Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
File:                     Vgq77plEvBY3TSi-TCYHISxchBo.mft (raw, json)
Hash identifier:          zXqBLRes+iMDnI43sGtSYHFw8DNURR9OQarTeAjeM4M=
Subject key identifier:   FE:CA:AA:AD:7A:13:0B:F8:B6:95:93:70:E4:84:DB:29:BA:64:DD:36
Authority key identifier: 56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A
Certificate issuer:       /CN=F3624E32AR/serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
Certificate serial:       0422
Authority info access:    rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
Manifest number:          0421
Signing time:             Mon 02 Mar 2026 02:26:10 +0000
Manifest this update:     Mon 02 Mar 2026 02:26:10 +0000
Manifest next update:     Wed 04 Mar 2026 02:26:10 +0000
Files and hashes:         1: Vgq77plEvBY3TSi-TCYHISxchBo.crl (hash: KhIo6fuWLXuAOF/J3mdWWlwhEb/bPYelxtxOR1/A5nI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
                          rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 04 Mar 2026 00:26:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1058 (0x422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3624E32AR, serialNumber=560ABBEE9944BC16374D28BE4C2607212C5C841A
        Validity
            Not Before: Mar  2 02:26:10 2026 GMT
            Not After : Mar  4 02:26:10 2026 GMT
        Subject: CN=69a4f542-8e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6f:f0:c5:02:91:69:4c:b9:6d:4c:c5:7a:e5:
                    92:07:e9:48:30:90:5e:45:ad:11:13:19:95:90:83:
                    57:8a:d9:e4:1e:c3:eb:cc:09:df:12:ae:49:f8:c7:
                    68:5f:9c:6a:27:0e:cf:8b:4f:6d:fc:a0:35:bc:48:
                    43:a4:d8:b5:16:66:e5:5b:07:a7:d4:d6:cf:51:30:
                    49:05:6e:32:82:7a:10:e6:b7:62:d6:ef:ae:09:46:
                    f1:76:eb:11:8f:02:31:72:d7:34:1d:79:dc:ff:5c:
                    56:6e:07:25:b1:53:ad:35:5e:f5:92:d4:3c:27:3e:
                    97:ee:ff:0e:e2:00:ff:be:0a:b8:2b:8b:16:90:99:
                    71:02:d9:61:8a:a7:4a:8c:d0:89:93:e8:d0:38:bd:
                    ff:5e:e5:33:3d:98:bb:c3:35:b7:b4:2e:88:b4:52:
                    83:58:90:74:f1:1c:09:8d:ca:27:77:55:e9:fd:b8:
                    f0:ad:27:e7:3f:2b:24:94:04:3f:26:ff:1d:91:f9:
                    39:28:bb:2a:75:d0:a9:92:1b:e3:0f:2d:22:fd:37:
                    8c:d4:1a:23:5f:da:73:26:f9:53:63:50:50:74:b8:
                    e5:a3:c9:5c:f8:45:a9:a7:1c:05:4d:f2:ac:bf:29:
                    f0:09:cd:38:bf:28:c6:26:7f:c5:0c:bd:2b:34:d9:
                    84:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CA:AA:AD:7A:13:0B:F8:B6:95:93:70:E4:84:DB:29:BA:64:DD:36
            X509v3 Authority Key Identifier:
                keyid:56:0A:BB:EE:99:44:BC:16:37:4D:28:BE:4C:26:07:21:2C:5C:84:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/Vgq77plEvBY3TSi-TCYHISxchBo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3624E32/F1340E4EEE7211EDBA5327164AD9E6FC/Vgq77plEvBY3TSi-TCYHISxchBo.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:16:c9:d0:e4:da:71:0b:11:f0:d5:1e:41:65:39:03:cc:e0:
         a6:eb:44:62:ae:81:d3:83:40:c1:94:25:8e:d4:a0:9d:59:9d:
         49:a6:ce:3f:33:1c:c0:5b:08:a2:14:1f:e8:7e:16:fb:61:83:
         1e:3f:ac:81:3b:89:5d:63:3c:aa:b6:34:fc:f1:0b:d7:63:a5:
         67:67:e9:40:0b:a3:e3:72:7a:fa:be:16:76:6a:83:c7:dd:b9:
         b5:9a:7a:d0:5d:82:71:15:4f:10:8f:61:55:2e:10:58:9b:ce:
         b5:35:e3:46:f8:7f:21:95:61:51:98:cc:32:4b:56:ed:e4:ca:
         5a:44:85:79:8e:10:4e:fa:78:00:2b:52:5d:81:24:9e:a5:56:
         ff:95:56:da:b8:b2:1c:b5:1b:12:24:3e:0d:ab:90:4a:d8:19:
         ed:88:78:25:13:9b:47:8e:b9:5d:d8:7c:d9:0f:2f:74:f0:db:
         62:24:76:20:3a:17:a3:47:f9:fa:9e:0e:54:2b:e0:06:7c:2b:
         36:d2:0d:c6:d8:72:4e:bc:4c:10:dc:f8:e8:3c:b0:57:5a:9f:
         f6:ca:58:9a:ea:c2:78:5d:ee:53:65:df:d3:f2:fe:5b:eb:fd:
         23:49:92:d5:b2:dc:b2:f9:1e:e7:bf:db:c2:a1:e4:0f:7b:95:
         0e:1c:f6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:37 2026 by rpki-client