Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
File:                     VcSAIZIjODGCUcva0uggjBsiQyE.mft (raw, json)
Hash identifier:          xjONruHNqaK2UxLrPdw20JONNS07gstY/MjvjULfe7c=
Subject key identifier:   AB:8A:8A:0D:46:E0:02:F1:49:04:59:97:B4:A3:08:5C:A1:1B:F1:1B
Authority key identifier: 55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Certificate issuer:       /CN=F367DA9BAR/serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Certificate serial:       03A7
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
Manifest number:          03A6
Signing time:             Fri 04 Jul 2025 03:26:27 +0000
Manifest this update:     Fri 04 Jul 2025 03:26:26 +0000
Manifest next update:     Sun 06 Jul 2025 03:26:26 +0000
Files and hashes:         1: VcSAIZIjODGCUcva0uggjBsiQyE.crl (hash: HI5riL+xHrxEzeBoOvKB9PCyNX1GX7/B9d7fpLBZI/M=)
                          2: 4CEBE78CABC211ED80A4B483F1222468.roa (hash: RMWNA7CymMg9CNpy2XouqWvp370orj1H39/pzyyz1/Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                          rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 06 Jul 2025 00:26:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 935 (0x3a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAR, serialNumber=55C48021922338318251CBDAD2E8208C1B224321
        Validity
            Not Before: Jul  4 03:26:26 2025 GMT
            Not After : Jul  6 03:26:26 2025 GMT
        Subject: CN=686749e3-bf31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:8a:ad:02:c9:22:5f:ab:88:45:9f:cf:7d:
                    25:12:b4:91:8a:70:16:b2:37:da:2f:d0:33:44:f5:
                    fa:2e:bc:65:a3:93:e9:50:23:b2:f1:c9:1c:69:78:
                    fc:b0:af:b2:f1:89:6e:f0:00:14:b7:b0:93:2b:f9:
                    26:e6:9c:ec:de:f2:f1:8e:39:a2:c1:95:0f:55:32:
                    ee:08:51:3d:58:4b:86:ae:93:24:ae:02:f8:32:18:
                    14:77:4f:10:cf:8b:04:29:f6:6a:73:96:e8:88:75:
                    45:30:a6:80:6f:05:68:dc:8c:c2:e2:a2:29:b3:36:
                    ad:41:a4:c2:52:e0:5c:3b:63:36:78:9e:56:57:7c:
                    7e:3f:e9:60:43:ec:3e:74:3b:d2:9b:d0:71:5a:cf:
                    55:65:2d:50:db:16:04:dc:f8:2d:39:4a:0b:50:0f:
                    1f:7e:b7:cd:93:34:f8:aa:50:35:64:35:a8:f7:87:
                    ff:b6:d7:d1:43:23:05:9d:24:fa:03:ce:b2:d3:ab:
                    94:74:57:1d:88:e0:e4:c9:34:48:5e:57:56:4f:bf:
                    df:3a:b2:36:b2:60:46:ea:ab:a6:fc:87:a8:cc:01:
                    c2:f7:e2:8f:0b:08:56:3a:7d:26:37:09:08:b6:c0:
                    e3:31:b3:13:cb:fa:c6:30:2d:59:3c:4b:ea:8d:b1:
                    f1:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:8A:8A:0D:46:E0:02:F1:49:04:59:97:B4:A3:08:5C:A1:1B:F1:1B
            X509v3 Authority Key Identifier:
                keyid:55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:99:2f:dc:04:b4:cc:d3:68:64:bd:60:9d:94:a5:90:a8:6b:
