Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
File:                     vt43u99rvceiMipfCQ-A63EfBnk.mft (raw, json)
Hash identifier:          OyMs+wsU4tYDQvvLBAlDwjDZvyaNgrL+qBDl4amQnNg=
Subject key identifier:   38:A8:24:D6:08:62:61:60:FC:82:D9:F9:80:55:B3:44:46:A3:E9:5F
Authority key identifier: BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
Certificate issuer:       /CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Certificate serial:       045A
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
Manifest number:          045A
Signing time:             Fri 24 Jul 2026 03:35:55 +0000
Manifest this update:     Fri 24 Jul 2026 03:35:54 +0000
Manifest next update:     Sun 26 Jul 2026 03:35:54 +0000
Files and hashes:         1: vt43u99rvceiMipfCQ-A63EfBnk.crl (hash: NIW8x7A/RsKJAyumWd8XHk2VW1Pfjk3cRNkxYItF2Tk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1114 (0x45a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365B37DAF, serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
        Validity
            Not Before: Jul 24 03:35:54 2026 GMT
            Not After : Jul 26 03:35:54 2026 GMT
        Subject: CN=6a62dd9a-93b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a3:69:a3:13:d6:c1:0d:6f:a8:9a:89:57:42:
                    59:1e:c9:dd:10:7b:01:f3:0c:c7:ce:b6:90:92:67:
                    dc:89:8e:08:a4:82:d2:a7:2e:b2:1f:5e:f9:6f:18:
                    16:a2:08:74:ee:72:4c:c4:cf:49:63:c1:64:b0:43:
                    ac:c6:22:11:a8:2e:b4:3e:73:32:a8:27:c3:a6:0d:
                    d7:86:52:d8:61:8c:75:05:88:cd:d6:b6:68:33:bb:
                    b5:c4:be:72:9c:4d:6f:a4:be:26:e4:6e:36:4a:3c:
                    b0:78:66:c8:ea:5d:73:ac:2c:dc:9c:ac:3c:7b:8b:
                    2f:34:51:5d:54:14:f8:3f:19:e0:35:b6:7d:78:99:
                    44:99:f9:8d:e8:e2:b9:7e:94:70:ec:9d:01:7d:70:
                    82:f7:85:06:52:75:92:24:34:fd:76:e5:1d:21:96:
                    7a:88:21:08:83:21:94:cc:41:23:ef:a9:68:16:b9:
                    8d:72:78:ae:94:cc:bd:3f:63:09:c8:b2:63:a0:ca:
                    84:56:e3:39:76:92:3d:29:8d:dc:f7:66:66:d1:2a:
                    26:fd:d5:bc:fe:f0:02:6e:8e:5d:81:d1:68:0f:bc:
                    ac:88:46:6f:1d:98:2a:0d:c9:45:a6:29:0b:0e:3a:
                    6e:da:07:12:27:65:1b:a6:1c:16:7d:c8:53:af:70:
                    3a:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A8:24:D6:08:62:61:60:FC:82:D9:F9:80:55:B3:44:46:A3:E9:5F
            X509v3 Authority Key Identifier:
                keyid:BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:34:50:73:8e:b5:df:a4:d8:2d:fa:42:74:01:75:91:3d:8f:
         cc:ea:06:da:45:59:33:40:06:fb:ae:d6:91:84:cd:d6:c4:99:
         7c:93:d3:3f:25:c5:83:44:4b:c7:a8:17:b0:08:47:05:3f:4c:
         71:f8:e8:f4:90:c4:3b:f9:a3:2c:c7:36:89:a2:3a:50:35:f6:
         be:6a:3b:81:17:66:fa:c7:21:ec:e9:47:29:0e:f8:c6:ee:52:
         93:04:e2:fc:2c:c5:2e:26:bc:22:c4:b4:c3:d5:36:f9:ec:7b:
         80:5a:c3:8d:6e:bc:c8:01:7e:80:6c:99:c5:c9:30:cb:b4:f6:
         23:a8:0a:e5:fd:98:2c:c3:86:0f:f0:dc:bd:08:e9:12:06:25:
         3e:c5:43:2d:68:52:54:98:ac:fb:3f:59:16:e5:89:49:10:31:
         59:fd:a5:96:9e:02:ff:5d:16:cb:7e:71:24:fa:fb:9d:5f:b6:
         76:55:44:8c:6f:b3:45:fa:7a:62:7d:18:bf:5a:3d:5b:52:9a:
         ae:97:11:c3:03:78:50:6d:77:50:ad:99:c2:7f:d9:63:73:d6:
         48:db:c3:0b:29:f9:24:52:b0:f2:3b:65:78:99:b6:95:35:74:
         4d:ed:93:48:7d:c5:0d:8c:6f:d7:61:fa:71:58:f6:5c:2d:b8:
         13:9a:69:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:41 2026 by rpki-client