Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
File:                     vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft (raw, json)
Hash identifier:          +8fKxx9AWaASnB9yWZ8FWZ4e1x5fzBwVjXH84tHW+rM=
Subject key identifier:   37:04:62:9A:90:7E:C3:B2:CA:05:92:CB:0F:1A:05:01:E2:8F:65:21
Authority key identifier: BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05
Certificate issuer:       /CN=F36F1295AF/serialNumber=BDB1AF1F8B4EB6F3A42370F91E71C532C7F46005
Certificate serial:       04CB
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
Manifest number:          04C8
Signing time:             Thu 24 Sep 2026 03:32:33 +0000
Manifest this update:     Thu 24 Sep 2026 03:32:32 +0000
Manifest next update:     Sat 26 Sep 2026 03:32:32 +0000
Files and hashes:         1: vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl (hash: FiK8lhiuC5E5MYmPVyDmNwBpHUCXh2hE63axubRgDiU=)
                          2: C66A8CFA0F6611EE86DEEA374AD9E6FC.roa (hash: CtMLiyHqHp/2c3885KFMX3Kp1Td1UoRIr2a2dfZo4lI=)
                          3: E2F626462E6111F1A1498780DAE4EC9C.roa (hash: MmGMSbM7fxM4JZU+cJo8RgpUYAK1JK9mDHEDIULx+f4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 26 Sep 2026 03:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1227 (0x4cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F36F1295AF, serialNumber=BDB1AF1F8B4EB6F3A42370F91E71C532C7F46005
        Validity
            Not Before: Sep 24 03:32:32 2026 GMT
            Not After : Sep 26 03:32:32 2026 GMT
        Subject: CN=6ab499d1-cca7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d9:5b:d4:54:02:35:fd:0f:c3:81:1b:da:36:
                    fc:5a:fc:63:03:ea:10:37:3b:f1:15:56:51:fa:0a:
                    a3:8d:dd:37:a9:b6:64:bf:9d:51:7d:ee:81:bc:e9:
                    e3:b9:2a:92:05:55:48:3c:72:b9:d2:d9:4b:a5:78:
                    9b:07:5f:59:00:c8:3a:b6:82:4f:70:c8:c9:bb:c1:
                    49:02:26:a9:65:7d:2e:50:dd:2d:35:77:ec:39:02:
                    96:cb:d3:95:16:b6:0f:40:36:e3:b8:3f:c6:6a:89:
                    61:c5:00:7b:13:db:c1:92:dd:5d:33:dc:85:ff:8b:
                    a5:4b:6f:36:dd:5f:77:d9:6f:07:bc:8c:8b:98:19:
                    7f:a1:5b:88:91:ec:47:78:d6:9b:d4:61:f3:0f:7b:
                    51:e2:06:ba:36:bc:40:fe:81:aa:76:2c:63:6f:77:
                    0b:e6:4e:bd:42:cd:5a:94:1d:e8:e1:05:41:bb:8d:
                    29:c2:5d:24:4d:49:a2:6a:44:f5:2c:7a:1d:f9:70:
                    b6:07:69:f6:0e:f2:e8:46:89:2b:7b:62:7f:77:11:
                    22:0c:4b:d5:e5:28:7d:92:bb:5e:ec:11:fc:e9:c7:
                    d4:0c:d1:b7:f6:56:2f:9f:80:ad:3a:97:17:93:24:
                    2e:b8:e1:ca:1e:74:34:a4:55:5c:36:7a:d5:00:9e:
                    63:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:04:62:9A:90:7E:C3:B2:CA:05:92:CB:0F:1A:05:01:E2:8F:65:21
            X509v3 Authority Key Identifier:
                keyid:BD:B1:AF:1F:8B:4E:B6:F3:A4:23:70:F9:1E:71:C5:32:C7:F4:60:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vbGvH4tOtvOkI3D5HnHFMsf0YAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36F1295/2F0EBC8C0F6611EE814E22364AD9E6FC/vbGvH4tOtvOkI3D5HnHFMsf0YAU.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:7a:30:6a:9b:6e:63:b4:f7:74:31:f6:7e:0a:25:e8:f2:61:
         e9:04:97:ef:a9:99:7e:02:9d:3c:45:41:71:49:69:0c:29:0c:
         a6:a2:a4:59:cc:c0:64:0c:b2:83:05:ed:51:14:52:41:6a:ff:
         fe:c3:7d:ce:d0:27:0b:f6:d6:fe:77:2e:d9:ad:3f:83:b3:7a:
         70:21:dd:e6:58:f2:8d:34:11:06:e6:1e:60:05:27:52:1d:bb:
         f5:bf:24:ff:e2:8a:5b:b2:dc:09:49:fe:68:4f:07:bb:47:46:
         f3:59:c4:a7:38:b2:4b:57:75:01:c8:6a:a4:e9:4a:b2:1b:79:
         7e:6a:eb:31:41:7f:c1:3e:0a:4c:8d:4e:7c:bf:62:1b:dc:11:
         4d:af:09:63:7e:ec:70:70:04:b6:11:87:ce:44:cb:a3:ea:0e:
         8a:37:60:e9:dc:f2:39:bc:d1:8a:70:13:59:fa:58:ae:c8:d3:
         82:25:27:4f:47:22:ff:7f:f9:35:83:76:04:67:95:b0:f8:c4:
         57:a5:01:ff:35:c8:0f:a5:96:e7:67:47:a1:36:08:fb:34:22:
         01:5b:c4:51:d0:4e:74:05:72:70:2d:ed:ed:73:1b:af:d6:1d:
         11:dc:92:80:a9:85:ad:ce:ab:06:45:b2:c9:ee:fa:09:31:8e:
         fc:b7:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----