Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
File:                     vt43u99rvceiMipfCQ-A63EfBnk.mft (raw, json)
Hash identifier:          hG9B+tVMhg+QnIaWY+VwqRhKZf6Fz9gwdcOAxMd8qx8=
Subject key identifier:   60:D3:50:DB:A9:3E:7C:32:11:F9:45:8E:07:60:95:F7:EA:28:77:DC
Authority key identifier: BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
Certificate issuer:       /CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Certificate serial:       03E1
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
Manifest number:          03E1
Signing time:             Thu 26 Mar 2026 04:16:36 +0000
Manifest this update:     Thu 26 Mar 2026 04:16:35 +0000
Manifest next update:     Sat 28 Mar 2026 04:16:35 +0000
Files and hashes:         1: vt43u99rvceiMipfCQ-A63EfBnk.crl (hash: 7Wb7SWmpTGGl/ISGZYcrP+shrrupbHDhvBhjMXyRwEk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 993 (0x3e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365B37DAF, serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
        Validity
            Not Before: Mar 26 04:16:35 2026 GMT
            Not After : Mar 28 04:16:35 2026 GMT
        Subject: CN=69c4b324-b4f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:df:0e:20:f0:26:81:5b:fd:9f:50:e2:da:93:
                    d1:5c:46:20:27:d8:16:df:c1:9f:ee:af:4b:f0:a4:
                    ac:81:a1:29:65:0f:c2:27:f2:0a:f2:4d:c7:b5:d3:
                    7a:2b:dc:70:6c:dd:87:8a:dd:a6:3b:7d:26:5c:9b:
                    6b:34:c1:3c:2e:b0:a6:52:4c:38:3a:c4:3c:24:66:
                    ee:77:e0:6d:a3:37:a8:c2:53:ef:1b:68:cd:30:1c:
                    63:28:10:3d:e1:62:06:56:95:17:d0:6e:d8:9b:e8:
                    65:ec:6c:89:eb:de:8e:2a:4f:63:db:d6:81:6f:a2:
                    81:f5:08:0b:d6:9a:10:f5:3c:4a:64:b5:4b:64:11:
                    5a:d9:95:f4:8c:96:92:19:83:c1:8a:7a:38:8a:c8:
                    42:76:6e:ed:e2:79:e7:56:33:a8:44:95:39:11:a2:
                    56:e5:dc:f5:70:a5:5b:df:0a:e4:63:f9:01:b2:4c:
                    ff:14:90:11:7c:15:4f:d5:36:0d:ed:4f:fe:77:5d:
                    39:02:22:73:d5:14:8b:3f:e0:20:c2:5d:99:84:d3:
                    b6:64:0c:57:81:8d:b3:1b:5d:24:72:3a:09:84:fd:
                    03:2f:58:db:68:5b:c0:47:90:c3:02:58:bc:49:dc:
                    fd:ed:46:12:b9:2e:89:83:5f:80:6e:cf:d7:14:f7:
                    9c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D3:50:DB:A9:3E:7C:32:11:F9:45:8E:07:60:95:F7:EA:28:77:DC
            X509v3 Authority Key Identifier:
                keyid:BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:cc:c1:9e:43:bd:6e:3f:76:4f:ee:ce:3a:27:c9:48:23:72:
         5b:06:87:c6:82:7d:7e:1c:e9:54:95:1a:51:f6:05:ba:fd:af:
         63:c6:6e:1a:20:c7:5d:89:c8:32:46:68:71:b8:0f:88:01:34:
         e3:db:24:1f:5e:ce:a7:db:fd:14:cb:95:04:2b:fd:64:d8:12:
         e9:33:40:1a:8e:94:9b:50:04:7e:7b:90:db:d6:70:27:3b:e7:
         83:b4:0e:39:c4:53:c7:60:b8:c7:7f:07:ad:66:24:84:99:9d:
         4c:8a:fb:a6:ed:74:82:56:cb:d6:24:54:a0:d3:44:dc:5b:7c:
         96:7e:81:72:23:4c:f7:9d:41:4a:af:ba:dc:a7:c6:6c:43:06:
         c8:31:dd:cb:0a:76:ea:13:0f:71:9d:0f:3c:08:20:a8:99:a9:
         bc:33:01:b7:d5:7d:05:33:d7:d3:3b:9b:01:a1:91:10:8c:52:
         4b:dc:2d:bd:48:ef:ff:b1:a8:f1:51:b7:d7:d5:86:26:bc:26:
         cb:84:6c:ef:4b:9e:d4:51:eb:4a:db:91:d8:b4:57:bf:e6:c3:
         6c:cb:81:f7:14:8c:85:7c:42:6d:a0:01:60:b0:b1:bd:90:e0:
         05:e2:22:5d:72:fa:23:b2:43:a2:84:61:88:20:ab:09:1a:2f:
         d3:37:4a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:52 2026 by rpki-client