Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
File:                     M_vh3N40HGSYaNQWvz6gAALE3yA.mft (raw, json)
Hash identifier:          5GoLdT70Tlay9eM6BZjmKsBb/FOLXkn/65Yuum1AWyg=
Subject key identifier:   9D:9E:B5:E9:12:01:BF:87:5C:84:B5:60:5E:9F:BB:25:3D:1D:D2:2A
Authority key identifier: 33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20
Certificate issuer:       /CN=F365C754AF/serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
Certificate serial:       03D0
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
Manifest number:          03CC
Signing time:             Wed 05 Nov 2025 03:37:00 +0000
Manifest this update:     Wed 05 Nov 2025 03:36:59 +0000
Manifest next update:     Fri 07 Nov 2025 03:36:59 +0000
Files and hashes:         1: M_vh3N40HGSYaNQWvz6gAALE3yA.crl (hash: wTW/RZ6Qa2b74/UshdZa9lGAhoyzx+ouUE8RSNKe/5M=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 07 Nov 2025 00:06:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 976 (0x3d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C754AF, serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
        Validity
            Not Before: Nov  5 03:36:59 2025 GMT
            Not After : Nov  7 03:36:59 2025 GMT
        Subject: CN=690ac65c-3fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:01:7f:89:7f:0d:c1:7c:61:36:1d:60:a4:b0:
                    6d:8f:41:ad:d5:c5:db:12:23:e3:99:be:03:c3:c4:
                    52:ae:89:bf:e0:c8:c9:8c:41:e8:9b:a1:fb:64:58:
                    42:14:ab:e1:3f:88:c6:ab:62:c3:91:d7:ac:30:3d:
                    0c:bb:ff:8c:12:f7:44:03:1e:2e:43:41:79:e2:b3:
                    81:74:fc:d2:54:db:f9:05:ca:a7:6c:27:34:d8:88:
                    d4:23:e9:c7:69:7f:17:69:e9:e2:74:33:8c:ca:8b:
                    e5:66:76:1f:f6:a5:1d:7c:c3:95:e2:3c:3b:38:bf:
                    bb:ec:3c:25:87:9f:ef:e6:c7:40:5a:10:88:3f:b5:
                    2e:3c:51:b2:20:8c:40:e6:23:dc:ca:b1:b6:63:36:
                    c5:a3:85:22:7e:93:e1:45:e5:98:6d:b6:3d:ee:78:
                    d0:ea:61:81:b8:d4:bb:7f:23:09:24:ff:7c:ca:07:
                    70:f0:43:c7:97:21:65:76:a8:69:25:41:55:2e:4c:
                    91:cf:ee:bc:09:70:fa:e8:8d:6c:f8:b0:d5:a3:c5:
                    c8:89:cb:27:6a:5c:96:40:c0:68:59:d1:67:45:4c:
                    7b:1f:6f:d1:8e:c5:a6:43:5a:de:ff:87:f3:9a:29:
                    65:1d:2d:58:b6:12:38:98:36:d7:52:66:0e:33:cf:
                    f5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:9E:B5:E9:12:01:BF:87:5C:84:B5:60:5E:9F:BB:25:3D:1D:D2:2A
            X509v3 Authority Key Identifier:
                keyid:33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:d8:9b:37:f5:53:67:96:5e:5c:69:22:a1:14:8e:ba:26:
         09:1a:85:d0:5c:d7:84:ef:6d:b6:4c:6d:0d:09:1c:15:82:28:
         6c:98:34:be:0c:b0:eb:8b:4f:01:68:ec:b7:ae:ec:c5:e2:16:
         ae:45:17:ed:c8:16:3b:30:0f:49:4e:b6:87:7e:62:1f:d2:04:
         c7:f9:60:f0:c1:8b:62:cb:04:9e:43:fd:c5:5a:30:c1:a0:54:
         54:bf:a6:f0:04:b9:d4:e9:a3:08:7c:7e:d9:c9:e8:f4:c7:7f:
         ce:13:26:55:20:ed:da:5e:9d:e2:dd:cd:f8:6c:ed:79:9e:f3:
         ee:35:7a:33:75:9a:e5:ea:8e:f7:72:68:ec:b5:35:65:eb:f2:
         3f:3a:68:72:15:a2:e8:db:73:3f:82:b0:7c:cc:69:7d:e1:36:
         45:eb:77:bf:f0:5d:d9:81:32:b4:02:49:5a:9d:f5:fe:f4:cc:
         e0:f5:17:f0:47:d2:5e:ff:5e:cb:5c:c7:27:e7:8d:7d:98:0e:
         b1:da:1d:6a:d5:13:90:0d:36:52:a7:af:ba:88:f0:ec:1f:da:
         64:8f:fc:1d:58:0b:d7:75:68:54:be:2a:2d:9f:fb:fe:18:76:
         ab:e6:15:7d:c5:6b:1f:aa:b2:1e:7d:99:a5:27:b8:16:b7:35:
         e0:5b:6e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:40:19 2025 by rpki-client