Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
File:                     VcSAIZIjODGCUcva0uggjBsiQyE.mft (raw, json)
Hash identifier:          8xqwTnVJz8gYWjyWnnAhuQaYTAJ1/OZ9ONpympnlhoI=
Subject key identifier:   A7:55:FC:DA:12:13:AA:F1:33:77:90:6F:80:41:AC:27:5F:CB:A5:2B
Authority key identifier: 55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21
Certificate issuer:       /CN=F367DA9BAR/serialNumber=55C48021922338318251CBDAD2E8208C1B224321
Certificate serial:       0590
Authority info access:    rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
Manifest number:          058E
Signing time:             Wed 28 Oct 2026 03:09:05 +0000
Manifest this update:     Wed 28 Oct 2026 03:09:04 +0000
Manifest next update:     Fri 30 Oct 2026 03:09:04 +0000
Files and hashes:         1: VcSAIZIjODGCUcva0uggjBsiQyE.crl (hash: alM1u8/UFH4bKAzDvWQIWwjPZAN+Gc3UDCWSpNDav/s=)
                          2: 8651F3548EFE11F18C8872F2CE1D38B0.roa (hash: s2JmDXus50oLEEaUALD5HleYNY+S5t45bCkpw9Qi/PU=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                          rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Fri 30 Oct 2026 03:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1424 (0x590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F367DA9BAR, serialNumber=55C48021922338318251CBDAD2E8208C1B224321
        Validity
            Not Before: Oct 28 03:09:04 2026 GMT
            Not After : Oct 30 03:09:04 2026 GMT
        Subject: CN=6ae16751-de65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:69:39:52:38:82:b1:32:9d:37:22:e5:76:dd:
                    fc:6e:94:63:03:1e:17:cb:26:2b:5e:df:82:f9:0d:
                    10:be:c3:5a:45:89:7b:dd:88:23:ac:76:fe:c2:69:
                    96:b4:49:ff:01:10:da:8b:45:34:89:8f:4e:e9:17:
                    e1:96:af:c6:47:14:3d:3d:7e:f4:1f:44:2a:0e:f1:
                    19:58:9c:80:50:f4:0d:e5:0f:d9:49:a7:f5:cd:5e:
                    f8:ae:97:a5:e9:ab:c8:7b:fd:34:30:11:1d:85:66:
                    3d:0a:96:e5:0a:8d:ee:22:6f:d5:7d:fa:9f:b7:91:
                    e3:d6:6c:c2:6a:88:2c:31:b5:1c:6e:8e:09:54:1a:
                    64:35:ed:64:0a:9e:71:2f:21:0e:65:1d:a8:a6:13:
                    ad:6e:47:f4:e9:0a:a7:1d:5d:7c:12:31:cc:61:6e:
                    b1:35:92:4a:b9:8b:cb:87:34:37:a8:38:73:cb:75:
                    06:ac:25:c5:94:82:32:8d:a5:24:96:c7:1f:5f:b4:
                    3c:eb:4f:80:23:83:e4:f7:4e:9b:c6:5a:23:b3:9c:
                    bb:4c:d6:5b:a2:f4:d2:18:09:63:7c:3a:94:7d:d8:
                    e0:a1:a0:0e:a2:6c:d6:23:1e:bb:83:a1:e1:af:ba:
                    d0:74:4d:4d:4a:53:70:bf:a5:b0:ea:b2:5c:d1:61:
                    87:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:55:FC:DA:12:13:AA:F1:33:77:90:6F:80:41:AC:27:5F:CB:A5:2B
            X509v3 Authority Key Identifier:
                keyid:55:C4:80:21:92:23:38:31:82:51:CB:DA:D2:E8:20:8C:1B:22:43:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/VcSAIZIjODGCUcva0uggjBsiQyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367DA9B/9F9BF08C964911ED8A168AF4F1222468/VcSAIZIjODGCUcva0uggjBsiQyE.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a1:c4:b4:fb:59:ea:36:25:cc:a0:da:64:52:c1:14:83:05:
         5a:e9:6f:d5:da:6c:e8:d1:22:40:69:c2:7e:ba:e0:63:44:3f:
         c3:fc:c1:10:98:f7:4b:db:b2:70:8f:8a:35:b9:e2:48:24:09:
         02:af:a1:ad:44:59:13:83:cc:ce:d4:ac:a6:5b:53:3a:61:a8:
         a1:1f:40:b6:71:cf:4b:5f:1b:b5:ef:59:6d:28:40:fd:cc:68:
         16:fe:d6:12:c9:39:b2:3c:2b:49:10:a6:c1:51:70:6a:4f:aa:
         51:0c:80:2a:fa:01:e9:cb:67:6f:57:02:fa:56:a3:27:ca:e5:
         46:63:4b:c1:32:7e:f2:0d:09:80:95:ab:0d:51:2a:a0:92:c6:
         b2:e6:72:55:f0:01:37:97:5a:65:c5:0f:ac:8b:79:c8:c0:3d:
         af:9f:d1:12:58:f4:bc:f6:42:c2:c9:0d:a6:b9:26:25:35:b5:
         73:18:1e:e0:ee:42:89:77:87:0b:44:2e:8a:a1:38:c4:af:90:
         8b:e8:0f:47:c2:36:96:24:ba:99:c2:76:b3:56:bf:8d:d3:eb:
         67:20:b5:57:7e:79:13:79:36:6b:48:a3:e8:7d:80:0f:87:f5:
         fb:22:4e:1e:8c:6c:3a:1f:57:39:71:bd:ac:7e:ee:d7:ee:6c:
         55:2f:e4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----