Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.mft
File:                     GD-ldf98lx8WCL36X7u0jhajJkQ.mft (raw, json)
Hash identifier:          l886bMij6FtJQExvDrkO17zNmYfMyshUwjHZ5/MAAL8=
Subject key identifier:   93:1A:15:DC:05:20:D0:10:D8:6C:B1:17:C9:D4:55:76:D9:ED:30:31
Authority key identifier: 18:3F:A5:75:FF:7C:97:1F:16:08:BD:FA:5F:BB:B4:8E:16:A3:26:44
Certificate issuer:       /CN=F363A843AF/serialNumber=183FA575FF7C971F1608BDFA5FBBB48E16A32644
Certificate serial:       19
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GD-ldf98lx8WCL36X7u0jhajJkQ.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.mft
Manifest number:          19
Signing time:             Sat 14 Nov 2026 06:02:54 +0000
Manifest this update:     Sat 14 Nov 2026 06:02:54 +0000
Manifest next update:     Mon 16 Nov 2026 06:02:54 +0000
Files and hashes:         1: GD-ldf98lx8WCL36X7u0jhajJkQ.crl (hash: 2XTnIkPgiLyDtDXyQcGLk+byIiOs79ELSUAUlN+3VJk=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GD-ldf98lx8WCL36X7u0jhajJkQ.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Mon 16 Nov 2026 00:08:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F363A843AF, serialNumber=183FA575FF7C971F1608BDFA5FBBB48E16A32644
        Validity
            Not Before: Nov 14 06:02:54 2026 GMT
            Not After : Nov 16 06:02:54 2026 GMT
        Subject: CN=6af7f98e-3c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:32:3e:7c:13:7c:d8:c3:de:6b:75:e5:26:
                    9a:67:3a:c4:ea:f9:e6:d0:04:c2:4a:07:b2:ea:df:
                    2f:7d:57:ec:71:7b:8f:75:6c:e0:ac:ad:45:18:1d:
                    69:13:25:19:de:3a:10:9b:77:11:22:92:f7:ff:90:
                    a6:28:14:f5:ad:a0:b9:5e:9a:5c:e5:62:29:c0:bc:
                    97:b1:5d:9d:24:20:da:8b:b6:72:ad:39:ab:ad:31:
                    1b:df:09:62:c8:f4:ed:26:51:1b:98:f9:ad:e4:7b:
                    a4:48:4d:41:6b:89:ec:a5:48:7b:08:bd:16:0f:70:
                    53:2b:3d:12:80:e9:f6:72:ff:eb:bf:c3:a6:a7:04:
                    a6:5a:6a:09:71:4a:ca:f5:59:c4:af:1a:91:a6:c5:
                    9c:d9:78:30:e8:14:77:b6:ed:7a:66:38:a1:73:c9:
                    30:ba:ef:74:11:ac:b9:fe:20:10:47:7e:e7:9b:59:
                    fb:f5:ef:a3:b7:f1:5e:cb:4d:02:eb:04:bf:27:57:
                    1c:6b:de:34:ac:39:13:ec:2f:40:57:e1:fb:27:2c:
                    28:54:fe:5b:d9:c5:a1:fe:cd:41:39:b8:3f:6e:72:
                    81:17:03:cc:90:09:45:76:3f:c7:04:e1:c7:c5:63:
                    e1:85:e3:98:69:35:3f:48:a6:b0:2f:11:5e:0a:fc:
                    d6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1A:15:DC:05:20:D0:10:D8:6C:B1:17:C9:D4:55:76:D9:ED:30:31
            X509v3 Authority Key Identifier:
                keyid:18:3F:A5:75:FF:7C:97:1F:16:08:BD:FA:5F:BB:B4:8E:16:A3:26:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GD-ldf98lx8WCL36X7u0jhajJkQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F363A843/FFBE1C24CD4A11F1BDFD6DF0CE1D38B0/GD-ldf98lx8WCL36X7u0jhajJkQ.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:01:14:a7:4e:d1:7a:89:54:8e:ab:92:a7:f9:c1:55:36:55:
         6d:7b:d9:bd:49:54:e1:ec:4d:a1:f4:c5:24:d1:bb:5a:c2:ed:
         e7:a1:fd:83:e5:26:14:c4:de:05:ae:5d:e1:d8:0b:98:e3:7a:
         de:47:5d:54:bc:cd:d1:3e:db:5d:46:b5:74:4a:22:b0:55:2a:
         35:20:b3:f9:dd:d9:13:90:35:5b:42:b5:be:57:17:fb:86:d1:
         23:a2:b6:6f:48:da:52:cd:77:cf:d1:f0:5b:d0:7e:22:07:2c:
         24:57:bf:be:bd:57:c1:ce:a6:13:53:6e:07:db:fc:5c:85:55:
         61:b0:d4:b4:0f:4d:40:17:bd:f2:a6:0b:73:51:57:7c:8a:cb:
         19:63:83:48:f0:93:a0:c7:d9:54:31:e1:c1:18:a7:99:f7:92:
         35:ca:c5:c4:dd:10:1c:64:88:ce:08:7f:0a:91:9d:4f:b5:87:
         72:7d:47:98:c1:49:dc:7c:04:c8:c3:ab:72:a5:1c:d4:1d:1f:
         5d:db:3b:ca:6a:6f:e6:5e:d9:b9:65:9b:e5:a9:16:8b:5e:f2:
         b0:66:e8:2b:78:21:2a:de:5b:bf:18:d3:4f:06:64:27:94:53:
         1a:4c:28:10:72:dd:13:2a:11:03:ea:de:6e:13:61:a5:18:64:
         86:e3:ac:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----