         2e:27:71:4b:0e:a0:65:25:f6:4e:b2:56:92:6d:f9:cc:7e:fd:
         8e:58:e8:25:59:94:af:66:fc:3e:64:52:ac:c0:e7:a7:95:75:
         b6:77:94:65:7a:f0:2e:7b:17:9b:76:79:85:a7:8e:a1:50:e8:
         88:4e:4a:01:02:fe:05:fb:fc:e3:33:9d:a5:96:5f:20:d2:fe:
         03:a1:08:27:fb:f9:fb:24:45:aa:18:dd:16:c4:c7:44:a7:88:
         88:26:bc:05:82:06:7e:41:41:69:7d:f7:17:7c:8b:a5:88:80:
         4c:cf:f3:01:e5:37:4a:36:51:f2:89:d7:7c:74:30:31:05:f7:
         8e:29:4b:2a:23:86:38:4d:78:d0:da:19:65:3d:f3:5d:cf:5d:
         cb:bf:d3:2e:1e:f1:5a:0a:36:33:31:44:ed:f5:45:30:68:11:
         a4:34:a4:f7:b0:3e:82:71:87:64:8b:12:3d:c8:f3:34:9d:98:
         f9:57:e7:fe:2b:2a:50:81:a9:64:f4:51:5a:92:86:40:17:2b:
         7f:14:2f:61:ae:0b:e7:6c:bd:24:d9:07:27:b8:34:3e:ac:5e:
         38:5a:ce:1d:51:e8:b9:e9:63:24:e0:ca:14:d1:35:5a:18:07:
         95:fd:59:f8
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgICA6cwDQYJKoZIhvcNAQELBQAwSDETMBEGA1UEAxMKRjM2
N0RBOUJBUjExMC8GA1UEBRMoNTVDNDgwMjE5MjIzMzgzMTgyNTFDQkRBRDJFODIw
OEMxQjIyNDMyMTAeFw0yNTA3MDQwMzI2MjZaFw0yNTA3MDYwMzI2MjZaMBgxFjAU
BgNVBAMTDTY4Njc0OWUzLWJmMzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDDZIqtAskiX6uIRZ/PfSUStJGKcBayN9ov0DNE9fouvGWjk+lQI7LxyRxp
ePywr7LxiW7wABS3sJMr+SbmnOze8vGOOaLBlQ9VMu4IUT1YS4aukySuAvgyGBR3
TxDPiwQp9mpzluiIdUUwpoBvBWjcjMLioimzNq1BpMJS4Fw7YzZ4nlZXfH4/6WBD
7D50O9Kb0HFaz1VlLVDbFgTc+C05SgtQDx9+t82TNPiqUDVkNaj3h/+219FDIwWd
JPoDzrLTq5R0Vx2I4OTJNEheV1ZPv986sjayYEbqq6b8h6jMAcL34o8LCFY6fSY3
CQi2wOMxsxPL+sYwLVk8S+qNsfEDAgMBAAGjggK1MIICsTAdBgNVHQ4EFgQUq4qK
DUbgAvFJBFmXtKMIXKEb8RswHwYDVR0jBBgwFoAUVcSAIZIjODGCUcva0uggjBsi
QyEwDgYDVR0PAQH/BAQDAgeAMIGVBgNVHR8EgY0wgYowgYeggYSggYGGf3JzeW5j
Oi8vcnBraS5hZnJpbmljLm5ldC9yZXBvc2l0b3J5L21lbWJlcl9yZXBvc2l0b3J5
L0YzNjdEQTlCLzlGOUJGMDhDOTY0OTExRUQ4QTE2OEFGNEYxMjIyNDY4L1ZjU0FJ
WklqT0RHQ1VjdmEwdWdnakJzaVF5RS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9hcmlu
L1ZjU0FJWklqT0RHQ1VjdmEwdWdnakJzaVF5RS5jZXIwTwYDVR0gAQH/BEUwQzBB
BggrBgEFBQcOAjA1MDMGCCsGAQUFBwIBFidodHRwczovL3Jwa2kuYWZyaW5pYy5u
ZXQvcG9saWN5L0NQUy5wZGYwgdUGCCsGAQUFBwELBIHIMIHFMIGLBggrBgEFBQcw
C4Z/cnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvbWVtYmVyX3Jl
cG9zaXRvcnkvRjM2N0RBOUIvOUY5QkYwOEM5NjQ5MTFFRDhBMTY4QUY0RjEyMjI0
NjgvVmNTQUlaSWpPREdDVWN2YTB1Z2dqQnNpUXlFLm1mdDA1BggrBgEFBQcwDYYp
aHR0cHM6Ly9ycmRwLmFmcmluaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYB
BQUHAQgBAf8EBjAEoAIFADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAkmS/cBLTM02hkvWCdlKWQqGsuJ3FLDqBl
JfZOslaSbfnMfv2OWOglWZSvZvw+ZFKswOenlXW2d5RlevAuexebdnmFp46hUOiI
TkoBAv4F+/zjM52lll8g0v4DoQgn+/n7JEWqGN0WxMdEp4iIJrwFggZ+QUFpffcX
fIuliIBMz/MB5TdKNlHyidd8dDAxBfeOKUsqI4Y4TXjQ2hllPfNdz13Lv9MuHvFa
CjYzMUTt9UUwaBGkNKT3sD6CcYdkixI9yPM0nZj5V+f+KypQgalk9FFakoZAFyt/
FC9hrgvnbL0k2QcnuDQ+rF44Ws4dUei56WMk4MoU0TVaGAeV/Vn4
-----END CERTIFICATE-----
Generated at Fri Jul 4 17:26:28 2025 by rpki-client