Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
File:                     gBdkcAW5GRQgyZGxrgeYtayhTQw.mft (raw, json)
Hash identifier:          nWCzgA0nfK1GA1bdvO6HZL6gobLTElyhE7aS03uU4QY=
Subject key identifier:   8E:88:AD:76:43:15:72:0D:95:DC:78:51:E1:C1:70:48:A4:29:AD:CE
Authority key identifier: 80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C
Certificate issuer:       /CN=F3632CFEAF/serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
Certificate serial:       07F9
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
Manifest number:          07ED
Signing time:             Fri 24 Jul 2026 02:01:52 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:51 +0000
Manifest next update:     Sun 26 Jul 2026 02:01:51 +0000
Files and hashes:         1: gBdkcAW5GRQgyZGxrgeYtayhTQw.crl (hash: o6GWYtWIvq8b5og89/8qJ+BBy0z8TT/qhYsSzU+L92I=)
                          2: 49BADED6E0AF11EBA4AE8C60F8AEA228.roa (hash: bfzLeABKt8iJaNdlc12joZPlW2B3ok9kJhlWiLncwS0=)
                          3: 40E2C4A2E0D411EBB731DB11F8AEA228.roa (hash: iNVwS1o0KwvedAC6eQYfYJ+BAcXsoI+clsk0jnqfrIA=)
                          4: 10C8FFEEE29F11EBAA580947F8AEA228.roa (hash: 387HhPDysnyOhc8pmgAp8wGABIBNWQ6h4D9Qi4Iokv0=)
                          5: 7A4D6530E0D411EB863D3F12F8AEA228.roa (hash: P26YxJOy6uRICshHfktO8hTsp7ut8yCkshcNludKd0A=)
                          6: 254A1146DE4A11EB99E5AD21F8AEA228.roa (hash: +hq36BifBeCSUhyFbBupJ4tam0DEvG9eurBQqxlzAcI=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                          rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sun 26 Jul 2026 00:07:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2041 (0x7f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3632CFEAF, serialNumber=8017647005B9191420C991B1AE0798B5ACA14D0C
        Validity
            Not Before: Jul 24 02:01:51 2026 GMT
            Not After : Jul 26 02:01:51 2026 GMT
        Subject: CN=6a62c790-91de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:86:4d:1f:32:a3:9e:04:e0:71:52:2c:cb:5d:
                    4c:22:57:f1:49:a2:b0:58:03:cf:ec:e7:ae:5c:a8:
                    34:58:99:25:f3:e1:41:1b:03:91:7e:99:c4:33:ac:
                    01:c0:1f:ef:20:cc:09:b9:2b:87:2f:20:cd:76:23:
                    16:12:9c:7f:bd:3f:fe:73:6c:18:62:ae:a4:36:40:
                    78:d1:50:82:43:dc:2e:8b:94:18:12:1f:c0:02:69:
                    48:16:24:2f:a8:85:46:c9:4a:10:7a:5d:e5:3b:41:
                    58:9d:83:03:17:79:3e:31:e0:af:48:fa:79:86:2e:
                    5a:1e:5d:35:96:4b:f6:f6:da:b6:9a:3e:15:fb:75:
                    72:db:bc:aa:01:d0:e5:62:59:a6:a2:cb:ab:3f:f9:
                    06:78:50:ec:2e:3f:ff:28:0f:90:03:ab:46:5a:86:
                    51:26:31:ca:f6:eb:9a:67:6a:1b:90:0d:26:ba:9b:
                    4a:c8:f7:df:4f:6a:de:54:f3:50:77:9b:a1:55:7a:
                    78:e3:9b:aa:3b:4e:22:17:be:85:5e:dc:a5:bf:bd:
                    9f:92:74:21:d5:c2:1c:fb:8f:ff:3f:58:4c:f3:c7:
                    cc:fe:4e:c4:7a:62:3d:62:43:33:1a:59:68:1c:32:
                    60:53:f3:1b:2f:92:fb:55:f2:5f:1e:da:e8:e4:2d:
                    6b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:88:AD:76:43:15:72:0D:95:DC:78:51:E1:C1:70:48:A4:29:AD:CE
            X509v3 Authority Key Identifier:
                keyid:80:17:64:70:05:B9:19:14:20:C9:91:B1:AE:07:98:B5:AC:A1:4D:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/gBdkcAW5GRQgyZGxrgeYtayhTQw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3632CFE/500B2990828511EB80C7EF79F8AEA228/gBdkcAW5GRQgyZGxrgeYtayhTQw.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e6:46:26:78:1d:45:c0:99:b6:73:d0:14:88:7e:c7:45:54:
         39:f9:6a:25:7f:80:28:bf:25:d5:0f:a8:2c:b3:94:25:13:5c:
         cf:f1:a2:e0:06:5d:66:3a:34:b4:39:09:ff:10:4e:50:d2:a9:
         0d:74:f0:7a:22:82:e2:78:ea:bf:02:4f:4d:ab:a7:59:e0:3f:
         11:cd:00:29:5d:02:f0:45:bb:e0:10:8d:29:66:de:6a:95:b2:
         1b:46:37:b7:0d:3d:eb:46:33:ea:1e:a1:de:76:88:47:67:26:
         58:18:cb:63:a1:89:d6:8f:74:e8:32:e7:b9:cd:d9:86:5f:07:
         0f:5b:cc:8d:5f:a2:0a:50:ce:6f:dc:ee:f3:f9:e7:52:01:04:
         19:ed:a8:69:50:51:d4:0a:cd:4a:b8:06:cd:b3:6a:ca:ce:43:
         9f:f8:12:ea:ba:86:2c:b2:12:c0:fd:33:67:a5:8f:e0:17:64:
         0d:1e:1e:0a:92:03:e3:1b:35:6c:67:37:9b:ba:6e:26:40:86:
         12:9b:f4:f6:90:0e:1a:f9:5a:82:51:12:c8:7e:cd:c8:3f:34:
         0f:0e:b5:e6:f9:ae:46:67:7e:64:28:ce:90:5d:cb:01:d5:28:
         05:74:8b:51:b1:88:db:0e:61:ef:e0:a4:55:1d:ee:08:d5:44:
         00:50:87:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:37:51 2026 by rpki-client