Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
File:                     vc-uJWmnA46pcPrPQDA0GPY1H0g.mft (raw, json)
Hash identifier:          XbgBBdi3Fl4J9dmwxHlj3c5t+FuwNzksq3EQKfv8kFE=
Subject key identifier:   6B:E7:15:29:DC:09:4C:F9:FB:85:1E:ED:C9:13:16:38:3D:CF:58:68
Authority key identifier: BD:CF:AE:25:69:A7:03:8E:A9:70:FA:CF:40:30:34:18:F6:35:1F:48
Certificate issuer:       /CN=F3658A3FAF/serialNumber=BDCFAE2569A7038EA970FACF40303418F6351F48
Certificate serial:       0255
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
Manifest number:          0252
Signing time:             Fri 17 Apr 2026 04:28:38 +0000
Manifest this update:     Fri 17 Apr 2026 04:28:37 +0000
Manifest next update:     Sun 19 Apr 2026 04:28:37 +0000
Files and hashes:         1: vc-uJWmnA46pcPrPQDA0GPY1H0g.crl (hash: FWPQDQ5572RZlTitleCZZXPGOYOY+UHZf1+dfdkzKKQ=)
                          2: 2FD55E82741E11EFAC1F5677762E951A.roa (hash: yK+GF+mnFJmB3GPr0etfsyb2RoWyRhvCEdCQ6Xl4fOM=)
                          3: B1580E28775211EF8422209B762E951A.roa (hash: 3jNv2hrO32PB5K8c+t8vu6E3ApIkflNjeVX5pzc7APs=)
                          4: FF8E457C741D11EF8D538675762E951A.roa (hash: 6X3NUQA2g5a3P3oPEfsVXoEnHkdqMcSAGwMmrV+SpqU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 597 (0x255)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3658A3FAF, serialNumber=BDCFAE2569A7038EA970FACF40303418F6351F48
        Validity
            Not Before: Apr 17 04:28:37 2026 GMT
            Not After : Apr 19 04:28:37 2026 GMT
        Subject: CN=69e1b6f6-c9d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c4:df:e7:a2:14:df:11:0f:40:6b:0c:bb:c1:
                    89:fe:20:f7:c3:61:5d:07:ff:03:be:53:93:d5:13:
                    05:bc:a1:49:4f:9b:a1:03:e9:d7:63:fa:3b:be:36:
                    70:0a:45:0e:26:01:0d:35:32:59:3a:74:0a:12:8f:
                    50:dd:de:84:7c:2d:df:d7:7c:f3:35:70:25:72:78:
                    cf:8a:51:dd:a5:d5:ce:0c:bb:2a:b0:68:8b:d3:d7:
                    58:95:39:10:a8:f8:20:8d:0f:94:04:ee:1a:ba:bb:
                    ae:e9:4d:08:80:b3:83:a1:da:8d:8b:da:c2:74:31:
                    81:b9:b8:cd:e0:3b:3e:db:c7:c1:47:82:63:ef:33:
                    20:a0:8a:33:cc:05:4a:55:e8:a4:ed:f3:0e:aa:7e:
                    f2:d4:80:7b:65:d8:d3:21:5f:8c:64:1a:62:57:ce:
                    9e:77:ac:ff:9f:51:2f:b4:8c:92:33:3b:0d:b6:5b:
                    23:85:fd:c5:49:6d:a2:eb:71:17:1e:55:21:27:13:
                    30:24:68:91:8a:fe:0d:74:4f:88:48:4d:20:a2:f2:
                    23:bf:d2:35:50:50:62:2c:e0:1c:31:5b:33:4c:a9:
                    a8:c2:c2:b0:61:44:f0:14:6e:d4:83:8c:d4:83:59:
                    cd:27:23:f5:80:9b:ed:02:a1:8d:5e:30:2a:ee:63:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E7:15:29:DC:09:4C:F9:FB:85:1E:ED:C9:13:16:38:3D:CF:58:68
            X509v3 Authority Key Identifier:
                keyid:BD:CF:AE:25:69:A7:03:8E:A9:70:FA:CF:40:30:34:18:F6:35:1F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vc-uJWmnA46pcPrPQDA0GPY1H0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3658A3F/74DD844C741D11EFA2D01673762E951A/vc-uJWmnA46pcPrPQDA0GPY1H0g.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:6e:b8:9a:a8:06:18:4f:a1:7b:2e:62:ae:12:f1:d5:4d:24:
         4e:bd:88:16:04:f5:d9:ca:a8:db:7e:a8:f7:3e:14:ce:64:71:
         62:aa:e7:1b:16:5f:f6:88:c0:b1:97:f6:5a:ba:0a:64:d2:17:
         e0:b5:92:ec:77:55:f7:a7:34:65:be:b0:cd:fc:86:b2:25:64:
         59:8d:29:75:4d:95:32:ac:c3:fd:b5:f6:5c:d2:c3:f0:40:41:
         ea:e5:dd:5c:a3:88:71:1b:f0:28:c8:ad:7d:2d:63:34:21:a5:
         65:2e:f0:2f:6f:5f:9f:75:00:f9:65:30:4b:78:ca:ee:f4:31:
         7b:30:bb:95:3b:d1:eb:b0:55:34:62:ed:9d:45:f4:7e:12:07:
         54:91:04:0b:d5:48:42:95:12:a5:15:7b:36:5c:18:78:99:de:
         71:b3:9a:64:0a:81:b9:b4:dd:b0:38:cb:ab:66:9c:bf:a3:bd:
         4c:5f:35:b1:6a:e9:0d:fa:87:c4:72:4d:8c:b8:19:cb:13:62:
         96:e1:69:c7:4d:d8:72:7d:10:90:d8:bd:2f:4e:59:d1:86:aa:
         ce:dc:b5:cb:91:a9:af:61:99:cd:72:05:ab:9f:bf:13:57:23:
         41:e2:7e:05:66:fe:01:88:93:8c:e4:da:7e:86:a3:b8:6d:58:
         6d:7d:de:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:51 2026 by rpki-client