Manifest

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
File:                     GAGTeoaGkejdxAoaQ6Y47cyb134.mft (raw, json)
Hash identifier:          NHiQq+Q3pF2lTkUzRHI30uhCGbj3samxchXmn11YPXE=
Subject key identifier:   5D:F9:23:C7:0C:14:99:31:49:FE:62:33:A1:62:1F:47:34:E2:4E:6C
Authority key identifier: 18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E
Certificate issuer:       /CN=F3645A60AF/serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
Certificate serial:       04D5
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
Manifest number:          04D4
Signing time:             Tue 13 Oct 2026 03:32:57 +0000
Manifest this update:     Tue 13 Oct 2026 03:32:56 +0000
Manifest next update:     Thu 15 Oct 2026 03:32:56 +0000
Files and hashes:         1: GAGTeoaGkejdxAoaQ6Y47cyb134.crl (hash: /zVC6UL8JhtmueGzyiymG1aZWh5fgeKwSEIFZq5shCk=)
                          2: D9BB7DAA119111EE9EC8824F4AD9E6FC.roa (hash: z8n6q+oUQGHtnZrxmlHyDPpdETGxOMXPu63Xt71Wevg=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                          rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Thu 15 Oct 2026 03:32:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1237 (0x4d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3645A60AF, serialNumber=1801937A868691E8DDC40A1A43A638EDCC9BD77E
        Validity
            Not Before: Oct 13 03:32:56 2026 GMT
            Not After : Oct 15 03:32:56 2026 GMT
        Subject: CN=6acda669-801f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:74:c8:7a:a1:fe:c6:b3:55:8c:48:92:2c:ad:
                    8c:32:e7:dc:82:5b:31:1e:db:cb:e9:b5:20:f0:19:
                    f0:c3:3d:85:42:fc:76:1a:b0:f4:87:0e:21:91:f2:
                    be:b9:a2:53:c0:49:8c:bf:06:06:b0:29:18:67:9c:
                    82:7c:ff:11:bf:5f:79:5b:52:8d:c5:b8:4a:59:b6:
                    0e:b8:b9:24:c7:87:93:02:33:e0:23:30:2f:33:47:
                    a5:3e:03:59:15:4e:70:5d:73:84:48:7f:3e:cc:24:
                    5c:c3:63:62:6e:e1:b0:2e:2f:ea:ea:db:5e:34:42:
                    38:02:4a:d4:a9:62:89:cd:b5:7e:74:0d:42:45:19:
                    6c:75:45:ed:f6:c8:b2:a5:d4:b8:3b:e5:1d:91:79:
                    d1:20:f2:eb:1d:a6:35:02:ac:87:85:a1:dc:0c:2b:
                    90:f3:79:f0:8c:b8:0b:c3:3c:62:ed:9a:e6:c7:ce:
                    a8:f6:15:ca:03:93:51:98:aa:61:fe:e8:b4:af:c1:
                    a4:9e:57:73:ee:55:cd:d7:db:f5:d0:b0:4a:40:51:
                    c7:ec:b3:f2:2b:90:b4:7a:4b:8e:38:aa:b0:ca:9c:
                    01:b5:17:1b:37:37:f3:f8:1b:37:c0:06:12:50:3f:
                    10:e5:a2:28:38:f9:ab:18:95:53:5d:c0:72:6b:94:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F9:23:C7:0C:14:99:31:49:FE:62:33:A1:62:1F:47:34:E2:4E:6C
            X509v3 Authority Key Identifier:
                keyid:18:01:93:7A:86:86:91:E8:DD:C4:0A:1A:43:A6:38:ED:CC:9B:D7:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/GAGTeoaGkejdxAoaQ6Y47cyb134.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F3645A60/24BB1812119011EE8D0BC44A4AD9E6FC/GAGTeoaGkejdxAoaQ6Y47cyb134.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:e8:68:f9:0a:f8:1d:7a:89:7c:bd:6f:8b:a4:71:55:52:7d:
         ac:96:a4:e8:61:73:68:30:f7:ac:9d:c5:5a:8f:c9:99:93:5e:
         f7:08:03:b2:14:32:53:72:93:3e:48:b5:c3:71:b7:6d:d1:4f:
         07:e4:98:ec:f9:49:80:1b:da:f7:33:9f:99:d0:c5:20:99:2e:
         9c:36:15:68:7b:a1:e2:6f:b1:04:ce:9e:b0:65:5a:f3:09:8c:
         ff:c4:a7:9f:d3:f0:0c:c9:a3:1c:c1:01:14:c7:d2:c3:6a:88:
         e9:bd:92:83:00:25:cc:37:b9:af:39:91:b0:d5:20:dd:26:5c:
         b6:6d:dd:2a:dd:da:c4:36:69:6b:de:4d:6e:dc:1e:54:69:2e:
         0a:96:4d:e5:3c:88:d3:04:2a:d5:34:57:3b:2d:d4:e1:1e:03:
         37:3f:8a:fa:cb:5a:bf:ed:e4:12:a5:bc:32:7f:f4:a6:6d:f2:
         97:42:5c:b9:6d:49:c2:4c:0f:65:5c:62:40:a2:69:14:90:2e:
         34:a5:a7:33:36:b0:07:40:db:ae:32:55:68:51:05:d9:64:f6:
         a4:1d:64:89:a3:0a:77:2b:c6:fe:5b:d5:48:01:19:b8:c7:ad:
         fa:ed:52:2c:dd:60:6a:33:b7:09:22:3c:b9:e6:b4:8f:2e:8a:
         1c:40:1d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----