Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
File:                     VcSAIZIjODGCUcva0uggjBsiQyE.mft (raw, json)
Hash identifier:          XTVe7IUFxIYWGwqoXOjTIUIU+YMs5B8D48316oCJu+0=
Subject key identifier:   A6:86:79:54:CF:E4:8A:73:FE:77:09:A6:FC:8C:6D:8F:04:3B:D5:FD
Authority key identifier: 55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Certificate issuer:       /CN=F367DA9BAR/serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Certificate serial:       04B4
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
Manifest number:          04B3
Signing time:             Thu 26 Mar 2026 03:43:15 +0000
Manifest this update:     Thu 26 Mar 2026 03:43:14 +0000
Manifest next update:     Sat 28 Mar 2026 03:43:14 +0000
Files and hashes:         1: VcSAIZIjODGCUcva0uggjBsiQyE.crl (hash: gGXnZmi2DOic/Aosf+8BJeqE+bwgOPAFcYiy9/m8E7U=)
                          2: 4CEBE78CABC211ED80A4B483F1222468.roa (hash: RMWNA7CymMg9CNpy2XouqWvp370orj1H39/pzyyz1/Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                          rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1204 (0x4b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAR, serialNumber=55C48021922338318251CBDAD2E8208C1B224321
        Validity
            Not Before: Mar 26 03:43:14 2026 GMT
            Not After : Mar 28 03:43:14 2026 GMT
        Subject: CN=69c4ab53-d2d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:05:7d:4a:81:36:d6:ea:5c:52:2d:4e:28:6f:
                    4f:b6:2f:08:95:b4:54:d2:76:cb:8f:0e:4a:de:b9:
                    85:b6:61:a4:c6:0b:45:5f:27:01:50:36:ac:9a:94:
                    54:9b:1c:b9:50:b7:fe:3e:62:f4:3c:93:66:5f:75:
                    32:1a:53:60:e7:4f:77:f5:b4:4e:cd:70:20:5e:c4:
                    83:a8:77:04:cb:5c:e7:4f:35:c3:ab:9c:c3:aa:e3:
                    8c:5b:47:51:85:ee:4c:90:93:a1:dc:6e:5f:34:c4:
                    69:ef:ff:38:be:f8:db:d0:88:96:95:ff:cd:49:f6:
                    83:56:64:a5:e5:b9:22:e0:43:00:ff:35:b8:97:47:
                    56:b4:34:6a:0c:e4:f7:68:58:2a:60:bf:ce:37:b5:
                    d2:dc:32:53:11:a1:77:2d:21:c9:54:f2:f4:b1:87:
                    b3:98:08:6a:c5:84:1c:15:d0:e5:fc:51:e4:e6:06:
                    ae:02:ee:04:fb:33:33:c0:dd:ea:0b:2b:a2:45:18:
                    c3:4a:f6:b1:3d:55:3a:e9:e3:8b:f1:06:71:f6:86:
                    3f:7c:24:c5:23:a9:76:d9:2f:36:aa:90:a3:45:8d:
                    44:5e:39:c1:50:4e:e2:0d:8f:88:92:7a:5e:ae:1a:
                    f1:d2:53:f6:de:de:35:2e:10:66:80:02:71:f2:38:
                    78:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:86:79:54:CF:E4:8A:73:FE:77:09:A6:FC:8C:6D:8F:04:3B:D5:FD
            X509v3 Authority Key Identifier:
                keyid:55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:c4:24:84:c4:a9:b6:8a:4b:4c:89:f4:89:50:51:86:c9:b8:
         95:7d:f4:07:67:81:4f:b5:1b:d0:a0:14:66:f5:b8:95:25:55:
         01:58:9e:66:f6:39:af:4b:54:96:d9:7e:b9:95:7d:07:ac:c0:
         12:46:03:7b:55:69:45:0d:4a:68:07:74:c7:0a:5e:bc:78:12:
         e9:8b:69:4c:17:cf:60:b2:7b:bd:48:3b:3b:40:9b:52:c6:79:
         d6:72:7e:6b:89:0f:17:0a:c0:1b:90:1f:dc:ef:05:92:21:37:
         b2:70:61:95:14:60:39:0f:7a:56:4e:24:7e:5e:79:79:f3:77:
         a8:a5:6b:09:2d:8d:6d:a3:d2:52:56:cc:90:a4:7c:c7:b3:cb:
         be:c3:03:a4:b4:87:39:ec:28:e3:68:1a:c1:39:4e:75:94:60:
         41:d0:0e:a3:8f:a5:fc:eb:74:f8:c4:0c:cf:4a:5f:0d:75:04:
         be:f5:a7:f4:4d:24:06:b7:9e:2a:fe:9f:68:83:82:0a:3f:de:
         b6:7c:c3:e3:91:c0:8f:21:a1:72:bc:fe:c9:49:4f:3b:ef:cc:
         c9:8c:64:55:f2:a5:11:a7:54:81:ad:48:4c:4a:cf:e6:49:62:
         8e:8e:04:bb:51:12:8a:fb:ef:7e:12:3a:70:44:ac:67:60:84:
         5c:d7:24:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:57:15 2026 by rpki-client