EpL5O
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:44 2025 by rpki-client