Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
File:                     M_vh3N40HGSYaNQWvz6gAALE3yA.mft (raw, json)
Hash identifier:          /pQrBKYUHQj1FVfY+Suai4KLjwgGlK7wFxDZsh2IsUE=
Subject key identifier:   AB:65:1D:81:2A:BF:B5:3C:21:F0:1E:02:E9:44:F6:B1:06:54:81:FD
Authority key identifier: 33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20
Certificate issuer:       /CN=F365C754AF/serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
Certificate serial:       0460
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
Manifest number:          045C
Signing time:             Thu 26 Mar 2026 03:59:22 +0000
Manifest this update:     Thu 26 Mar 2026 03:59:21 +0000
Manifest next update:     Sat 28 Mar 2026 03:59:21 +0000
Files and hashes:         1: M_vh3N40HGSYaNQWvz6gAALE3yA.crl (hash: 6r72E67w6QdEqd1pBEEKAt+gEPuU7cE3eusr4uYee/0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1120 (0x460)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C754AF, serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
        Validity
            Not Before: Mar 26 03:59:21 2026 GMT
            Not After : Mar 28 03:59:21 2026 GMT
        Subject: CN=69c4af1a-a211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ec:fd:c0:8e:43:c2:0e:c0:dd:45:fb:32:62:
                    08:a6:39:a1:a3:d1:27:fa:f6:85:51:a8:1b:e4:32:
                    66:1a:5b:a4:0d:c7:6a:59:93:74:a6:ae:9e:ab:b6:
                    59:29:5d:59:5c:33:a8:85:99:00:b7:d8:7c:38:b5:
                    ab:2e:5b:3b:60:91:82:dc:96:35:7e:1c:60:f3:e7:
                    7e:c1:81:bd:7d:90:b2:cc:61:63:24:a0:a5:ea:25:
                    0e:d2:e8:db:90:d1:20:02:e3:af:e3:5e:4e:48:71:
                    f3:c2:a9:d4:b7:fa:ea:36:8a:b2:e0:4a:72:a1:dc:
                    f2:95:0c:0b:b9:1f:6f:19:02:9e:dd:32:c4:67:71:
                    0a:8e:17:3b:35:d4:5b:86:44:3c:a2:f8:76:d1:e9:
                    2e:3e:04:00:2d:7e:e0:0b:97:90:07:2a:94:17:33:
                    53:c5:07:15:4a:bd:08:c7:ce:d4:0f:f7:53:f8:7c:
                    29:3c:fa:4c:6b:af:f9:88:69:6b:e6:63:06:19:95:
                    19:83:b9:2c:c3:b1:6c:ed:84:83:1a:e4:4a:00:16:
                    88:8d:2f:4c:26:07:fe:2c:3e:5f:96:4d:24:1a:ac:
                    77:b6:09:0c:1e:72:f6:e0:5f:31:95:90:6e:18:f5:
                    9d:74:d7:30:35:fe:30:dd:2e:d8:f7:d1:cd:4b:c6:
                    a1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:65:1D:81:2A:BF:B5:3C:21:F0:1E:02:E9:44:F6:B1:06:54:81:FD
            X509v3 Authority Key Identifier:
                keyid:33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:1a:e5:43:76:61:7c:ad:4f:7e:ab:70:4e:50:6c:23:f0:d0:
         0c:74:9c:ce:12:ab:7d:35:24:24:38:88:ac:6e:74:20:29:4a:
         2e:b6:67:ef:3a:25:7d:73:2a:06:ec:90:67:ec:5d:21:8b:95:
         b1:7b:24:0d:42:41:ce:f0:e3:cd:b1:19:51:7b:50:72:a3:9c:
         1a:35:ff:11:c3:5e:5f:86:3b:e2:6f:8f:b9:d8:ff:6b:54:d1:
         0f:7e:e9:fe:44:45:b2:07:9b:25:fe:a7:57:fd:fa:ac:16:9a:
         92:4e:2f:c0:93:6d:ea:39:94:cb:ce:8a:8a:e2:80:80:07:ab:
         c6:cb:86:cf:bf:0a:f9:d3:bc:8c:99:19:86:ee:a9:0a:0e:3e:
         c8:31:3b:22:2c:a9:05:b7:27:0d:c7:f1:3d:03:48:25:a3:58:
         1e:7d:22:3f:18:06:b8:58:13:9a:99:a7:33:b9:a7:4e:38:9a:
         c7:82:60:3f:9d:f7:b8:30:d2:f9:26:b3:45:f7:bc:e4:9b:75:
         37:b7:1a:21:9f:fe:b2:54:f6:2a:13:04:b7:39:c1:a3:1f:d8:
         eb:bb:c7:7f:81:07:4b:99:34:f3:a6:ed:b5:45:97:d0:e7:d1:
         d6:a8:45:69:98:8f:56:9a:1e:49:a9:76:bd:20:07:91:68:b9:
         0f:c3:06:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:34:00 2026 by rpki-client