Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
File:                     VcSAIZIjODGCUcva0uggjBsiQyE.mft (raw, json)
Hash identifier:          ASHakBmh8R7GV5ybl8keGRzgzxK9XlEQIO35/8XDcUU=
Subject key identifier:   EC:22:8C:EA:B5:05:CB:AA:BB:E0:26:BC:9D:F8:FD:34:29:BC:0A:53
Authority key identifier: 55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Certificate issuer:       /CN=F367DA9BAR/serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Certificate serial:       03CC
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
Manifest number:          03CB
Signing time:             Sun 10 Aug 2025 03:32:01 +0000
Manifest this update:     Sun 10 Aug 2025 03:32:00 +0000
Manifest next update:     Tue 12 Aug 2025 03:32:00 +0000
Files and hashes:         1: VcSAIZIjODGCUcva0uggjBsiQyE.crl (hash: RTPTbMB6moJGI50N5nnIxjPeZHZINcambP7i2KlK168=)
                          2: 4CEBE78CABC211ED80A4B483F1222468.roa (hash: RMWNA7CymMg9CNpy2XouqWvp370orj1H39/pzyyz1/Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                          rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Tue 12 Aug 2025 00:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 972 (0x3cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAR, serialNumber=55C48021922338318251CBDAD2E8208C1B224321
        Validity
            Not Before: Aug 10 03:32:00 2025 GMT
            Not After : Aug 12 03:32:00 2025 GMT
        Subject: CN=689812b1-b3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:00:88:21:1b:6e:fa:cc:36:1c:90:ad:b6:
                    02:41:66:e3:fa:0c:ca:aa:54:cd:fe:dd:7b:1f:ab:
                    7c:25:42:b6:5d:82:69:2b:7c:59:de:87:34:5a:f9:
                    fb:20:8e:e2:77:41:d1:fe:24:fa:61:d2:98:5f:9a:
                    ac:8a:35:b9:05:ee:05:15:b4:38:2f:52:ab:5f:30:
                    7b:8c:db:66:8b:c0:25:50:54:1f:df:e3:c0:f9:10:
                    7e:05:6c:e5:92:04:c6:89:79:be:89:ec:2a:67:dc:
                    42:29:1e:c6:6a:b3:4e:0a:c0:1f:a3:90:4a:56:fd:
                    01:4d:e5:66:0d:c5:bc:a0:3a:c8:79:b3:b6:31:ee:
                    d2:c0:d4:ca:55:46:9e:99:1c:06:d9:08:9d:86:90:
                    ad:1f:65:ad:13:c6:2b:02:03:6d:8e:7f:cf:83:41:
                    84:c0:62:f0:b7:a8:d8:ae:85:68:76:19:16:6f:76:
                    8e:4e:01:b5:5e:e1:51:aa:50:6e:27:ad:3a:78:04:
                    b6:4a:8e:db:7d:30:fb:08:6e:ff:83:05:38:06:1d:
                    68:be:96:0d:83:3e:e2:af:0a:25:5e:83:db:54:bd:
                    5e:21:38:c4:3e:60:6d:f7:28:3b:53:89:0c:5a:45:
                    c3:a2:bb:4e:14:f0:fd:a2:67:60:c6:7e:bf:88:fa:
                    de:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:22:8C:EA:B5:05:CB:AA:BB:E0:26:BC:9D:F8:FD:34:29:BC:0A:53
            X509v3 Authority Key Identifier:
                keyid:55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:26:83:88:3c:9b:33:3f:c7:75:60:40:74:3e:21:36:f0:cc:
         e3:ae:2c:25:47:cf:f9:f2:6b:59:30:5f:eb:3d:88:83:51:06:
         9f:b7:ea:f8:ef:cd:b2:44:34:86:82:06:ac:19:f5:f8:ac:34:
         98:d3:3f:a9:68:b5:7c:ab:d5:78:f8:80:5f:24:eb:e8:5b:aa:
         f3:50:8a:3c:e7:71:e8:c2:dd:19:36:9b:53:51:2f:dd:62:b9:
         9d:70:63:bf:07:3f:18:12:1b:56:e1:c2:5f:22:10:98:3c:5e:
         f8:4c:b3:6d:e4:3b:e8:19:f1:45:ce:45:56:1b:95:d3:85:8c:
         2a:43:43:e4:09:dd:f3:be:1a:c8:ef:e8:fd:5b:51:71:47:0e:
         8f:76:43:4f:f6:2a:cb:0a:55:d4:f7:d0:7d:60:25:45:14:7a:
         78:65:00:bd:80:59:f9:54:da:a5:93:a2:d0:69:06:5b:6e:08:
         a2:0e:c3:e0:a8:80:21:8a:ff:70:4b:ee:e7:e9:60:7d:3b:3f:
         6c:d6:e6:06:53:7d:72:c7:96:a0:b5:a9:18:fa:56:94:fb:c2:
         6b:7b:e6:60:0f:2f:3a:72:e0:61:df:0b:41:f7:c7:96:64:14:
         aa:43:58:b6:80:96:bd:f5:31:67:37:52:c6:50:77:aa:ce:82:
         78:da:f3:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:05 2025 by rpki-client