Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
File:                     vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft (raw, json)
Hash identifier:          FBB+uG3vSpIdrVJclQ8VqKERt/21gWE3Id/V3/WWa2o=
Subject key identifier:   56:D8:1F:8D:86:97:B6:A5:A7:DF:28:E8:16:18:D4:E7:70:86:DE:F5
Authority key identifier: BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52
Certificate issuer:       /CN=F36DBB05AF/serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
Certificate serial:       15
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
Manifest number:          15
Signing time:             Thu 26 Mar 2026 06:38:05 +0000
Manifest this update:     Thu 26 Mar 2026 06:38:04 +0000
Manifest next update:     Sat 28 Mar 2026 06:38:04 +0000
Files and hashes:         1: vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl (hash: QrdI0iEMwP4wsZV6h36zeG92lK4HSAvv8FMjBYJF9x8=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36DBB05AF, serialNumber=BEB0586FD6E2073BDF97C4FEF56AF9C5A09BF452
        Validity
            Not Before: Mar 26 06:38:04 2026 GMT
            Not After : Mar 28 06:38:04 2026 GMT
        Subject: CN=69c4d44d-6cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:de:c8:a3:7d:70:56:cc:f6:7c:e1:39:d7:
                    14:36:04:4a:17:10:c5:da:df:ec:b7:00:7d:2d:ab:
                    89:48:0c:d9:80:06:ea:db:4f:92:39:f7:52:06:31:
                    e2:3d:cb:32:70:e4:8e:02:88:1a:65:36:1b:e4:93:
                    bb:58:ab:dc:b3:95:4f:2c:f2:b6:93:8e:d8:b1:8f:
                    75:23:fc:05:41:9e:cd:07:2b:08:40:24:e9:3b:e5:
                    10:31:f8:f0:25:a2:4a:e2:b7:0e:d3:63:db:6d:f5:
                    e7:f4:0a:5b:bd:d5:e5:8d:c9:30:c4:40:3a:36:42:
                    5a:75:d8:36:58:73:f8:ec:99:89:bb:e4:08:f1:9f:
                    58:0c:be:c2:f0:ed:5d:bf:c5:b6:20:26:37:d2:51:
                    c0:55:a5:fc:67:a6:c2:b0:20:1c:9b:89:bd:0c:5e:
                    b1:08:36:90:73:c7:4d:10:79:87:e7:8a:2d:44:09:
                    68:e6:2d:a3:44:04:c4:2b:cd:b8:b4:1b:e8:aa:2c:
                    1e:c1:bc:bf:79:ca:c8:69:a4:bc:1e:53:f0:3c:2d:
                    14:01:02:2e:d5:28:3e:08:2f:c5:52:4d:2b:e2:a2:
                    25:5c:b0:3c:cc:7e:90:ae:56:93:ae:68:27:cc:63:
                    a8:7f:3b:3a:71:2a:be:e7:ac:28:82:7b:30:47:30:
                    89:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:D8:1F:8D:86:97:B6:A5:A7:DF:28:E8:16:18:D4:E7:70:86:DE:F5
            X509v3 Authority Key Identifier:
                keyid:BE:B0:58:6F:D6:E2:07:3B:DF:97:C4:FE:F5:6A:F9:C5:A0:9B:F4:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vrBYb9biBzvfl8T-9Wr5xaCb9FI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36DBB05/0747436C195511F1A17147BCDAE4EC9C/vrBYb9biBzvfl8T-9Wr5xaCb9FI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:4f:11:53:66:69:cb:b4:29:d1:83:db:60:52:1e:7f:67:67:
         73:45:4e:64:d2:6a:c3:64:1d:14:b7:38:a5:07:03:81:0a:bd:
         0b:f1:32:36:d0:a8:9a:5f:69:fe:74:8b:2f:27:1b:58:3d:00:
         51:15:05:54:95:1c:58:c5:e1:37:24:4f:27:ff:66:8d:0f:97:
         f4:a4:7d:5f:c6:a0:53:ad:4d:ce:34:91:fb:a8:d1:ff:39:38:
         67:f2:0c:86:c1:1e:33:6d:2d:bb:af:34:a9:4b:ae:02:6f:d0:
         c8:12:59:c0:0d:7c:92:3a:c6:40:25:e1:23:bf:ce:88:54:9b:
         b7:60:70:12:84:bf:71:7f:75:4c:7a:d3:2c:4f:0c:2d:53:bb:
         a7:10:26:c9:68:9a:56:d9:25:72:6c:f2:5a:bf:28:6a:ad:65:
         29:ec:16:78:35:c1:64:ff:a0:95:46:88:cf:2a:37:81:95:3a:
         ce:02:ba:02:48:82:c5:22:74:20:9f:57:2e:fe:cf:d1:80:30:
         64:be:a9:44:86:5b:47:0d:3e:c8:a4:86:0d:ae:ae:3f:2d:a2:
         e0:2d:c8:82:09:a6:bc:6c:01:88:75:63:d8:81:5a:42:40:a0:
         4a:0d:19:33:da:d9:89:bb:d3:9a:14:35:09:f1:b2:d8:e1:f3:
         16:82:91:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:33:42 2026 by rpki-client