Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft
File:                     VG_z86lS6oeZmUVVaekH4Pt8gZs.mft (raw, json)
Hash identifier:          U3mMjs4lIgPAL7vBYN3sx6Z2ZB+fkmj2kh4+E/qOhJo=
Subject key identifier:   45:A7:AA:D0:43:6B:22:46:1F:CA:9F:14:DE:CD:0C:C6:85:1F:FF:59
Authority key identifier: 54:6F:F3:F3:A9:52:EA:87:99:99:45:55:69:E9:07:E0:FB:7C:81:9B
Certificate issuer:       /CN=F3611ED8AF/serialNumber=546FF3F3A952EA879999455569E907E0FB7C819B
Certificate serial:       0226
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VG_z86lS6oeZmUVVaekH4Pt8gZs.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft
Manifest number:          0225
Signing time:             Mon 02 Mar 2026 03:05:22 +0000
Manifest this update:     Mon 02 Mar 2026 03:05:21 +0000
Manifest next update:     Wed 04 Mar 2026 03:05:21 +0000
Files and hashes:         1: VG_z86lS6oeZmUVVaekH4Pt8gZs.crl (hash: omysMFnrSQ3ayeU+Y8XHV1gUwtKZ+nTqAjLOqQ05jJk=)
                          2: 8C71A80E71D911EF95953447762E951A.roa (hash: qQJ1tyFupoDgwet6xtHwuOu1NKoamzpsB9579wpp6Y4=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VG_z86lS6oeZmUVVaekH4Pt8gZs.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 550 (0x226)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3611ED8AF, serialNumber=546FF3F3A952EA879999455569E907E0FB7C819B
        Validity
            Not Before: Mar  2 03:05:21 2026 GMT
            Not After : Mar  4 03:05:21 2026 GMT
        Subject: CN=69a4fe71-bc56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c2:d4:19:57:3a:47:29:7c:11:af:79:65:d0:
                    5c:07:6c:d6:38:14:94:80:2a:6f:9c:35:5d:53:e7:
                    de:75:f9:7a:dc:f8:22:a7:d6:a7:78:44:92:83:ce:
                    39:e5:b3:ec:50:7e:f7:ac:63:67:5b:99:65:ec:7f:
                    9c:e1:cd:8d:33:b1:10:1e:b4:fb:fe:c4:cd:15:37:
                    8f:a5:a5:02:bd:3d:88:6d:a3:8d:1d:9a:eb:5f:6e:
                    5f:f4:0c:b8:5f:f4:e4:0c:7d:59:7c:1c:89:53:c8:
                    a3:b0:15:4b:ac:81:e5:7e:09:3b:38:60:88:81:bc:
                    a5:9b:af:e9:1b:b8:84:cb:d6:ab:f6:78:01:ec:66:
                    b6:59:42:0f:65:67:20:68:3e:ce:05:05:49:35:89:
                    31:52:c0:66:e9:50:e1:23:4f:46:8a:b4:12:ed:d5:
                    4c:cc:37:56:bb:55:2d:55:92:df:70:ea:06:7a:3b:
                    f0:a7:6d:0a:57:c7:b1:0c:f8:d7:60:f5:d8:67:8f:
                    4c:d3:78:79:19:1d:2c:cc:4e:6b:26:53:69:87:04:
                    62:45:78:22:42:45:c2:ec:f7:b5:bc:cb:33:25:77:
                    1b:9d:47:7f:09:2a:c3:47:e2:17:85:b3:50:c9:a1:
                    0e:43:31:c0:f9:ef:68:e5:36:4e:a1:ca:b5:d9:a7:
                    49:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A7:AA:D0:43:6B:22:46:1F:CA:9F:14:DE:CD:0C:C6:85:1F:FF:59
            X509v3 Authority Key Identifier:
                keyid:54:6F:F3:F3:A9:52:EA:87:99:99:45:55:69:E9:07:E0:FB:7C:81:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VG_z86lS6oeZmUVVaekH4Pt8gZs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3611ED8/0D8CDBC671D911EFAC8BB044762E951A/VG_z86lS6oeZmUVVaekH4Pt8gZs.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:86:ef:5f:b9:65:df:57:f3:22:64:38:bb:dd:56:66:d5:6c:
         95:c9:ea:bd:b5:56:25:ca:d2:42:66:bb:7f:f4:ea:69:9f:15:
         b2:a5:89:ab:4f:5a:7f:69:47:c1:40:37:c4:b7:c3:e8:16:1b:
         32:1a:77:bd:80:2e:c9:e4:84:5f:d4:dc:90:d8:6c:93:4a:13:
         7d:d1:b5:a7:29:52:91:79:e1:44:7d:01:59:e1:f8:0f:52:fe:
         55:8a:33:4c:c1:e4:14:0b:d1:3f:20:f3:80:d3:7c:47:aa:95:
         ad:2c:e8:f1:10:4b:eb:ba:77:b7:e9:aa:c1:62:69:18:1c:d5:
         8c:3a:1f:e2:1c:81:23:38:8f:8d:c8:b8:aa:0b:18:60:45:f7:
         04:ee:02:48:88:6b:08:f9:b6:3f:2c:5b:48:df:ff:e2:d2:08:
         c5:d9:0e:0b:dd:97:22:e9:1e:6f:90:1a:a2:71:d3:fe:69:8e:
         4c:64:ab:15:0a:24:aa:cb:92:b8:58:ae:83:a6:be:22:f3:cc:
         5d:b4:f1:df:7b:44:42:f7:36:2e:e4:b1:92:08:b5:94:eb:b7:
         85:b9:46:41:da:c0:9e:8c:af:ca:d2:da:ae:1c:92:33:67:aa:
         8c:41:d1:09:2b:1d:21:f7:cc:22:c3:35:e4:e0:e9:e7:3a:a3:
         ba:5b:b0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:41:35 2026 by rpki-client