Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F361FA1F/331352E263C011F0BB4DE09ADAE4EC9C/VCngPBW2kSQG5ZWlotltSSQPrAk.mft
File:                     VCngPBW2kSQG5ZWlotltSSQPrAk.mft (raw, json)
Hash identifier:          IvR70D9q348aMjurDiyRNOiFBOTXdG7fDdsRVS0GlW0=
Subject key identifier:   87:D8:25:87:5E:0C:E5:BB:5C:91:B6:35:91:2A:6C:96:84:88:73:B0
Authority key identifier: 54:29:E0:3C:15:B6:91:24:06:E5:95:A5:A2:D9:6D:49:24:0F:AC:09
Certificate issuer:       /CN=F361FA1FAF/serialNumber=5429E03C15B6912406E595A5A2D96D49240FAC09
Certificate serial:       40
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/VCngPBW2kSQG5ZWlotltSSQPrAk.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F361FA1F/331352E263C011F0BB4DE09ADAE4EC9C/VCngPBW2kSQG5ZWlotltSSQPrAk.mft
Manifest number:          3F
Signing time:             Wed 17 Sep 2025 05:06:42 +0000
Manifest this update:     Wed 17 Sep 2025 05:06:41 +0000
Manifest next update:     Fri 19 Sep 2025 05:06:41 +0000
Files and hashes:         1: VCngPBW2kSQG5ZWlotltSSQPrAk.crl (hash: rVY84LasHrJmJ0QoRjvK22MPJPS3azkxpb4PvLv9JVo=)
                          2: B206F72063C011F0821CF49EDAE4EC9C.roa (hash: 2ME0DSdwIVYEEQ4M/Z8WDIVKNMg+bnP2LGB8V64oaDk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F361FA1F/331352E263C011F0BB4DE09ADAE4EC9C/VCngPBW2kSQG5ZWlotltSSQPrAk.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F361FA1F/331352E263C011F0BB4DE09ADAE4EC9C/VCngPBW2kSQG5ZWlotltSSQPrAk.mft
                          rsync://rpki.afrinic.net/repository/afrinic/VCngPBW2kSQG5ZWlotltSSQPrAk.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 19 Sep 2025 05:06:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F361FA1FAF, serialNumber=5429E03C15B6912406E595A5A2D96D49240FAC09
        Validity
            Not Before: Sep 17 05:06:41 2025 GMT
            Not After : Sep 19 05:06:41 2025 GMT
        Subject: CN=68ca41e1-61e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3b:71:e9:d5:a8:25:e5:05:10:d6:8c:ec:de:
                    e0:ed:50:cb:7a:56:a4:77:60:4a:4b:b8:50:d4:26:
                    8d:35:5d:b8:63:b6:4f:3e:d5:46:18:3c:15:79:11:
                    09:79:a1:a8:60:fa:05:4e:11:36:88:85:9a:57:a7:
                    99:2a:b1:d7:b5:41:79:e9:46:76:62:28:08:bf:a9:
                    40:05:b6:bb:27:85:68:f3:cc:82:5a:88:0d:7f:a9:
                    91:32:a6:7b:03:ee:a0:f9:a9:9f:f6:17:5e:3c:c1:
                    a1:1f:ad:3e:b0:0c:33:f1:53:24:d5:f2:66:e0:66:
                    82:f2:29:a5:ce:7c:1f:9d:62:b4:99:d1:24:ad:f6:
                    83:3e:1f:61:07:be:37:c9:7a:75:16:c0:7c:24:ef:
                    95:76:4e:a8:0b:b7:b6:63:db:90:70:dd:c3:71:8d:
                    89:24:3a:4f:f4:4f:29:c0:4c:a5:78:7a:f5:6a:f2:
                    09:20:0b:13:76:24:ff:52:a6:39:13:be:60:18:ec:
                    88:42:5e:92:ec:64:47:c5:c2:45:58:e3:db:a6:4b:
                    f7:50:cd:c8:4d:cd:4e:5d:f6:7c:75:f2:2d:2d:14:
                    08:ea:ef:05:33:96:ec:57:fe:bc:90:1b:d3:a1:d3:
                    54:d3:e6:ed:eb:0b:9e:78:34:e4:aa:cc:38:e3:e6:
                    73:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:D8:25:87:5E:0C:E5:BB:5C:91:B6:35:91:2A:6C:96:84:88:73:B0
            X509v3 Authority Key Identifier:
                keyid:54:29:E0:3C:15:B6:91:24:06:E5:95:A5:A2:D9:6D:49:24:0F:AC:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F361FA1F/331352E263C011F0BB4DE09ADAE4EC9C/VCngPBW2kSQG5ZWlotltSSQPrAk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VCngPBW2kSQG5ZWlotltSSQPrAk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F361FA1F/331352E263C011F0BB4DE09ADAE4EC9C/VCngPBW2kSQG5ZWlotltSSQPrAk.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:3c:86:13:a3:90:a4:95:0a:81:c8:a3:e4:a9:7b:26:95:57:
         3b:28:23:df:37:74:1a:ed:b3:52:81:0a:ef:1d:43:b0:3c:bf:
         18:72:17:a2:fc:9c:84:00:ef:6d:8b:8c:c2:17:ce:d2:da:04:
         ed:55:d7:68:80:2a:9c:f1:3c:c0:62:17:e0:ca:f2:7d:0c:7d:
         fc:2b:e0:35:2e:b3:1c:9a:6e:97:58:1b:1d:48:d3:65:d5:00:
         72:51:21:8f:0d:12:eb:09:64:0a:64:fa:30:67:4b:3a:ac:7b:
         78:55:27:d6:ba:90:62:9b:93:59:2e:73:19:79:3c:4f:a9:7e:
         61:93:a7:47:22:a1:fd:30:2a:69:e6:d6:9f:94:34:1d:19:4c:
         0f:a9:8a:9b:04:f7:4a:25:cd:99:a8:66:29:c7:34:7e:73:b6:
         35:10:1c:c3:22:89:7d:b0:c1:0a:b8:0c:41:32:04:35:8d:51:
         9b:b2:11:f1:5f:fb:9e:d3:52:d6:d9:01:de:bd:23:a3:ee:a0:
         60:02:10:57:99:df:cd:11:36:55:7a:71:7c:54:72:b4:37:66:
         e7:2d:60:7e:7b:9c:4f:c0:b5:b7:62:91:c8:c6:21:1b:56:87:
         22:ce:01:52:5c:99:ae:5b:38:cf:23:93:66:7b:06:58:f0:2d:
         05:75:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 23:34:53 2025 by rpki-client