Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
File:                     VcSAIZIjODGCUcva0uggjBsiQyE.mft (raw, json)
Hash identifier:          ate9pXSGMs4tSOIuUnFGFneSxr5LEji1OvKJBUTpV0c=
Subject key identifier:   0A:D1:E0:FE:33:B8:5C:34:39:5E:31:93:F7:83:C8:16:44:E8:33:02
Authority key identifier: 55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Certificate issuer:       /CN=F367DA9BAR/serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Certificate serial:       04CA
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
Manifest number:          04C9
Signing time:             Fri 17 Apr 2026 03:09:22 +0000
Manifest this update:     Fri 17 Apr 2026 03:09:21 +0000
Manifest next update:     Sun 19 Apr 2026 03:09:21 +0000
Files and hashes:         1: VcSAIZIjODGCUcva0uggjBsiQyE.crl (hash: LO3hYhZS9eqwbhE7mnjotBW1SJL5u8VIcmqOLTK+rEo=)
                          2: 4CEBE78CABC211ED80A4B483F1222468.roa (hash: RMWNA7CymMg9CNpy2XouqWvp370orj1H39/pzyyz1/Q=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                          rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 19 Apr 2026 00:26:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1226 (0x4ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAR, serialNumber=55C48021922338318251CBDAD2E8208C1B224321
        Validity
            Not Before: Apr 17 03:09:21 2026 GMT
            Not After : Apr 19 03:09:21 2026 GMT
        Subject: CN=69e1a462-84f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:04:da:a0:ed:8f:f4:b3:b3:d8:90:8d:62:77:
                    7a:b5:3f:28:3a:58:f0:0e:98:d2:f3:12:9f:74:ba:
                    43:d5:bd:94:4c:b0:f2:58:b3:57:64:48:a1:38:8a:
                    71:26:cf:66:ba:ec:3a:76:c9:18:8f:e8:ac:c1:f6:
                    f7:84:6a:f0:57:27:02:5b:6e:58:fb:db:b7:99:58:
                    ff:19:d1:3a:ae:4a:11:48:bb:10:4a:20:43:9a:9f:
                    ba:15:66:0e:d6:c7:7c:e2:1f:5a:04:f3:97:93:e5:
                    79:2d:20:04:4b:f5:e4:b5:67:08:3e:69:cc:23:a6:
                    f2:c2:12:f7:69:cc:a2:15:ad:97:36:8f:87:7e:7e:
                    3e:fd:4c:1d:15:57:8e:8b:46:e7:c5:b5:67:1f:69:
                    10:e6:27:84:e7:13:be:b4:ee:d6:fc:85:8e:9b:01:
                    50:ae:e5:9b:3e:38:96:0f:47:9e:ba:42:95:70:e4:
                    70:00:a4:a8:af:b8:4e:dd:4e:28:94:e3:b4:98:0f:
                    12:e9:3e:59:b0:a0:42:3a:13:2d:fe:b5:88:6d:27:
                    47:d1:c8:4d:b8:9c:9e:b6:71:be:df:c7:06:7e:f7:
                    8d:ac:6f:2f:d4:da:77:8a:81:5c:b3:0e:1a:7d:58:
                    7f:e2:a0:0a:51:ca:94:d4:e2:45:f4:0d:3c:d7:2a:
                    59:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D1:E0:FE:33:B8:5C:34:39:5E:31:93:F7:83:C8:16:44:E8:33:02
            X509v3 Authority Key Identifier:
                keyid:55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:d2:ed:f5:4e:ee:85:94:ab:26:42:bc:52:68:b5:21:eb:b1:
         3b:f1:a4:72:f8:76:13:8e:ae:99:fa:70:68:20:f4:1f:19:1b:
         57:aa:7f:50:17:c4:b5:de:ee:e7:a7:77:fb:db:b7:69:77:3b:
         43:c1:de:47:1d:19:68:8f:c1:de:5c:a6:3e:dc:85:be:e5:27:
         ff:5c:24:9b:7d:77:79:e5:7f:9b:10:88:d5:2c:3b:c5:f5:c2:
         e3:a1:b7:aa:40:d1:02:90:ad:f1:b1:a2:f3:71:67:13:c3:4c:
         bb:3c:b4:0c:d4:cc:76:6e:81:f2:27:d1:92:d5:fd:32:d9:2b:
         4f:b3:2b:8c:0f:53:93:b2:e8:69:42:a0:0a:52:4c:07:cb:f7:
         e7:c2:4b:4e:91:73:74:f6:ba:90:63:cd:f3:5a:e5:e3:0c:d2:
         d9:c0:26:18:af:af:27:13:c5:e0:3d:1d:e1:df:94:0c:6a:dc:
         48:04:5b:c6:8a:0f:8a:cc:6e:dc:77:94:91:d1:d5:84:07:9f:
         fc:9c:97:95:f0:77:dd:5d:aa:80:c2:d6:8d:2f:42:2e:36:43:
         37:2c:05:c6:fb:71:dd:07:fc:3a:5b:e0:a5:53:78:01:f3:74:
         c9:14:b4:c6:4e:2f:e3:c7:87:ea:36:1e:dd:0e:8f:70:7d:5e:
         60:04:72:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:05 2026 by rpki-client