Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
File:                     vt43u99rvceiMipfCQ-A63EfBnk.mft (raw, json)
Hash identifier:          7PC0hy75jNxDLlf8AdBZsocVutefauAK/tSZSieOQX8=
Subject key identifier:   84:0B:B9:14:5E:2E:A0:26:E2:C5:7B:08:13:9D:45:A9:AD:72:74:72
Authority key identifier: BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79
Certificate issuer:       /CN=F365B37DAF/serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
Certificate serial:       03F7
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
Manifest number:          03F7
Signing time:             Fri 17 Apr 2026 03:35:55 +0000
Manifest this update:     Fri 17 Apr 2026 03:35:54 +0000
Manifest next update:     Sun 19 Apr 2026 03:35:54 +0000
Files and hashes:         1: vt43u99rvceiMipfCQ-A63EfBnk.crl (hash: xHlJk5HsaWoHoOWUoSXuQi3sr2JQgxK7d/idZtRSzPg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1015 (0x3f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365B37DAF, serialNumber=BEDE37BBDF6BBDC7A2322A5F090F80EB711F0679
        Validity
            Not Before: Apr 17 03:35:54 2026 GMT
            Not After : Apr 19 03:35:54 2026 GMT
        Subject: CN=69e1aa9b-c663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ce:3e:08:c9:ea:d4:34:f5:64:1c:85:49:95:
                    08:48:36:27:6a:b2:9a:6a:fd:54:c2:3d:0c:76:46:
                    95:8e:53:ad:b9:29:16:72:ef:39:b4:d9:98:f6:71:
                    f8:6b:58:6c:01:60:7b:46:fd:ae:84:36:b1:96:f0:
                    70:97:fe:91:0a:1d:26:bc:17:02:a8:0f:f1:c1:88:
                    b8:01:0f:84:d3:19:8d:15:c3:23:86:49:5b:4c:d1:
                    2b:1f:8c:f9:f5:26:68:c7:5e:3c:fb:ca:12:8f:e3:
                    e6:31:b8:7d:65:7b:27:da:dc:e1:fa:9e:fc:93:09:
                    0a:ee:8c:ac:79:3d:26:f0:2c:e6:34:0b:63:d4:29:
                    39:02:de:f8:62:60:08:87:de:35:d5:6f:e2:5c:2a:
                    d8:42:fa:36:b9:cd:95:5a:9e:8d:96:9a:97:32:d8:
                    83:1b:17:51:f4:24:a3:16:b7:5a:62:c0:5d:19:e5:
                    66:34:43:aa:b7:66:aa:33:6b:69:cf:ab:e1:01:6f:
                    c1:d4:46:e7:c9:43:87:8f:49:29:d9:2f:fa:f1:55:
                    ed:37:04:74:c4:b8:12:1d:ea:4d:2c:d4:af:3e:11:
                    34:df:b0:99:73:50:90:a6:67:74:e5:2b:61:34:a5:
                    d4:b6:cd:8b:65:6a:25:e3:ef:2e:e9:46:9b:0a:a7:
                    c6:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:0B:B9:14:5E:2E:A0:26:E2:C5:7B:08:13:9D:45:A9:AD:72:74:72
            X509v3 Authority Key Identifier:
                keyid:BE:DE:37:BB:DF:6B:BD:C7:A2:32:2A:5F:09:0F:80:EB:71:1F:06:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/vt43u99rvceiMipfCQ-A63EfBnk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365B37D/35CC51D8305E11EE8F045F844AD9E6FC/vt43u99rvceiMipfCQ-A63EfBnk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:59:64:6f:7f:ce:53:00:44:d9:55:cc:15:3a:5d:fe:dc:8a:
         96:39:c1:a0:74:bb:93:5f:0e:c5:58:83:a7:d3:92:cc:eb:fa:
         d0:0c:a5:5d:67:8d:0a:8c:45:75:a9:c8:4e:b7:be:56:a2:fc:
         20:1f:82:ba:0a:cc:96:93:14:a3:79:80:0f:47:12:e9:0a:6a:
         09:55:2f:7c:7d:9d:c8:f9:67:ab:f0:8d:19:b1:68:e7:d7:31:
         09:81:84:21:b4:d7:d7:03:97:e8:f9:a3:e3:c1:7e:f0:e9:1e:
         f5:96:9b:f4:6a:b4:2b:3c:02:e1:2b:03:8d:fa:86:9e:a0:0c:
         49:ed:2a:2f:6f:21:8c:5d:50:4f:eb:69:5c:58:ab:37:f0:cb:
         e8:a3:c8:15:93:35:d6:ea:6f:5e:7e:6b:70:b4:3e:5c:73:27:
         a9:f2:7a:ab:62:a9:00:14:c8:1c:1d:ee:70:54:2e:08:5c:a0:
         f2:f8:7e:cd:6f:5d:f4:5b:0d:1b:dd:af:e8:5c:db:23:66:ca:
         bf:51:7d:4a:69:2a:da:71:e6:53:88:fe:a3:d6:46:51:69:32:
         9b:b6:af:dd:88:de:d7:4f:ab:0a:e9:fa:60:e0:89:1b:80:70:
         a2:1d:1d:f1:0f:f1:8f:30:51:2a:1b:ee:ba:f8:ca:f0:ca:33:
         12:5d:a6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:58:34 2026 by rpki-client