Manifest

$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
File:                     glG2X8_012csmHWQ58DLZJ1EwhI.mft (raw, json)
Hash identifier:          WGBe79dMU8sx2VZNh49pHW/JFlGkdfM1Y1iR4gCH9sA=
Subject key identifier:   56:F9:88:73:9F:1A:B8:B3:98:8E:8A:A7:A5:7E:36:F0:17:CF:A5:B5
Authority key identifier: 82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12
Certificate issuer:       /CN=F365E03DAF/serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
Certificate serial:       0544
Authority info access:    rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
Manifest number:          0542
Signing time:             Thu 26 Mar 2026 03:25:03 +0000
Manifest this update:     Thu 26 Mar 2026 03:25:02 +0000
Manifest next update:     Sat 28 Mar 2026 03:25:02 +0000
Files and hashes:         1: glG2X8_012csmHWQ58DLZJ1EwhI.crl (hash: Xz2xDPd3Wwi8lqvaB9dfMdHjMfvUfHyi3AB4JYLEWFA=)
                          2: 63024F1E28B611ED8CF5BD8AF1222468.roa (hash: 4ljd9pI9G7HxkQ3CSXE8wSNVbsWYc0or91A3WwVt9x0=)
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                          rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
                          rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Sat 28 Mar 2026 00:07:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1348 (0x544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F365E03DAF, serialNumber=8251B65FCFF4D7672C987590E7C0CB649D44C212
        Validity
            Not Before: Mar 26 03:25:02 2026 GMT
            Not After : Mar 28 03:25:02 2026 GMT
        Subject: CN=69c4a70f-b346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2f:ea:eb:47:a3:8d:5c:a2:79:45:3e:f4:e6:
                    2a:a3:90:83:4b:6b:89:88:70:26:b9:df:b7:83:74:
                    6c:67:29:96:51:52:e1:29:5c:78:bf:72:dc:be:83:
                    47:64:55:bd:7b:ea:b5:85:81:26:1a:74:f4:e2:97:
                    9e:2d:a5:ba:eb:66:4d:a0:ad:a2:1d:0f:89:1e:f8:
                    e5:f8:82:11:c0:4c:57:a5:47:6a:97:e9:7b:5f:bf:
                    a2:11:11:e9:e6:b7:2b:be:73:66:41:62:21:6c:92:
                    c4:97:c7:7b:60:24:e4:8e:d4:92:c6:ba:84:44:e0:
                    30:96:7e:91:ec:62:ee:08:d4:4d:c8:20:a6:79:b8:
                    e2:83:32:ef:d5:7d:c8:b4:c2:fd:9d:c6:9a:9b:dd:
                    55:45:de:75:03:71:c4:a0:d9:b8:8d:c3:6d:fb:43:
                    a2:27:7e:41:c6:4f:9c:1d:fc:e4:eb:c0:e1:69:79:
                    1b:9e:59:95:5e:91:71:72:9f:49:c6:bb:8f:4f:4f:
                    e7:a1:fb:56:fd:93:93:76:5d:52:1c:de:08:71:2b:
                    7f:3c:4b:dc:ca:76:3e:bd:2f:01:e9:bc:8e:38:65:
                    72:3e:b3:47:ec:74:01:7c:95:5c:da:33:a2:ec:7b:
                    d2:1d:1b:50:82:14:85:64:2a:ad:77:5d:84:aa:64:
                    5a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:F9:88:73:9F:1A:B8:B3:98:8E:8A:A7:A5:7E:36:F0:17:CF:A5:B5
            X509v3 Authority Key Identifier:
                keyid:82:51:B6:5F:CF:F4:D7:67:2C:98:75:90:E7:C0:CB:64:9D:44:C2:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/glG2X8_012csmHWQ58DLZJ1EwhI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F365E03D/5F0CFC18289011ED886D4D94F1222468/glG2X8_012csmHWQ58DLZJ1EwhI.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:4b:a9:90:d5:26:33:dd:a5:7b:db:0a:fa:eb:22:89:53:0a:
         69:57:e6:e8:b2:a7:81:3c:78:24:3b:ad:4c:1a:dd:69:63:a7:
         74:7f:ae:ca:9b:43:73:82:dd:60:44:4b:80:6e:83:ad:9c:d9:
         f0:3c:e2:7c:1a:19:cd:49:aa:7c:17:23:e9:84:2b:4d:dc:cb:
         8a:33:6f:25:dc:e8:ec:41:98:45:d6:c8:b2:59:0b:fd:79:cd:
         6b:ab:71:d6:72:80:68:18:2c:b0:29:60:71:36:18:55:76:c2:
         f2:15:21:87:aa:f3:19:9d:03:bb:4d:da:f1:62:d9:51:ac:ac:
         18:6f:57:0e:9e:be:35:ce:e2:46:4b:8c:bb:3c:44:c9:59:a9:
         9e:47:3e:64:b5:37:97:3d:0d:d5:43:b5:8f:54:d8:ab:8c:bc:
         ce:4e:0a:a3:f9:01:fb:b0:bb:2d:b6:56:f3:31:12:4c:e2:1f:
         53:23:97:d0:02:28:c0:ae:cf:58:61:99:fa:a8:67:99:da:80:
         af:34:48:1b:94:d2:39:ee:1c:ac:68:b5:4a:b4:0d:4e:1e:a7:
         4d:43:84:7c:73:c0:f7:32:72:37:ca:ca:83:75:3b:c3:ae:28:
         7b:c2:8b:09:8c:65:5f:1a:5a:f8:b6:c0:ce:ef:2a:82:8c:6c:
         48:a6:da:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:58:21 2026 by rpki-client