Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
File:                     M_vh3N40HGSYaNQWvz6gAALE3yA.mft (raw, json)
Hash identifier:          XnxBT6ETROo2ZvhkUvfMlaciceetuDiu3bY7Z2Ul7x0=
Subject key identifier:   B2:7C:DD:E9:A1:75:E6:B5:01:96:A1:3B:5F:59:82:76:5C:13:4A:B8
Authority key identifier: 33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20
Certificate issuer:       /CN=F365C754AF/serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
Certificate serial:       0476
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
Manifest number:          0472
Signing time:             Fri 17 Apr 2026 03:22:20 +0000
Manifest this update:     Fri 17 Apr 2026 03:22:19 +0000
Manifest next update:     Sun 19 Apr 2026 03:22:19 +0000
Files and hashes:         1: M_vh3N40HGSYaNQWvz6gAALE3yA.crl (hash: c+BvAEPkLWVQJtPr0GJmHRgvFPSV70NUNDLWBU+UH20=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
                          rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:07:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1142 (0x476)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365C754AF, serialNumber=33FBE1DCDE341C649868D416BF3EA00002C4DF20
        Validity
            Not Before: Apr 17 03:22:19 2026 GMT
            Not After : Apr 19 03:22:19 2026 GMT
        Subject: CN=69e1a76c-6adf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f8:ec:23:a6:40:09:df:ba:14:16:04:1b:a4:
                    e6:30:b3:5b:a8:06:ee:34:81:58:48:3f:85:69:bc:
                    11:61:96:47:4b:dd:32:f7:8c:35:b4:53:3e:5a:fa:
                    76:b4:d6:d9:b6:96:39:cf:25:f1:98:aa:88:0c:fc:
                    e5:72:29:2c:09:b3:0c:56:5d:4f:6c:a5:e4:78:ec:
                    7b:6c:1f:6f:fb:54:a1:63:6b:62:5e:d3:1d:84:8d:
                    b8:9c:10:ef:e6:f4:be:d2:50:3f:27:ad:91:9d:3c:
                    94:6e:01:6d:34:06:16:f2:75:82:7d:48:28:6e:94:
                    b5:00:c2:cf:47:f4:20:41:7d:3b:13:85:29:28:ef:
                    59:22:fa:c4:17:65:76:fd:42:17:2e:09:1a:c1:b1:
                    9d:1c:58:45:51:07:ee:24:97:0b:88:20:d0:44:03:
                    d7:c3:a6:29:2e:e1:d5:0a:8d:ef:be:da:a6:0f:f9:
                    98:92:38:43:74:d7:89:f9:db:de:15:f7:47:b9:4c:
                    61:17:07:68:7b:62:68:c0:f6:c8:a2:8b:80:0c:19:
                    97:36:16:db:bd:d4:bf:88:54:60:49:1a:be:eb:a0:
                    0d:b2:0e:59:fb:b8:08:2b:8d:e9:92:61:f1:c3:af:
                    8b:45:98:36:4f:50:e4:73:52:a5:c4:92:c0:e6:a6:
                    60:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:7C:DD:E9:A1:75:E6:B5:01:96:A1:3B:5F:59:82:76:5C:13:4A:B8
            X509v3 Authority Key Identifier:
                keyid:33:FB:E1:DC:DE:34:1C:64:98:68:D4:16:BF:3E:A0:00:02:C4:DF:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/M_vh3N40HGSYaNQWvz6gAALE3yA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365C754/9C2341E8DB9111EDBEBF620C306D8C1D/M_vh3N40HGSYaNQWvz6gAALE3yA.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:c3:74:9f:c4:89:87:64:52:9b:39:16:77:a0:fc:13:a1:b5:
         10:ca:2e:0f:0b:f8:11:c1:74:52:45:8e:25:f7:97:50:2b:75:
         ac:f4:66:df:0a:74:e1:26:55:8f:b6:9e:6a:c6:8b:31:53:1a:
         f8:f4:02:a9:7f:13:fc:98:c6:59:89:af:5b:16:ca:02:99:fd:
         2d:03:ce:58:95:34:9f:89:cb:cb:0d:62:58:7f:75:e8:0c:d4:
         13:60:c4:ba:16:98:28:55:64:81:a7:f9:52:d9:30:1a:ae:1a:
         c1:49:6f:76:a2:12:d6:81:25:0e:20:9e:b3:f9:2c:c5:55:fd:
         40:a6:e2:b9:a7:f8:83:a9:f0:03:89:ff:6a:5d:77:06:84:85:
         f5:46:42:db:04:35:09:2a:17:67:53:80:c7:3a:ba:42:6a:4d:
         96:70:91:aa:32:04:37:ff:6c:7f:25:ef:4b:5a:fc:d9:a0:2d:
         3e:15:65:e1:ec:89:f6:46:5c:b8:eb:d5:24:ba:0a:06:bf:63:
         0a:6f:e0:b3:41:ab:42:20:0b:e8:ee:92:7f:f5:0a:a1:03:5c:
         74:ff:98:6e:33:c8:fe:1e:a9:cb:4b:b6:91:7f:11:30:23:91:
         88:dd:e3:27:51:6b:f4:98:89:e2:55:a9:1c:ff:a0:37:e8:01:
         b8:b0:c6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:49 2026 by rpki-client