Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
File:                     Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft (raw, json)
Hash identifier:          ggN25kY6l97KCRoOYNMRXukH4F/V6Wk51Lw23ZIGSkc=
Subject key identifier:   73:F7:0F:23:B9:97:E5:B8:56:49:B2:7C:97:43:D8:78:DC:99:55:C1
Authority key identifier: 56:D9:26:DF:E1:4B:54:14:EA:B5:93:75:D9:4C:F0:1F:A5:48:D3:16
Certificate issuer:       /CN=F36BF1B7AF/serialNumber=56D926DFE14B5414EAB59375D94CF01FA548D316
Certificate serial:       09AA
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
Manifest number:          09A8
Signing time:             Mon 30 Jun 2025 01:20:12 +0000
Manifest this update:     Mon 30 Jun 2025 01:20:11 +0000
Manifest next update:     Wed 02 Jul 2025 01:20:11 +0000
Files and hashes:         1: Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl (hash: zlV4XCYRNyCKw/psBmkp2qmu8kh6AeL6Z4DtaRwt0lk=)
                          2: 4D2AE744889411EDA37C00F7F1222468.roa (hash: oKL4U1aEyBhQSwu301NUlOiwgI1wCrmm545KGrfhWfc=)
                          3: 3622D1AAEEA211E89867905FF8AEA228.roa (hash: QDmUgaFX7YS3buOBowBMA1u32zvhujbAZ2pZ6j/6DXM=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
                          rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Jul 2025 01:20:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2474 (0x9aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36BF1B7AF, serialNumber=56D926DFE14B5414EAB59375D94CF01FA548D316
        Validity
            Not Before: Jun 30 01:20:11 2025 GMT
            Not After : Jul  2 01:20:11 2025 GMT
        Subject: CN=6861e64c-3c05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:58:0e:cb:6d:1f:9d:69:a7:82:b9:dd:63:7c:
                    43:82:2e:fc:5b:87:9c:d8:bb:74:09:93:9a:6a:55:
                    da:c4:bc:ad:98:b2:99:cc:10:84:04:06:b4:9b:ee:
                    8c:34:c9:50:57:df:f6:7e:2b:e9:73:cb:57:56:06:
                    4d:b3:06:13:e3:7d:fa:b4:ed:95:19:53:c4:44:3d:
                    55:4a:ba:7b:16:b4:13:61:60:38:5d:5d:40:04:55:
                    f1:b5:f0:85:15:1a:37:58:78:7e:07:00:55:0f:ad:
                    4e:0d:9a:07:19:58:5a:02:64:77:06:6c:b0:6f:1c:
                    08:56:3d:8c:81:c5:cd:16:ee:a5:e6:cd:45:e8:92:
                    a7:97:d1:d5:1e:78:9e:1c:15:f5:7b:cd:9e:e4:ef:
                    01:16:1e:3f:b4:05:a8:b6:aa:77:ea:9d:01:70:72:
                    5c:f4:b9:da:94:98:d1:51:ec:78:65:7a:79:8b:e0:
                    94:e9:43:f5:24:d3:90:a0:3c:7f:f6:f1:6e:31:ba:
                    34:94:ea:00:9f:5a:9b:c6:43:56:8e:0f:bc:97:90:
                    49:15:84:51:2b:34:08:19:22:7c:37:21:4c:9b:b2:
                    bc:c0:0e:d7:9e:ee:1c:2e:3f:d0:3f:f6:d9:13:96:
                    bb:a3:bb:e9:46:68:e9:52:f6:3d:1b:69:ac:db:f7:
                    98:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F7:0F:23:B9:97:E5:B8:56:49:B2:7C:97:43:D8:78:DC:99:55:C1
            X509v3 Authority Key Identifier:
                keyid:56:D9:26:DF:E1:4B:54:14:EA:B5:93:75:D9:4C:F0:1F:A5:48:D3:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/Vtkm3-FLVBTqtZN12UzwH6VI0xY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36BF1B7/71F44CFCEE9F11E8946A735DF8AEA228/Vtkm3-FLVBTqtZN12UzwH6VI0xY.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:00:ad:f3:e7:b5:ae:28:33:77:3d:04:03:2c:d6:f9:61:ad:
         ba:69:43:5d:76:0a:1f:ff:f5:cb:56:08:dc:5b:48:f5:ac:a9:
         16:cd:5e:8e:7e:64:ed:48:e4:8e:54:c0:8a:99:f3:e4:75:fb:
         3a:1d:ea:55:75:56:cd:ef:fa:6c:9b:3b:ae:7f:78:de:8e:61:
         95:d5:8b:45:b7:5b:97:75:b3:41:37:22:be:6e:2d:d6:1c:63:
         7e:48:3a:de:68:7d:c6:ce:f9:a8:ed:ac:39:e4:b8:c3:85:32:
         6a:59:88:0b:09:e3:a0:5e:6c:6d:99:09:be:4f:44:11:fa:7c:
         f7:1b:54:9b:cb:d4:99:d0:fc:ca:61:c8:5e:dc:f2:a9:2c:28:
         0b:a8:39:09:8e:cf:cb:37:48:23:cb:13:36:0f:a5:a0:78:f6:
         3b:39:ce:b8:a0:bb:05:ac:88:f3:fe:f5:b2:3f:f2:be:aa:9c:
         d9:32:cf:6b:da:f6:c5:5b:be:78:f1:01:af:29:94:34:42:8e:
         a4:ad:bf:f5:64:08:13:70:5e:59:a0:48:f4:96:69:3e:69:6c:
         b5:b4:c0:1f:6a:0d:82:80:4c:35:60:d2:81:72:2d:e8:3b:2e:
         90:42:de:c6:f3:31:3e:ec:d1:d9:a1:7b:db:dd:6d:61:d8:7d:
         ae:52:b8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:44:08 2025 by rpki-client