Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
File:                     VcSAIZIjODGCUcva0uggjBsiQyE.mft (raw, json)
Hash identifier:          0vYKHanUW822nBFZ9ny+9+kTbC1fLVQKufEu9et1bDU=
Subject key identifier:   97:9C:3E:51:44:0C:D5:41:A7:B4:CB:7F:5C:8C:64:CB:70:CC:3B:8B
Authority key identifier: 55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Certificate issuer:       /CN=F367DA9BAR/serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Certificate serial:       03D9
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
Manifest number:          03D8
Signing time:             Sat 23 Aug 2025 03:22:51 +0000
Manifest this update:     Sat 23 Aug 2025 03:22:50 +0000
Manifest next update:     Mon 25 Aug 2025 03:22:50 +0000
Files and hashes:         1: VcSAIZIjODGCUcva0uggjBsiQyE.crl (hash: 6vY3mJhm/t47kf3Wk/uxiPSQhbThTEiFCTsKAPch+2A=)
                          2: 4CEBE78CABC211ED80A4B483F1222468.roa (hash: RMWNA7CymMg9CNpy2XouqWvp370orj1H39/pzyyz1/Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                          rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 25 Aug 2025 00:26:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 985 (0x3d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAR, serialNumber=55C48021922338318251CBDAD2E8208C1B224321
        Validity
            Not Before: Aug 23 03:22:50 2025 GMT
            Not After : Aug 25 03:22:50 2025 GMT
        Subject: CN=68a9340b-f767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3f:88:8e:d6:11:85:40:3b:2e:f7:bd:5a:b3:
                    00:38:41:a5:c1:f5:8e:81:ae:b3:32:b9:bc:24:27:
                    c2:fc:25:46:1c:09:56:f5:8e:d5:43:5a:69:2c:db:
                    82:42:f5:43:6c:67:16:e7:2a:b4:b2:2f:77:4c:ea:
                    18:58:28:3b:3f:f3:6a:65:1a:7e:31:b4:af:be:80:
                    40:b5:34:5b:80:f9:03:40:30:a1:16:0e:e1:4d:f5:
                    9d:cf:96:22:f7:75:be:98:ad:1e:54:6b:99:15:af:
                    5b:c4:a8:52:f8:52:19:b8:c4:7a:14:21:24:a6:55:
                    25:47:4a:f9:77:cc:94:43:29:7f:3f:b2:91:ad:7a:
                    cb:bb:a6:fc:60:f7:2e:c5:88:f3:cb:70:3e:f4:86:
                    25:1c:88:74:ff:a3:9e:9f:c4:68:05:8e:24:8d:2c:
                    1a:ff:0b:0e:3b:b8:92:54:8f:de:99:a9:ee:ca:f6:
                    39:37:8f:4a:b3:38:32:b2:4d:5e:db:2f:82:a7:5e:
                    45:b2:cc:f4:90:6d:97:0a:e4:b0:59:b7:35:ee:5a:
                    03:38:8e:a7:c0:30:38:25:24:b5:c2:e4:44:a1:ea:
                    85:e5:55:02:76:f5:0a:9e:fd:53:fb:9b:98:91:3a:
                    df:be:e2:a9:ca:24:4a:b1:a5:a6:fe:52:02:16:43:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:9C:3E:51:44:0C:D5:41:A7:B4:CB:7F:5C:8C:64:CB:70:CC:3B:8B
            X509v3 Authority Key Identifier:
                keyid:55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:87:c8:c5:03:b7:17:5e:f8:a9:ca:b1:c2:11:4b:85:46:90:
         04:f6:8d:77:1a:aa:a3:0e:5a:f7:55:5a:93:33:3f:28:e5:70:
         e3:fa:f0:38:86:37:51:1d:36:69:a5:22:e5:14:08:e1:cf:ed:
         11:68:7c:dd:6a:76:ed:4e:55:bb:63:4e:3c:c6:64:23:cd:ec:
         f6:9e:d6:4f:17:19:e0:44:a7:ec:f7:99:94:d1:60:66:47:70:
         b6:dd:3d:dc:b8:0d:ed:8d:06:a3:04:ac:6c:a2:90:62:19:14:
         89:61:dc:55:3d:9f:34:19:8e:06:2f:6f:55:bf:74:bc:fb:5f:
         99:13:6f:a3:4e:de:1d:e6:ff:be:da:de:3b:cc:b4:c3:4a:2f:
         6c:c9:3e:99:ef:78:f2:6e:ae:3a:f4:db:85:4d:61:e1:ab:72:
         fd:fd:fc:22:cc:51:26:d9:c6:4a:39:52:8f:14:0a:ae:e4:c1:
         92:8b:be:e0:21:8d:c1:1e:98:b2:16:c4:e0:ea:79:33:96:a0:
         af:20:84:3a:2b:65:5c:d6:1f:eb:54:64:f3:bc:f4:34:73:73:
         9f:e5:59:e3:dc:60:3b:40:7f:d7:bc:6b:af:33:33:92:6c:ca:
         cf:a1:b4:a2:c8:f3:e5:31:10:17:84:7b:11:d4:c6:8d:19:33:
         70:10:ef:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:30:49 2025 by rpki-client